> Discord is spyware that looks at every process on your computer and I'm sure they are using/selling that data
Is there solid evidence that supports this, or are you saying it based on intuition?
Is there solid evidence that supports this, or are you saying it based on intuition?
I started getting blasted with YT recs for weeks for a channel I had never heard of, never watched, had no real common connections with ... until someone referenced them in a conversation on Discord.
Now, you can shit on that as anecdotal or "intuition" or whatever, but come on. This is HN. No one here is ignorant about the level of data sharing that goes on in the adtech space, and everyone claims they don't until Gmail's selling you ads based on your emails.
It's not like someone's just argued that the president is a space alien. We're talking about suggesting a for-profit internet company is doing something that literally damn near all the for-profit internet companies do and have done now for decades. The bigger question is to how anyone could be so credulous as to assume they are not.
With "refusal to delete messages" being a clear violation of GDPR, I think it's fair to assume fishy things are going on.
There's a reason they shove the app down your throat even though the website works perfectly...
That there are several articles about people reverse engineering the client and protocol and nobody else has brought this up, I feel pretty comfortable calling this unfounded unless you can provide some indication otherwise.
You would have to show all network activity from the app never includes this type of information or anything derived from it, because as soon as anything goes server-side it can be used for anything. Is this actually easy?
All any of the people claiming that discord is spying on you need to do is capture one packet going out that does have that sort of information, or find one piece of code in the client that supports doing so. That is the part that I think would be relatively easy given that it's primarily just a gob of javascript in a chromeless browser.
But that's the point. There is a "server" running on your machine that is snooping on your processes (therefore the one-click integrations). The "client" you interact with never sees this info, instead just what the "server" exposes to it, so I claim you'd need to reverse engineer the "server" or wireshark your network and read probably-encrypted communications...
Given that that information does go to the server, there's no way to know what it's used for.
That "given" there is doing a lot of work. I've never seen any reference stating that it's sending the entire process list anywhere.
The current third party protocol implementations all expose setting the game/activity you're playing directly, sure making it look like everything is done client-side.