Big Discord Servers are Getting Hacked! 

hi

​@@Gromn hi

hi

hi daddy

hi

Reminds me of my friend who somehow “accidentally” watched CP, I still to this day have no clue how they came across it

​@@Soul.Resonant Honestly tho, I don't know your friend's circumstances, but my friend got sent an invite to a random discord server, joined it, and realized it was full of CP, he immediately left, but didn't report the server, so he got his account banned and was forced to make a new one.

@@webpombo7765 bruh what if he forgot to report it he had to get banned fr

@@Soul.Resonant That can actually happen. One time someone posted CP in a facebook group I was in. It was removed real quickly, but it was still there long enough that hundreds of people saw it.

7:08 first message HaRaM

Lmao aren’t you the sbs mod 😂

bro, 14/16 servers with 8 year old mods? jesus you need to find new communities

​@@RubyPiec Facts bro

@@RubyPiec touché

they deserve to get hacked then lmao

imagine being slandered in such a terrible way and then your favorite youtuber saves you

mate you have a bug hunter badge and still fell for it xDDD

That makes a bit more sense

smartest beluga fan. how dumb do you have to be to get hacked on discord

35 likes omg

Even google themself one of the tech leader can't get their shit together. You would think their security measure is top notch, but account hijack by stealing session token is common. There should be a way to prevent these, prompt user to input their password if recent country/device change is suspicious for example. I think they already have similar mechanism in their gmail.

Alright Mr developer, what do you propose as an ease of use login system :)

Just look at their xss vulnerability they had some time ago lol

@@redbuIIracing33Crate true I mean they already have access to our geolocation I am quite sure - so why not just log the one used to sign up the account and match the other sessions.

​​@@ulize. If you login on discord from different IP or from the unregistered ones, discord will ask you to validate the IP using email but I don't think that goes the same for logging in through the Authorization token. I'm not much knowledgeable about the back-end stuff right now but i think they could literally set it up that even if someone uses token to login they should first verify the session and if the session is not verified under a given time then the token should be renewed though that would make the user logout of all the devices but at least their account would be safe. PS. I just read what discord does to stop unauthorized use of token, Discord does have some security measures to prevent unauthorized use of tokens. For example, if Discord detects suspicious activity on your account, such as joining multiple servers in a short period of time or using third party clients or modifications, it might ask you to verify your account using a phone number but there's a big "MIGHT" in it. And what i was saying earlier about verifying the login even if it's a token session would apparently defeat the purpose of tokens 💀 like it would be a little inefficient, though I'd rather have a little inefficiency then having the account security compromised but i can understand that average user wouldn't want that inconveniency as everyone wants to ease their ways to access stuff the companies do give them ease but with a big "MIGHT" compromisation.

❤

@@randdev omg Rand is here

@@randdev yo rand

​@@arrax_s if its not the same how tf are they gonna have any idea who you are 😂 r/theidiotgallery

​@@arrax_s hes not god dawg 💀

​@ItsPaleAle so if got hacked and banned from the server, you deserved it because you were in another server that i dont like? Grow up bro

@@EirPlen Facts

That's what u get for being in cringe belugang server

​​@Vixy Skonk did u like ur own comment (AND DONT MAKE AN ARGUMENT FOR 500 COMMENTS)

@Vixy Skonk okay 👌

Unfortunately the console is bound to the browser you're using instead of discord itself so they can't really prevent it from being opened

@@Refferixz they cant prevent it from being opened, but still print out a warning message inside the console saying "if someone told you to go here you might get hacked"

@@brightblackhole2442 I'm pretty sure roblox does that actually when it comes to their tokens, so that'd be a solution for sure!! while it won't really prevent scams it'll still make ppl more aware

I remember trying to mess about in the console and that message was there, in huge red letters. Did they remove that? Weird.

​@@defectrobo2637yeah, I also remember seeing it.

there are actually hidable chrome extensions to keep inspect element changes the same client side

@@saiv46 or just use a phone..

@ArticleSand2 this dude when someone tells him to click the extensions button: 😨

​@ArticleSand2 It's really sad ;w;

@@ulize. firefox and chromium are open source, modify the extensions button to display a fake extension list, recompile it and use that fake version, easy

Trans cat 🏳️‍⚧️

the neck crack rate is already 50%, we are halfway through

Unless you're trying to be silly

I would rather say: Don't open it when someone tells you to open it

mainly never for randoms in a discord server or any one in general.

rule nr 0: if someone ask u anything, say Hi im joe moma pls call back and ignore that person

But where else am I going to be able to get my computer to calculate 1+1 for me? (Yeah that's the console, but same deal.)

Not enough I guess, turn off dms and you've done it

Set up an authenticator on a personal device. Whoever logs in needs the authentication code from that app on your personal device. Idk if tokens can bypass it, but it would be worth getting

​​@@Kora_Cheri tokens do bypass 2 factor auth. It's the code telling the site or app what person is logged in. It can be refreshed, and changed, but an active token is basically the account, and that's how they log in. If anything "requires" you to check your inspect element console, and send what you see in it, it's a scam. Clear and simple.

​@@Kora_Cheri tokens bypass 2fa, a token is what allows you to be automatically logged in so if someone has your token they can just paste it as their token and be in your account

uh there is actually only if the username is too famous

Most of the times the ones that get hacked are actually 12 years old themselves

imagine being in a public server

They love the thrill.

Eh well true most youngsters now are use methods the common person oddly don't see as malicious or as a red flag. And commonly many scammers use social engineering tactics to butter you up with small talk and gain you're *TRUST* mostly to see if you know you're stuff. Sad were in this age of harmless communities are raided to script kiddos mess with people with this being the digital age many should be more skeptical but *shocking majority ain't*

i think they are angels irl,i mean, nobody can mess up with american cops, lol

@@aoeGamingAEGIS no

@@KwikBR t90depends (search fortheemote)

It’s not social engineering it’s social doodling 💀

don't be silly, it's discord

Google en passant

​@@object.toString holy hell

Pretty sure its the easiest thing ever to get the same name and tag as original accounts

this is why Big servers ask for recording

Always has but, you should just always be skeptical and second guess random DM's and *DON'T CLICK LINKS* to 2FA isn't iron clad and can be bypassed but wild some don't get that y you're browser store you're account login's (via cookies) and there's many red flag signs no one should fall for!

@@SaltyMon videos don't do anything

@Ohioan17 They been effective where I am at, not sure what you mean "doesn't do anything"

really?

@@photosynthesizehi valor 🥰🥰

EXACT SAME PERSON? LMFAO

@@IHaveBeenDoingTaxFraud googie

Thansk for explaining couldnt find anything of what was going on!

Heard from another sot server that one of the moderators might've been accused of being a pedo just like with the other server in this vid, so if that ends up spreading just be aware that it's probably bs

@@orion9997 yeah I saw some screenshots, and while I don't know the mods personally like irl, they're of no concern to anyone else's safety. The shots were obviously faked, they couldn't even get some of the basics correct.

DADDYGENT

@@rizenstudios what the fuck y u callin him daddy

@@rizenstudios imagine💀

@@Oblivio_21353 Olivia

uwu

could u send it somewhere lolol

can you upload the highlights when you have time? Would laugh my ass off

@Majeed's Gaming Yep, I'll post it once I'm home, should be up by tonight

ooooooo i want to see

Slide

well well, look who we have here :betterthan:

​@@acrazyedu8831your mom

zheeomery jash

Hola david

Informated

It's fake kid, relax.

Full stack

what was the raid server? do you have a invite im curious

Belugas sever in its current state didn’t deserve to be as popular as it is, but at the same time it didn’t deserve to be hacked

Beluga sucks as a content creator but that isn't a justification for them getting hacked either

good thing steam support works

​@@BueorrFalhen its a shame they don't ever lift permabans though- same thing happened to me and while i got my account and games back, im vac banned permanently in all valve games. its been 8 years and i havent been able to play a valve game online since.

Tbh this sounds like the "oh no I accidentally reported your steam account" scam. You won't get banned if you ignore their scare tactics.

@@treylinazerros159 Oh yeahh I got this one time, but I wasn't stupid enough to fall for it, I just said "oh I'm sure they will look into it and see I'm innocent", I was kinda suspicous of them, so I decided to look it up online and sure enough, there were posts about this scam. I made sure to give them some kind words then blocking and reporting them

Are u chaos

@@rizenstudios I think he is, java

I empathize with you

Bro he got his crypto taken away? They might as well have taken away nothing

@@Dylan781 Actually they held him hostage as he was a rival sim-swapper. Beat the hell out of him too.

was it uploaded on hoodsite or any other gore site? or was it just the shooting video?

nowadays 2fa is not even enough. cause of using tokens or cookie to bypass any authentications

For your 1st suggestion, I think there should be an option to toggle that off and on, since a lot of people use VPNs. I don't think the 4th suggestion would be good, since it's inconveniencing the whole userbase for something that a small fraction of people would fall for.

It's so easy to have 2 tabs of it open for whatever reason, that seems like a dumb limitation

1. IPs are not magically associated with locations, additionally most people don't have stable IPs, changing daily or even more often when traveling and hopping between infrastructure providers. 2. Opening 2 tabs is a very regular occurrence, for example, if you click on message links coming from other applications, they will be opened in a new tab. Maybe a token having sockets open from multiple IP addresses could be a valid indicator. 3. Would be interesting to have this for high risk accounts. 4. Personally, I'm logged in on more than 10 devices, this would be a giant annoyance. 5. This can trivially be circumvented by also stealing the User-Agent header. 6. This seems like a good idea, requiring big actions on big servers to be authenticated a bit more, than just being logged in.

For number 4, just do it at times when the user has gone offline and then it suddenly goes online

I doubt they were the ones who actually shot at the house. They probably just got that video from somewhere and thought it was cool or edgy to send it bc they have the mental maturity of 10-year-olds

@@kingacrisius Either that, or the video is fake. The muzzle flashes are unlike anything I've seen before. Although, I'm not a gun expert so it may be real.

@@thebuzzybeeking air gun with flash contact powder

This made my life better and my dad reappeared, thanks!

@@zgamez129 Or If Some Hacker thinked of DOXXING you DOX them Back And Put Some Swearing and Bets of putting a Knive To the hackers throat and do brutal kills on him. that will make the hacker Scared for his live

Already did.

​​@@Kuzuki_real are you 5 years old dawg

please not telegram

xdxdxd

ong

Rip bozo😊

so many languages and you decided to speak in facts

W moment in life

Beluga is cringe yes but not a single server deserves to get hacked (except the illegal ones)

Discord doesn't have control over devtools. Thats browser side. They already put a warning in the console which is all they can do. They don't want you to be able to see the token at all.

Nonce refers to "Number used once" in this context.

🗿🗿🗿

Return to morse code

but u can't paste links into yt comments, lol

youtube comments 💀💀

@@aoeGamingAEGIS you can

nah i think we should switch to guilded ngl

And they revealed rand’s name