Hacker News new | ask | show | jobs
by c7DJTLrn 1890 days ago
It sends a list of running programs, including the command line arguments to the server. It's worrying because although it's bad practice some programs get passed credentials like this.

With regards to Discord's invasion of privacy as a whole, I'm not sure if it's malice or incompetence.

2 comments

For one thing, command-line arguments are public information about processes in every OS since forever. Putting security-sensitive information there is a fault of its developers, not Discord.

For another, Discord spies on the system to report what games you're playing, including which mods. It's a cool feature for some, but indeed requires a set of abilities that are indistinguishable from malware.

it doesn't send anything like that anywhere. it matches a list of executables it downloads with what it sees running, to determine if you are running a game.
One of my GDPR data downloads contained a list of programs I had ran along with the command line arguments. Not sure how you can explain that if it's not sent to the server.