Discord is Stopping Malware, but Keeping Infinite Storage

[@deedikjepijn]

Hey love the content. I would love to have a way to support this channel. Would you consider adding some kind of donating system? I would love to provide support for the content you are providing me with. Hope you have a great day ❤

[@devdetour]

Thanks for the kind words! Right now, truly the best thing you can do is just watch my stuff, and if you really like it consider sharing with your friends. I'm thinking about other ways people can support my channel but I want to be really careful about monetizing and not do it too quickly/aggressively. Probably I'll do something like a Patreon at some point in the future, but before that I want to build more of a track record of making good content on a reasonable timescale, so people know exactly what they're supporting (and it won't all be Discord-related stuff!)

[@lackofquality]

sorry to say this but I suspect that this comment might be botted

[@deedikjepijn]

@@lackofquality I was afraid someone would think so, dont think a bot would reply tho

[@deedikjepijn]

@@devdetour sounds great, my comment was because you already have provided me with content and I would love to give something back for it. Hope you keep making the amazing content, make sure to let me (and others) know if you ever decide to make a way to support (give back for the content provided by you)! Hope you have a nice day ❤️

[@soejrd24978]

@@lackofquality User seems legit

[@Sammysapphira]

This change is great in general and I agree that it's necessary for the long term viability of discord, but sundowning old links is something that should not be excused. Lots of people have critical material that they uploaded on discord, not even to abuse the CDN in a massive way, but thing like discord channel guides with images that are posted onto other sites like reddit/etc. Lots of comment solutions link to image guides from discord servers from support communities, etc. Now that people know that discord won't allow access of the CDN outside of discord, it's ok to disable that stuff after X amount of time, but it's never ok to dig a massive chasm into the internet with dead links. There are just too many photobucket, gfycat, and tinypic links that are totally dead. I've run across "Here's the solution!" and it's a dead img link too much in my years.

[@kreuner11]

I noticed the weird stuff on the link and kept removing it because I though it was some tracking thing, but the links kept working, so are they really doing all this?

[@IntensiverPinguin]

@@kreuner11 Probably not yet active

[@Maxjoker98]

You could implement this as a FUSE filesystem, or a 9P network filesystem, and actually mount this like a real filesystem. Bonus points if you make a minimal network-bootable initrd.

[@cosmicspice9477]

Id love to see that fr

[@algj]

​​@@osparavsame, I'm super happy with my file system :3 random reads/writes are amazing

[@alfiegordon9013]

Lmao being able to mount a discord link on my 9front machine would be hilarious And probably pretty useful as well

[@maalos]

i did that a year ago!

[@alfiegordon9013]

@@maalos oooh, is there a git repo for it? I'd love to try something like that out

[@iflyplanesthrutunnels]

the tquitexithowdoiclosevim got me dying

[@umbreonben]

ahhh your editing style is so cool - I love the whole terminal thing this is awesome

[@Logilype]

Terminal thing is Linux, screen recording is on windows, backfired very quickly

[@chlorobyte_projects]

​​@@Logilype...I don't see windows in the video? edit: nevermind, shows up for 1 second at 0:10

[@GalaxyTheReal]

@@Logilype This doesnt change the fact, that he likes the whole theming :)

[@umbreonben]

what backfired exactly? You can have 2 systems at once. The theming is not broken because of this, it's still a cool idea @@Logilype

[@umbreonben]

yeah@@GalaxyTheReal

[@captainpoptarts]

i use discord as a way to send images uncompressed on text messages, and sometimes it is useful to have long term storage via these links. hopefully, this is not interfered with with these changes.

[@valkyrie_pilot]

unfortunately it will be

[@itsnotmily]

images are compressed on discord though

[@ewan_animations]

just watched the original video and holy hell the luck of this being uploaded just after i finished the first one. i might try implementing a similar thing now lol

[@thatoneguy1924]

Me too

[@mateenbaig9146]

me three

[@Troquel519]

same here

[@Nick-79]

same but 11hrs after

[@carazy123_]

Same

[@yuvie9588]

perfect for backing up all my artworks

[@addaniel226]

Every CS student's dream personal project to put on their portfolio. Very cool idea & script & video man

[@theaiguy_]

Bro, you could probably make a freaking heap with that

[@haonnoah]

"hm" is HMAC, its a hash using a shared secret of the other parameters. These are referred to as signed URLs.

[@de-y]

I love that the image that you uploaded is just a random DALLE picture of a snail

[@mathewboyd903]

I love the content man, i am excited to see whats coming up next!!

[@niklasgs1470]

Really good video! Learning about IT-security too.

[@404UnknownError]

I saw the first video and i really liked it, congratulations for those 655k views! keep doing videos like this is pretty interesting :)

[@richajivevo]

I love Discord because of this exact reason. Sad to see they started changing it because people are abusing it

[@vleesevlons]

You're abusing it

[@judef]

You're one of the people abusing it bro

[@vleesevlons]

I love how old files are fucked

[@rowebil00]

I’m surprised discord didn’t have this already implemented years ago.

[@xooq_]

they probably wanna scan all your files for ai training

[@rowebil00]

I just finished watching the original and now saw you uploaded this follow up recently so that’s weird, good timing I guess.

[@idontknowwhattoputhere5669]

Was just watching the original video and saw that you uploaded this video 1 hour ago 🤤

[@chara5]

How will this effect data packages? I recently went through my data package and downloaded all the cdn links contained within (they refuse to include this data in the package, only providing links to it) Given it takes them like a week to even fulfill your request and email you your data, wouldn't those links expire by the time you receive it, making the data become partially useless?

[@hacksick]

Exactly. The app that I made to explore your data package has a feature that show you the images you have sent but it’s not working since morning cuz of this whole thing. Now I have to figure out a way to get latest valid links to access that media. Uhhhh

[@chara5]

@@hacksick it shouldn't be impossible for most images you still have access to, but what about images you've posted in servers you're no longer in? Even with authorization, you may not be able to request an updated link, like at all.

[@hacksick]

@@chara5 I will look into it. This is kinda making me do extra work ngl. My app was ready to submit to App Store, but I have to find a work around for this so the images work again.

[@hacksick]

@@chara5 ayyy guess what, my app is able to load the images since discord included the last parameters in the links it provides in the data packages. So if you have the latest data package, then you will be able to view the images in my app

[@tronosgamingwizard]

3 hours back, nice.

[@TheChemicalWorkshop]

tempted to push 100gb and see how my encrypted files hold in future... but then i know you technically doing this test for me so yeah...

[@BaldiReycaster]

it makes sense.

[@KryzysX]

Fam is no genius

[@julianelmasry9556]

so this means the receiver of the malicious cdn link can download the malware within the first day, but after that it is invalidated?

[@ChrisD__]

And the attacker can still just keep uploadeding their own link...

[@kubune.]

finally! i waited for the followup video

[@DUBSkyLinEx3]

So I would just need some kind of link shortener or something that could dynamically change the forwarding address? sounds like a change that will be bypassed very quickly and people will still be able to send malware hosted on discord.

[@dgwdgw]

As long as it uses a non-permanent response code, a URL shortener automatically kept up to date by a Discord bot would still allow using Discord's CDN to host the malware. It eliminates potentially bypassing spam filters by using what looks like a trustworthy domain, though.

[@o_2731]

Is your project open sourced?

[@CreepersNeedHugs]

DANG how did I just happen to watch the first video just 8 hours after this was uploaded

[@deedikjepijn]

Yt algorithm go brrrr

[@gr_sik]

great videos, keep it going!

[@NameName-oc4cl]

"howdoiclosevim" How, indeed?

[@ishaandatta9040]

What is the media player you used at 0:10?

[@riotao]

that's the default Windows 11 Media Player that's built in

[@iydl]

i love this video im now using discord for file storage

[@eksboks148]

yo what the fuck i literally just got done eating chicken nuggets

[@franciscodelico]

Wait, what are these "Chicken Nugget" comments? I watched the previous video, but I must have missed some of the lore.

[@EmceeJoseph]

I often spam a friend's Discord DMs for free image hosting to link when I post on forums. I'm guessing those forums have the image cached and won't flush those caches anytime soon (given how often free image hosts delete content) and there wasn't anything too important I posted anyway but I guess those old screenshot links are gonna die soon.

[@m3mem4chine86]

Can you write a FUSE driver for Discord?

[@lolosandros]

Only real ones know the two Snails

[@mahinhossen5758]

hello, do u have any plan to do some dev tutorial video for the newbie devs? for example, cool tricks with nodejs...

[@Ligands23]

I'm a simple man - I see a joke about closing vim, I subscribe.

[@codeJamalonRH]

Been waitint for this video 😊

[@Kucharskov]

Sorry but i must disagree with all of these video. I got a lot of attachements from my firends on Discord. I can just remove "ex is hm" and still download file withot any checksums, expiration dates or HMAC. I have latest update Discord.

[@mthia]

exactly what i was saying

[@yxtqwf]

Will this break links to old files?

[@ahmetyigitnayr9284]

can you make this project open source?

[@2u841r]

A Cron which collect all new cdn link once every 24 hours 😀

[@alexandace9550]

I'm like number 777. I'll be storing this on discord.

[@PokeShadow77]

My only question is do u need to be in the same server still as that attachment or no if its posted in a diff server

[@xyssxy]

youre awesome man

[@1on95]

Looking forward to trying to open expired discord links

[@TennessineGD]

what's the terminal color scheme?

[@Samstercraft77]

welp this is gonna break alot of stuff on my discs where we just use cdn links alot xd

[@prodKossi]

How *do* you exit vim

[@BetaMaster2]

sell the computer and buy a new one. there is no way to exit vim.

[@Bartek2OO219]

i would rather use youtube as unlimited storage than discord, but any sane person wouldn't use any of them. It's easier to use telegram for smaller files (under 2GB) and microsoft test accounts for bigger ones

[@GrabnarMyers]

0:17 1. you say not to for privacy and security, but what makes it not private or secure? 2. Why would discord randomly delete your server 3. Sure if youre making stupid decisions or using your account for other things 4. also sure

[@LavaCreeperPeople]

Ok

[@mthia]

every time i want to post a link to something on discord, i just remove these query parameters ex, is and hm you can access the file even without the query parameters so the change was pointless

[@mthia]

it doesn't work anymore

[@SomeRandomPiggo]

I still can't get over how ugly the new logo is lmfao

[@imjanniz]

isnt it a mega huge workload to update every file link ever and expanding every day?

[@faveltetris]

they'll probably only update links on messages once a user reads those specific messages which would be a lot less work

[@VaultCord]

@@faveltetris plus it's a HMAC signature so they're not required to update their database. it's the same technology JWT tokens use, so it's stateless. they don't need to do any database lookups to verify or sign the URLs, which makes performance much better than needing to check a data store.

[@JerryThings]

Super interesting content!

[@admiralnelson4225]

This seems like a good change on discords part

[@devdetour]

I agree! It seems like it will actually stop malware without being too disruptive to regular users. Plus, I'm guessing they'll start actually deleting attachments to messages that are deleted now, since they won't be accessible, so this will probably save them a bunch of space.

[@das_9677]

People have used the Discord CDN to share all sorts of files with people on other platforms, so I'm not sure if malware was really the only reason

[@tom-sn4gd]

@@devdetour Wait, what do you mean "actually delete" ?

[@devdetour]

​@@tom-sn4gd Right now CDN content isn't deleted, even if the message where the attachment was uploaded is deleted. This feels kind of bad because if you delete your message you'd expect the stuff contained in it to disappear as well. I'm thinking that maybe Discord will change this behavior - once a message is deleted and the attachment link rotates, there will be truly no way for anyone to get the new link, so no one can access it and it will be known safe to delete. My guess is they probably will start deleting unreachable attachments to free up space.

[@tom-sn4gd]

@@devdetour Wow that's weird. I remember like two years ago when we were trying to log attachment when a message was deleted on a server with a custom bot, and we noticed that the file itself was deleted, and only the low resolution renders (which are displayed before cliking to open the original image) were still there. They would eventually disapear when the CDN cache would free the space. Didn't know that was not the case anymore

[@SkillerAstro]

Could you give us a download of your discord storage Programm? :)

[@ghodawalamoamanzahirabbas8996]

Hey, I watched your previous video and you said in the video that you can convert any binary data into a video file and then convert the video file to original data. however it won't work if you upload the file to youtube or facebook because they change the original file. is there a way to circumvent that?

[@h.hristov]

No because they transform the file you upload and you could technically lose data, in other words video compression.

[@chlorobyte_projects]

You should be able to get around video compression by using 8x8 blocks instead of just pixels (smaller blocks may work too? feel free to try)

[@V01D-999]

can you give bot code

[@cheeseburgerinvr]

NO FUCKING WAY HE CLOSED VIM

[@Povilaz]

Very interesting!

[@iamvibs]

can you share code please

[@yudjeldahil3150]

Can you show us step by step how you create discord server and use it with node😊

[@Matojeje]

I think that the hm attribute might actually be some sort of mini-thumbnail info that Discord uses to make that blurry preview while it loads the actual linked image. Telegram does this as well

[@lemondoo711]

I just watched your video yesterday and made my own implementation in python in like 5 hours. Download speeds are around 20-30mbps and upload 10mbps. Too bad for me I'm not really a data hog and have nothing to really save but its crazy how easy it is to abuse infinite storage

[@lemondoo711]

Now saying that, I heard from someone else on the previous video that when you start storing a lot on a personal server, discord notices and makes it impossible to save a lot of the files that are newly uploaded. So that's probably the caveat of this 'infinite' storage

[@atomgutan8064]

​@@lemondoo711As a solution you could create a new account after the previous account is storing some amount of data. Maybe you could even automate this process. If they record every account's creator IP address they will be able to see how many accounts a certain IP address has created which could become a problem. To get around that, you could try changing the IP address of the computer before every account creation. This is getting crazy.

[@mateenbaig9146]

gimme free storage NOW

[@_tanzil_]

I'm using telegram to upload many of my data. They lets you 2gb per attachment. I make my files zip/rar and then upload. Easy 😉

[@nodnarb]

You should just post the code its cool

[@fabiodx2]

Cool videos

[@m1-]

chat

[@tamirawad]

Cool

[@sakshamchandel3836]

hey cool but can u provide with the code ???

[@h.hristov]

He won’t because it’s a violation of Discord’s terms of service

[@bsaednnmgointuvtjstairhvrqujnb]

hm

[@SamDS2109]

is the definitely_not_malware.evil file google chrome LMAO

[@mthia]

it's an image of 2 snails

[@Arvl.]

Cool videos