I Have Your Token!

[@NoTextToSpeech]

Friend invite link tutorial: kzbin.info/www/bejne/jKTHg2t6ot-WosU Yeah that was my Discord token. If you reset your password, it changes! Feel free to test it out yourself :)

[@talkalexis]

Base 64

[@x_pogboy]

send the new password to test

[@aquaplush7531]

I didn’t know it changed with password changed, but it makes sense. Good to know.

[@dho_mie]

how do you make a friend link?

[@M2rsh]

@@talkalexis Actually JWT (Json Web Token)

[@BlueberryCats_]

“I have access to your account” Proceeds to warn the person in question, giving them a chance to change out their password, and other credentials

[@KaliyaAlkaline]

@Loki A hacker can only track a victim's token if the victim installs malware compatible with their device. Cookies/local storage won't work because the code means nothing if it isn't executed. An exception for this is if the victim installs a custom extension for their browser that executes malicious code, but that would require the victim having no common sense. Most hackers just edit the Discord app code because it's plain JavaScript in an asar file (thanks Electron).

[@FriskGamer1]

​@@KaliyaAlkaline mucho texto

[@dash5058]

​@@FriskGamer1 Bro nisiquiera sabe ingles y le dijo mucho texto 💀 Pero para resumir, dijo que hay que ser extremadamente tonto para ser hackeado

[@MyFedora]

"Thanks for the heads up! I reported you to Discord Trust & Safety lol."

[@baconlettuce_bowl]

:P

[@timedeos4320]

I used to add the people that were “ hackers “ for fun because I was hella bored and knew it wasn’t possible for them to compromise my account just by adding them, ( did this for like 10 of them ) and most of them said the person that made the announcement had a grudge against them or something similar.

[@Not_Tails]

You are probably the only smart user on Discord ever

[@p2l]

that's even worse because that person which did nothing wrong can be reported multiple times just because of 11 year old kids which believe everything on internet and get actually disabled

[@Not_Tails]

@@p2l Nah, Discord doesn't like mass reports

[@p2l]

@@Not_Tails oh

[@KristorTheOne]

i actually did the same thing because of being bored and so far it's pretty funny seeing steam scammers

[@redaipo]

if someone sent me "here's the start of your token," instead of just telling me the whole thing I'd just laugh at them

[@alauriseflyn]

Like, “dude, if you wanna scare me, do it properly. Show me my whole token. Show me my saved photos. Show me a picture of my house on Google Maps or something. Just anything more than a publicly available string of text!”

[@Person01234]

Why are they even telling you in the first place. These kind of scams are dumb because they rely on the idea that a scammer is there to gloat about it and wouldn't just lock you out of all of your shit immediately.

[@lawtamim]

its just pretty unbelievable when they send the first part only, you'd think there's a way for them to get the first part but they cant send the whole thing

[@Reac2]

"I know where you live, you live in the US" (statistically of you're English user online) "OOOMMGGGG?!? I've been doxxed?!?!"

[@redaipo]

@@Reac2 statistically, you are wrong 🇨🇦

[@Frothey]

im glad these scares are still being spread around. I remember seeing these back in 2012 on instagram and steam, good times

[@delinep7286]

I hate the ones that are like ‘do X or (Y will come and) Z will happen!!!’ Edit: They should spread slowly through tricked people, not scaring people that Y will come to your house and do Z.

[@Flygonnerrs]

@@delinep7286 oh no!!! i dont want Y to come to my house and do Z!!! im not gonna sleep tonight!!

[@onemoreweirdo207]

I, on the other hand, wish they had died a long time ago.

[@5spec]

How the hell do people still believe these though

[@thecooldude9999]

This stuff goes wayyyyy back. In the 90’s it was “don’t flash your headlights at a car at night or they’ll come back and murder you!” Urban legends for the internet age.

[@cpaw]

For the first part, adding someone as a friend, will NOT get you hacked, but there is a chance that they will spam you into group chats with the same people.

[@cpaw]

@dawn Alright, thanks for letting me know. I lost my old account to this.

[@davis4107]

@@hi-kt3qr source?

[@Cstly]

@@hi-kt3qr cap

[@justaweeb14688]

@@cpaw No you didn’t.

[@lukeyxo]

@@hi-kt3qr most brain dead shit i’ve ever heard… you think discord is gonna crash at 1000 requests??? 😂😂

[@dukkcc2]

"busting in discord, i mean myth busting" Man, he had us in the first half 😔

[@grandemeraldanims1721]

Then said later in the video "the final myth I will bust before i end this video and then bust after"

[@memoxies]

"If you couldn't tell. Today I'll be busting on discord" - No Text To Speech 2022

[@Hietakissa]

for free???

[@LilacMonarch]

couldn't get through november smh

[@iptwo]

100th like

[@creepfully]

LMAO

[@jaydenthechurro]

I love to bust on discord. Sadly its still november so i had to hold it off for a while. I cant wait for december. I will bust so much on 1st december that i will start to shake and i will sweat profusely for five days straight

[@eantropix]

How people can still believe "if you don't share this message to 15 people something bad will happen" scams is beyond me

[@thatverseguy]

I appreciate you giving info like this to the community so that people don't get scared unnecessarily and just understand the world of discord better. Thanks man.

[@BuiHieuDong]

The Discord cyber-attack really does sound like a usual and normal day on Twitter.

yeah, everyone is confused that Twitter will down at night

[@ionlywearpjs]

(and in ohio)

[@定义]

@@ionlywearpjs STOP POSTING ABOT OHIO

[@Frigorigide]

I'm tired of seeing it

[@pwrsocket]

Can you stop commenting everywhere you damn bot?

[@spacita]

thank u for being the first and only one youtuber in the discord community that doesn't spread misinformation, but the opposite. people dedicated to covering the infinities that happen in discord day by day is a reason to be thankful (besides copypastes like these end up being terribly annoying because of how absurd some of them can sound).

[@wydx120]

Lmao oh my god, I remember the "xxxx creator here, we're gonna delete inactive users, pls spam your friends" hoax from way back in MSN times, what a nostalgic flashback

[@thejeditimelord]

You are a brilliant person educating people. I didn't know some of the things in this video, however I don't respond to random people

[@SuperBoop]

I'm so glad you spoke on it. I literally have a rule against people spamming or sending these. I consider it a copypasta and it's so annoying and dumb.

[@ItzStardustYT]

5:42 someone once sent this in a large server I own telling me I should warn my server about it. Then I proceeded to find the original poster of the announcement and also clearly explain and laugh at them

[@expr3ssionless]

me when im unable to convince the 11 year olds on a discord server that those "do not friend request this guy or u get hacked" hoaxes are fake

[@Not_Tails]

Why are there 11 year olds in a Discord server?

[@rraaiin]

@@Not_Tails because you can lie about your age

[@slicepie410]

@@Not_Tails or they have permission from their parents but that depends on the country afaik

[@James-un8io]

@@slicepie410 I know that there's a lot of them ik some got permission from the parents cuz I have met some of those whose got like approval from their parents discord in all countries has the minimum age to create account as 13 so they are all lying in but if they get caught they get banned but a lot of them got alts so its not rly effective or anything

[@CeIes_te]

@@Not_Tails in rules, of discord says: The COPPA rule says a child can be under 13, as long as they have parental permission and supervision, with the guardian having full management of the account. Roblox and google have that. but, yk 90% of "children discord users" dont really do that, as if there parents wont allow it, and some people have an alone room to sit in, so like, they make a new account easily.

[@beanosgodofbeans1821]

5:36 "The next bust I'm going to myth" 😄

[@SeriousSashka]

3:39, this "send this message to 15 users to get a free iPhone/or you'll be deleted from the service" is actually older than Discord, it's just, from my perspective, more popular in Russia between 9-12 yolds.

[@limeflake4192]

I feel like Discord should Include a window (that basically says that anything outgoing from discord will be from an offical source and not some bogus chain message) every time you open the software/app etc.

[@notsim_]

it does

[@OneBiasedOpinion]

@@notsim_ and that is the joke.

[@dotdankory]

if discord wants to reach out specifically to your account, it'd be "Discord [✓ System]" or just go to the website and check for yourself lol

[@limeflake4192]

@@notsim_ that's the loading screen tips

[@notsim_]

@@limeflake4192 when you sign up for a new account it says that there's phishing attempts and shows what an actual discord message looks like

[@in1]

Fun fact: everybody has VR embedded eyeballs right now

[@joelhoon1707]

Cap *30 years later* "What do you mean, this is true, are you living in the stone age or something???"

[@narrator5953]

​@@joelhoon1707 oml I thought the "30 years later" was someones youtube account name and the text below it and I was wondering why I couldn't click on their profile

[@vindi167]

The comment I am replying to was made 42 mins ago

[@park0527]

@@narrator5953 same for some reason

[@Oxygenationatom]

Bro I saw this at the same time he said that

[@Tenite]

Lmao I remember somebody sending don't accept this guy's friend request or he'll hack you so I sent him a friend request and he showed me his fire music

[@giggler12vtivgeigij]

error windows sounds

[@Shrine.-]

That last hoax just sounds like a normal day in discord

[@VoidfluxOrb]

In the chapters, it says: "Myth #6: My wife left me" I was just rolling on the floor after that XD

[@Shrine.-]

that also sounds like a normal day in discord

[@TomJakobW]

@@Shrine.- i don’t think “waifus” count as actual wives 😅

[@SpheresVA]

man I love being a dev and being one of the only ones not confused about this

[@trwy7]

The discord "shutting down" message, ah yes. My friend fell for this and a week later texted me saying "so apparently that message was fake" lol

[@PouLS]

"apparently"

[@HA19wasntavailable]

“busting on discord”

[@redaipo]

kinda sad how people can just be like "don't trust [random person they don't like], they're a hacker!" and cause someone to be harassed like that

[@lowercaseman6336]

Thank you very much for busting these myths. As a paranoid / easily scared / easily starts panicking person, this reliefs so much stress from friending people from platforms like Steam, Minecraft and Roblox. Or clicking on videos or images. Very much love to you, thanks again for making things clear and getting stress of many people! 😁❤😁

[@lollong15]

Hey I love that you go over all these topics keep up the work

[@babyyoda7597]

"today i will be busting on dis- myth busting" 💀💀💀

[@bygoneinnocence]

5:06 , instead of getting people’s accounts deleted, they got my birthday.

[@carterburton]

2:13 “please prank responsibility” discord tos: 🔨

[@trashpandaRaku]

honestly, you should be a discord moderator, as someone who barely knows about this kind of stuff you look like an expert to me, and you help me and many when something it's going on

[@TheRedDraqon]

No. Please don't turn ntts into a fat stinky discord mod. 💀

[@gachatana9656]

​@@TheRedDraqon We need people who are good at moderating servers though? I mod for my friends and my friends mod for me, yk?

[@wafturecity]

8:31 oh my god there are gonna be doctors oh noo you can hear "doctors" instead of "doxxers"

[@azaththerandomguy]

Basically all of these scams and panic is that people don't think for them self and just do as they are told.

[@komatobeast9122]

1984 moment

[@realsausageproductions8134]

“You will hear about it on the news.” *Shows a picture of the onion news network*

[@jagrosh]

Gotta love that some of these things have been circulating on Discord since 2015

[@xreverse_f1ash]

I really feel like that last one was just the chain mail trollers going "OMG we can't trick these people anymore!!! just throw every single possible thing in a single chain mail it might work!!!"

[@Coasterteam]

That “active member” message was a huge chain issue on Roblox in 2010. It’s been around for a while. 😂

[@JakeIGuess]

Pretty much any "alert/warning" that comes in the form of an @everyone ping from some guy on a discord server is generally a crock.

[@crystalz.__]

“I’ll be busting on discord- I mean myth busting on discord” 💀

[@JonnySpec]

"Tomorrow" is even more relative when you consider time zones.

[@tkoys]

Can we appreciate how NTTS mythed busts

[@TheMaxGuy]

the next bust i'm gonna myth

[@theusamongus]

when he said “busting on discord” bro, I got SO EXCITED then he said myth busting😮‍💨

[@xingyanglan6836]

“I have your token” Well jokes on you, I have my token too

[@dogofchaos]

Myth 2 has actually been going around as a Facebook copypasta, starting years before Discord was created. Someone just replaced one word in the whole text. So it's not just a hoax, it's a super lazy hoax! :D

[@Terekang]

To be fair, LIzard Squad was very vocal about which services they were going to hit and when

[@Ascension721]

5:24 americas finest news source as they say

[@thesunstep]

In case you haven't watched this video fully, or had your sound on while watching this: everyone can get the first part of your token easily. They can't do any harm to you because a part of your token is not your full token. They are just bluffing. A good response to those people is just saying: proof it by sending my full token. So again: they are bluffing, they can't do anything to you with a part of your account token.

[@marcopolo8584]

I saw these a TON on Roblox in like 2009. Glad to see you're spreading the word about this.

[@yes.elevens3688]

Scammer : “I have your token” *sends scammers token*

[@BolGotronic]

Today I'll be busting on discord💀

[@phoxpharms]

Being around since the dawn of the internet makes me forget how gullible most young people are. These low level bot scams are like day 1 lessons from the original AOL

[@XballStuff]

"Today I'll be Busting on Dis- MYTH Busting-" No Text To Speech 2022

[@PositiveDay6543]

5:54 it is actually possible to embed Trojans in videos and it's called steganography. However I doubt it could infect a victims machine if the video is on discord. It has to be downloaded onto the victims machine and opened

[@hi-kt3qr]

You need to go into the cache and make the video an exe. Which is not happening on accident and definitely intentional.

[@zaire-]

thank you for actually prooving these claims wrong, i am so tired of telling people that a lot of this is false with proper proof LOL

[@psjahn]

9:39 can't wait to come back in 2050 for this

[@nohypocrisy]

the mind, the soul, idea, intention, reason, fear, ignorance, health

[@Aizistral]

Token thing is outright ridiculous. Anyone with even a vague idea of what access tokens generally are would be immediately aware something's not clean if someone claims to have their token and proves that by only showing one specific part of it instead of sending in the whole thing

[@bird9188]

I remember seeing these "website is shutting down" on goddamn facebook back in like 2013

[@chetapace79]

General rule of thumb: even if someone has some of your personal information, you are relatively fine depending on the information

[@oz_jones]

Ok glowie

[@EvilSantaTheTrue]

I forgot what's a glowie

[@TylerTMG]

There a serial killer and they have your address

[@TylerTMG]

Then you are not fine

[@BreadedSpace]

@@TylerTMG Just call the police

[@Zairin.]

It's wild that the "copy paste this to X friends" thing STILL EXISTS

[@itstoucann]

that second one was literally the "____ has died, copy paste to 20 other people or you will get haunted by them" stuff from like 2014

[@danielt2k8]

I know a myth. This myth is about your wife leaving you.

[@DolphineerYT]

"Today I am going to be busting on Discord" - No Text To Speech

[@wafturecity]

omg myth 6 was so believable i fell for it

[@Yarpopcat08]

Me too!!! (Also who else discovered it?)

[@MaguigiProductions69]

What you fell for was the end imao

[@cycrothelargeplanet]

5:35 Man I like mything busts

[@countbleck7968]

Send thus message to all your friend to prove you are activate… such a emotional line

[@ana.wordswordswords]

are you activate?

[@Cressxlia]

5:36 _”The next bust I’m gonna myth”_

[@LilacMonarch]

Adding people as friends in itself can't get your account hacked, but that person can now try to scam you (assuming they couldn't already if you have DMs restricted to friends only) but as always just...use common sense lmao

[@blitzn00dle50]

I do add randoms to my friends list and then remove them within 5 minutes if they haven't stated who dis

[@gachatana9656]

​@@blitzn00dle50 I add people who are in servers I'm in that I talk to a lot, and decline no-mutual-server users

[@xvalk3171]

"I'll be busting on discor- Myth busting on discord" -NTTS 2022

[@KOMBO-]

ayo moment

[@MassiveMaleMonkey]

who else got anxiety when he had his token ready to be sent???

[@KingdomOfPurcal]

me

[@1e1001]

it wasn't, just the encoded id + some random characters

[@francisbalfour1243]

The first funny thing was that they require you to verify what your token is, if they had your account access, they would be on your acc, you wouldn't need to verify anything.

[@chairger]

3:57 I just got a nostalgia blast from seeing that “active users” scam, it’s crazy how people still spread those to this day

[@voracities]

I remember believing in it when it was like 2017 😭

[@Hietakissa]

and even crazier how people still fall for those, and any scams for that matter

[@LilacMonarch]

Chainletter type things have been around forever. Back in like 2010 I fell for one of those "copy and paste this on 10 items to get free robux" things. Didn't get my robux.

[@giggler12vtivgeigij]

not really anything important but it says theres 2 replies but it shows 3

[@LilacMonarch]

@@giggler12vtivgeigij when comments get autodeleted they aren't removed from the count for some reason

[@Naolin-bc4bw]

8:14 seems like a fun Friday night

[@56independent]

The discord shutting down one is halarious. There is plenty you can do to improve speed and if its the inactive users in the database, it's really easy to see who they are and what time their last login was. If your database is slowing the app, change the database. In any case, there is far more you can do then hopelessly send copypasta out everywhere, and that should be the very last thing you do due to low reliability. This is ignoring all the grammatical errors in the message lol.

[@Claym1x]

This is the first time of me hearing about this, I really wanna do some developer tomfoolery on them now lmao

[@ADHDYoshi]

Hi! I actually discovered this a long time ago because I was curious if it would be possible to brute force tokens with it, it wasn't of course but it's wild to see that this weird thing with Discord has come back this way.

[@J_SuperProGamer]

"I have your token: *insert token here*" "*you're, and atleast I get maidens"

[@TATEFAN_NUMBER_2]

"today ill be busting on discord today" - a pimp named no text to speech

[@Novastellia]

"busting on disco- myth busting on discord" I loved that 🤣🤣🤣

[@professorpuddle]

0:47 - can you do a tutorial on how to create a friend link like that? That would be pretty useful

[@skedaddle002]

I was wondering about that as well!

[@hi-kt3qr]

It’s only for some users in Germany and the United States for now. If you aren’t in those countries you will probably have to wait for the official release.

[@professorpuddle]

@@hi-kt3qr oh ok cool

[@undefinedchannel9916]

@@kxi webpackChunkdiscord_app.push([[[""]],{},q=>Object.values(q.c).find(e=>e.exports?.Z?.createFriendInvite).exports.Z.createFriendInvite().then(console.log)])

[@hi-kt3qr]

@@kxi it’s slowly being rolled out to some people in those countries. If you don’t have it now you will either get it soon or never get it until official release all around the world.

[@dubstepdoughnut]

Myth 6 is easily provable, don’t lie to us NTTS!

[@fbiagentmiyakohoshino8223]

friend links should be changed to just not instantly add someone to ones friends list

[@KingOfAluminum]

It seems like the people that use it are already bots so they could just immediately accept requests and it would be no different

[@undefinedchannel9916]

Adding someone to your friends list is harmless

[@jayemover_16]

It's not like it does anything, so ???

[@duckedy]

the whole "discord is ending" thing has been around for so long lmao, i remember seeing it way back in 2017

[@nileshravi5046]

Busting on discord 💀

[@_e621]

the webm thing also works with images there are images when loaded into the cache that will make that popup

[@Z_E_B_O]

8:25 so just normal stuff...

[@supermaster2012]

4:30 this is literally like going back 20 years in time to the days of MSN...

[@ChippGD366]

I love your vids! keep up the amazing content!

[@SomeWeirdFellow]

6:36 I remember seeing a video in some discord server that completely reset your discord when you watched it, so is this what made it work?

[@nyatske]

Busting makes us feel good!

[@microclaim]

0:11 LMFAOOO

[@ler0848]

ay ay ay ay ay ay ayy AYYY AYY AYOOOOO

[@brodieherogamer8933]

time to bust

[@peashooter268]

Sus

[@Tommyoutnit]

@@brodieherogamer8933can i join you?

[@RGBOZO]

Last reply here

[@greggr1939]

5:36 "Now the next bust I'm gonna myth" XD

[@pureincompetence]

i appreciate the fact that myth 6 was never busted maybe we just have to wait until discord myth busting part 2

[@revizgd]

“Today i’ll be busting on discord- myth busting on discord!” **bro** ☠️📸

[@starspritechippy]

seeing how you have some alt accounts, did you ever run into the "something suspicious is going on with this account" message that forces you to activate your email and give them a phone number? and if you know more about it, could you make a video covering the topic?

[@symsym1629]

what i like to do with the friend request myth is that i ask the guy ask the original poster any proofs and they are just like "Rebooting Myself..."

[@ThatDevMat]

For the webm video malware myth, it’s also possible to embed malicious software that same way. While most of the people spreading malware via this method will not be smart enough to make something new and are simply going to use an existing piece of malware (high likelihood it’s a RAT/remote administration tool) and that has a good chance of getting caught by antimalware, if you keep your antimalware off and/or don’t keep it up to date, you definitely could fall victim to a malware infection. For a mass spreading attack it’s likely they’re trying to create a Botnet (which can be used for DDOS attacks for example) As for images, jpegs can also be injected with exe’s that run when the image is opened. I’m not sure if discord has a malware scanner for attachments like gmail does but if they don’t then it is a real vector of attack. In all likelihood you won’t be targeted directly unless you’re someone of actual importance but that doesn’t mean you should disregard the possibility you’ll be targeted. Stay safe and don’t be stupid.

[@filipetrujeira3359]

No, it isn't, it's stored in cache, and it won't run the malicious code, you'd have to open the cache folder, open the webm file downloaded, again, the file will have the code but won't be run, you would then have to edit the file and remove the webm part, save it as a code extension if the victim has a compiler/interpreter or have the code be in a pre-built exe and turn the extensions into exe, to then run it, and that definetly wont happen on accident

[@Meme_Meister]

Opening an image file with embedded malware won't run the malware unless there is some exploit in the image viewer which the malware exploits. Same thing with videos and pretty much all files.

[@declan_youtube]

This is a steganography approach, the malware inside the image would only be run when extracted using an already malicious program on your computer.

[@ThatDevMat]

@@filipetrujeira3359 just being in cache is not enough to prevent code from running in windows

[@ThatDevMat]

@@Meme_Meister jpegs specifically are vulnerable because they are poorly designed from a specifications standpoint that allows embedded code to run because of a vulnerability in the jpeg specification. It has absolutely nothing to do with the image viewer and have double checked the vulnerability with multiple different methods.

[@JustSomeGuy769]

All they do is copy your user ID and paste it into a base64 decoder. It’s a good way to get 1/3 of someone’s token.