“We are providing guidance to developers” – Discord promises a fix and “additional protections” following discovery of Arc Raiders bug that stored users’ private messages


Discord has responded to a recent data security issue that arose with Arc Raiders’ Discord Integration, which was storing user’s private Discord messages locally on their PCs.

While this has now thankfully been hotfixed by the developers at Embark Studios, A Discord spokesperson told Eurogamer the following: “We recently became aware of an issue impacting some Arc Raiders players involving debugging features intended for developers building and testing Social SDK (software development kit) game integrations.

“This resulted in some players’ Discord information from the game being stored locally on their device, and viewing it would require access to the device or the files themselves. Embark has released a hotfix for the issue and we are providing guidance to developers and updating the Discord Social SDK with additional protections.”

It is worth noting Timothy Meadows, who first published a his findings on this bug, argued that log files – where these messages were stored – could have potentially been included in bug reports or accessed by other apps with access to files on the machine.

According to Discord, the company became aware of the problem on the 4th March, and worked with Embark Studios to address the problem. Embark Studios then moved to quickly fix the problem via a hotfix.

On Discord’s part, the company is releasing updates to the Social SDK and updating developer guidance to help prevent similar issues going forward and is communicating directly with partners who have existing or in-development integrations.

The problem was caused by the debug logging capabilities in the Discord Social SDK, which can generate additional local logs when developers enable high logging levels while testing or troubleshooting integrations. Eurogamer understands this only affected users who linked their Discord account to the Embark Integration.

In Meadow’s original blog post on the matter, he recommended those who enabled Discord integration with Arc Raiders to change their Discord password immediately and disable said integration. With the bug now fixed and new guardrails in place, one hopes this sort of Discord Integration security concern is gone for good.



Source link

  • Related Posts

    Poll: So, Will You Be Getting Pokémon Pokopia?

    Image: The Pokémon Company Pokémon Pokopia launched exclusively for the Switch 2 this week, and if you haven’t already heard about this new relaxing life-simulation, it’s been getting quite a…

    Messy Up: Unleash Pet Chaos on Xbox & Windows with Couch Co-op Fun

    Hey pet pals and mischief-makers! (Θ3Θ) We’re Liquid Meow Games— a small team of students who turned our love for playful chaos into a game. We’re so excited to finally…

    Leave a Reply

    Your email address will not be published. Required fields are marked *

    You Missed

    A simple way to improve your thought and conclusions

    A simple way to improve your thought and conclusions

    Mother of B.C. mass shooting survivor shares update, says breathing tube removed

    Mother of B.C. mass shooting survivor shares update, says breathing tube removed

    Feds take notice of iOS vulnerabilities exploited under mysterious circumstances

    Feds take notice of iOS vulnerabilities exploited under mysterious circumstances

    Wolves 1-3 Liverpool: Arne Slot’s side reach FA Cup quarter-finals

    Wolves 1-3 Liverpool: Arne Slot’s side reach FA Cup quarter-finals

    Saks Is Having a Legit Sale- These 16 Items Are Fashion Editor Approved

    Saks Is Having a Legit Sale- These 16 Items Are Fashion Editor Approved

    For Xi, Trump’s Embrace of War Proves China Needs More Power