#maybe I could just use my phone instead | Explore Tumblr Posts and Blogs

mostlysignssomeportents · 4 months

Text

How I got scammed

If you'd like an essay-formatted version of this post to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:

https://pluralistic.net/2024/02/05/cyber-dunning-kruger/#swiss-cheese-security

I wuz robbed.

More specifically, I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened. And then he tried to do it again, a week later!

Here's what happened. Over the Christmas holiday, I traveled to New Orleans. The day we landed, I hit a Chase ATM in the French Quarter for some cash, but the machine declined the transaction. Later in the day, we passed a little credit-union's ATM and I used that one instead (I bank with a one-branch credit union and generally there's no fee to use another CU's ATM).

A couple days later, I got a call from my credit union. It was a weekend, during the holiday, and the guy who called was obviously working for my little CU's after-hours fraud contractor. I'd dealt with these folks before – they service a ton of little credit unions, and generally the call quality isn't great and the staff will often make mistakes like mispronouncing my credit union's name.

That's what happened here – the guy was on a terrible VOIP line and I had to ask him to readjust his mic before I could even understand him. He mispronounced my bank's name and then asked if I'd attempted to spend $1,000 at an Apple Store in NYC that day. No, I said, and groaned inwardly. What a pain in the ass. Obviously, I'd had my ATM card skimmed – either at the Chase ATM (maybe that was why the transaction failed), or at the other credit union's ATM (it had been a very cheap looking system).

I told the guy to block my card and we started going through the tedious business of running through recent transactions, verifying my identity, and so on. It dragged on and on. These were my last hours in New Orleans, and I'd left my family at home and gone out to see some of the pre-Mardi Gras krewe celebrations and get a muffalata, and I could tell that I was going to run out of time before I finished talking to this guy.

"Look," I said, "you've got all my details, you've frozen the card. I gotta go home and meet my family and head to the airport. I'll call you back on the after-hours number once I'm through security, all right?"

He was frustrated, but that was his problem. I hung up, got my sandwich, went to the airport, and we checked in. It was total chaos: an Alaska Air 737 Max had just lost its door-plug in mid-air and every Max in every airline's fleet had been grounded, so the check in was crammed with people trying to rebook. We got through to the gate and I sat down to call the CU's after-hours line. The person on the other end told me that she could only handle lost and stolen cards, not fraud, and given that I'd already frozen the card, I should just drop by the branch on Monday to get a new card.

We flew home, and later the next day, I logged into my account and made a list of all the fraudulent transactions and printed them out, and on Monday morning, I drove to the bank to deal with all the paperwork. The folks at the CU were even more pissed than I was. The fraud that run up to more than $8,000, and if Visa refused to take it out of the merchants where the card had been used, my little credit union would have to eat the loss.

I agreed and commiserated. I also pointed out that their outsource, after-hours fraud center bore some blame here: I'd canceled the card on Saturday but most of the fraud had taken place on Sunday. Something had gone wrong.

One cool thing about banking at a tiny credit-union is that you end up talking to people who have actual authority, responsibility and agency. It turned out the the woman who was processing my fraud paperwork was a VP, and she decided to look into it. A few minutes later she came back and told me that the fraud center had no record of having called me on Saturday.

"That was the fraudster," she said.

Oh, shit. I frantically rewound my conversation, trying to figure out if this could possibly be true. I hadn't given him anything apart from some very anodyne info, like what city I live in (which is in my Wikipedia entry), my date of birth (ditto), and the last four digits of my card.

Wait a sec.

He hadn't asked for the last four digits. He'd asked for the last seven digits. At the time, I'd found that very frustrating, but now – "The first nine digits are the same for every card you issue, right?" I asked the VP.

I'd given him my entire card number.

Goddammit.

The thing is, I know a lot about fraud. I'm writing an entire series of novels about this kind of scam:

https://us.macmillan.com/books/9781250865878/thebezzle

And most summers, I go to Defcon, and I always go to the "social engineering" competitions where an audience listens as a hacker in a soundproof booth cold-calls merchants (with the owner's permission) and tries to con whoever answers the phone into giving up important information.

But I'd been conned.

Now look, I knew I could be conned. I'd been conned before, 13 years ago, by a Twitter worm that successfully phished out of my password via DM:

https://locusmag.com/2010/05/cory-doctorow-persistence-pays-parasites/

That scam had required a miracle of timing. It started the day before, when I'd reset my phone to factory defaults and reinstalled all my apps. That same day, I'd published two big online features that a lot of people were talking about. The next morning, we were late getting out of the house, so by the time my wife and I dropped the kid at daycare and went to the coffee shop, it had a long line. Rather than wait in line with me, my wife sat down to read a newspaper, and so I pulled out my phone and found a Twitter DM from a friend asking "is this you?" with a URL.

Assuming this was something to do with those articles I'd published the day before, I clicked the link and got prompted for my Twitter login again. This had been happening all day because I'd done that mobile reinstall the day before and all my stored passwords had been wiped. I entered it but the page timed out. By that time, the coffees were ready. We sat and chatted for a bit, then went our own ways.

I was on my way to the office when I checked my phone again. I had a whole string of DMs from other friends. Each one read "is this you?" and had a URL.

Oh, shit, I'd been phished.

If I hadn't reinstalled my mobile OS the day before. If I hadn't published a pair of big articles the day before. If we hadn't been late getting out the door. If we had been a little more late getting out the door (so that I'd have seen the multiple DMs, which would have tipped me off).

There's a name for this in security circles: "Swiss-cheese security." Imagine multiple slices of Swiss cheese all stacked up, the holes in one slice blocked by the slice below it. All the slices move around and every now and again, a hole opens up that goes all the way through the stack. Zap!

The fraudster who tricked me out of my credit card number had Swiss cheese security on his side. Yes, he spoofed my bank's caller ID, but that wouldn't have been enough to fool me if I hadn't been on vacation, having just used a pair of dodgy ATMs, in a hurry and distracted. If the 737 Max disaster hadn't happened that day and I'd had more time at the gate, I'd have called my bank back. If my bank didn't use a slightly crappy outsource/out-of-hours fraud center that I'd already had sub-par experiences with. If, if, if.

The next Friday night, at 5:30PM, the fraudster called me back, pretending to be the bank's after-hours center. He told me my card had been compromised again. But: I hadn't removed my card from my wallet since I'd had it replaced. Also, it was half an hour after the bank closed for the long weekend, a very fraud-friendly time. And when I told him I'd call him back and asked for the after-hours fraud number, he got very threatening and warned me that because I'd now been notified about the fraud that any losses the bank suffered after I hung up the phone without completing the fraud protocol would be billed to me. I hung up on him. He called me back immediately. I hung up on him again and put my phone into do-not-disturb.

The following Tuesday, I called my bank and spoke to their head of risk-management. I went through everything I'd figured out about the fraudsters, and she told me that credit unions across America were being hit by this scam, by fraudsters who somehow knew CU customers' phone numbers and names, and which CU they banked at. This was key: my phone number is a reasonably well-kept secret. You can get it by spending money with Equifax or another nonconsensual doxing giant, but you can't just google it or get it at any of the free services. The fact that the fraudsters knew where I banked, knew my name, and had my phone number had really caused me to let down my guard.

The risk management person and I talked about how the credit union could mitigate this attack: for example, by better-training the after-hours card-loss staff to be on the alert for calls from people who had been contacted about supposed card fraud. We also went through the confusing phone-menu that had funneled me to the wrong department when I called in, and worked through alternate wording for the menu system that would be clearer (this is the best part about banking with a small CU – you can talk directly to the responsible person and have a productive discussion!). I even convinced her to buy a ticket to next summer's Defcon to attend the social engineering competitions.

There's a leak somewhere in the CU systems' supply chain. Maybe it's Zelle, or the small number of corresponding banks that CUs rely on for SWIFT transaction forwarding. Maybe it's even those after-hours fraud/card-loss centers. But all across the USA, CU customers are getting calls with spoofed caller IDs from fraudsters who know their registered phone numbers and where they bank.

I've been mulling this over for most of a month now, and one thing has really been eating at me: the way that AI is going to make this kind of problem much worse.

Not because AI is going to commit fraud, though.

One of the truest things I know about AI is: "we're nowhere near a place where bots can steal your job, we're certainly at the point where your boss can be suckered into firing you and replacing you with a bot that fails at doing your job":

https://pluralistic.net/2024/01/15/passive-income-brainworms/#four-hour-work-week

I trusted this fraudster specifically because I knew that the outsource, out-of-hours contractors my bank uses have crummy headsets, don't know how to pronounce my bank's name, and have long-ass, tedious, and pointless standardized questionnaires they run through when taking fraud reports. All of this created cover for the fraudster, whose plausibility was enhanced by the rough edges in his pitch - they didn't raise red flags.

As this kind of fraud reporting and fraud contacting is increasingly outsourced to AI, bank customers will be conditioned to dealing with semi-automated systems that make stupid mistakes, force you to repeat yourself, ask you questions they should already know the answers to, and so on. In other words, AI will groom bank customers to be phishing victims.

This is a mistake the finance sector keeps making. 15 years ago, Ben Laurie excoriated the UK banks for their "Verified By Visa" system, which validated credit card transactions by taking users to a third party site and requiring them to re-enter parts of their password there:

https://web.archive.org/web/20090331094020/http://www.links.org/?p=591

This is exactly how a phishing attack works. As Laurie pointed out, this was the banks training their customers to be phished.

I came close to getting phished again today, as it happens. I got back from Berlin on Friday and my suitcase was damaged in transit. I've been dealing with the airline, which means I've really been dealing with their third-party, outsource luggage-damage service. They have a terrible website, their emails are incoherent, and they officiously demand the same information over and over again.

This morning, I got a scam email asking me for more information to complete my damaged luggage claim. It was a terrible email, from a noreply@ email address, and it was vague, officious, and dishearteningly bureaucratic. For just a moment, my finger hovered over the phishing link, and then I looked a little closer.

On any other day, it wouldn't have had a chance. Today – right after I had my luggage wrecked, while I'm still jetlagged, and after days of dealing with my airline's terrible outsource partner – it almost worked.

So much fraud is a Swiss-cheese attack, and while companies can't close all the holes, they can stop creating new ones.

Meanwhile, I'll continue to post about it whenever I get scammed. I find the inner workings of scams to be fascinating, and it's also important to remind people that everyone is vulnerable sometimes, and scammers are willing to try endless variations until an attack lands at just the right place, at just the right time, in just the right way. If you think you can't get scammed, that makes you especially vulnerable:

https://pluralistic.net/2023/02/24/passive-income/#swiss-cheese-security

Image: Cryteria (modified) https://commons.wikimedia.org/wiki/File:HAL9000.svg

CC BY 3.0 https://creativecommons.org/licenses/by/3.0/deed.en

#pluralistic #social engineering #phishing #ai #swiss cheese security #infosec #finance #fraud #carding

10K notes · View notes

femonologue · 2 months

Text

Many years ago, I was wandering around downtown Ottawa with my best friend. We ran into a friend of his who offered us some hash (it sucked), then said there was a really good house party nearby if we wanted to go. We were like, yeah, sure. So that's how we ended up at some completely fucking random person's house.

I look around to ask if my friend knows anyone here and he's simply gone, as is his friend. And this isn't some red solo cup hangout; this is a party. There's people counting out pills on the kitchen counter. I am clearly neither as cool nor as drug-savvy as the kitchen people, so I back away and instead wander aimlessly into the living room, which seems to give off more of a chill vibe.

A bunch of people are seated in a circle on the floor. One of them is fiddling with a big wad of newspaper or something. A really cute grunge girl with piercings and tattoos scoots aside to make room for me, so I sit down.

"What's that," I ask her, gesturing at the newspaper wad.

She gets a really big smile on her face. You know the smile. It's the I'm About To Watch This Innocent Soul Get High As Fuck smile. "You've never smoked a tulip?"

"What's a tulip?" I ask.

"It's like if a joint was also a bong," she replies. "You gotta try it."

"Alright," I reply, a little uncertainly. This will not be my first encounter with weed. I am more comfortable with the janky newspaper bong than I am with whatever the fuck is going on in the kitchen. Besides, this girl is really cute and I would like to have a friend here now that my existing friend has turned into vapor or been transported to the Upside-Down or whatever the hell happened to him.

I watch as one person holds the newspaper joint-bong upright and holds a lighter over the top while another gets beneath it, tilting their head back to take a puff. Apparently smoking this Cheech & Chong monstrosity is a two-person job.

"Oh," I say, looking at the fist-sized knob at the top of the wonky newspaper joint. "Yeah, it does kinda look like a tulip." Grunge girl smiles at me.

I watch as the tulip is passed around the circle, along with the lighter, and hits are cooperatively taken. It reaches grunge girl, who takes a huge puff and holds it for an extended moment before exhaling an impressive blast of smoke. She smiles expectantly and holds the tulip up for me, preparing to spark the gigantic meteor of dank that makes up its tip. By this point I have completely forgotten about my missing friend. I only care about making a good impression on grunge girl. I tilt my head back and hit the tulip like a smokestack.

It is the following morning. I am sleeping between a couch and a wall. I'm not positive that this is the same house I was just in. My memories are gone. Someone is yelling at me: "dude! Dude! Wake up, dude!"

I sit up. My mouth tastes like cigarettes. I do not smoke cigarettes. "Wha," I ask the yelling man, who I am quite confident I have never met before in my life.

"We're going on a quest," he tells me, gravely. "You have to come with us."

I look around. Neither my friend nor his friend are anywhere in sight. I also do not see grunge girl anywhere. I shrug helplessly. "Okay."

We embark from this house. I learn that the destination of this quest is Tim Horton's. This is a relief to me, as coffee and a donut sounds really fucking good right now. Somehow, the route to Tim Horton's takes us past the Governor-General's residence, which everyone else in the group loudly heckles on the way past. I do not know what the Governor-General has done to raise their ire, nor do I particularly care. I trudge along with my hands in my pockets, pleased to note that I still have my wallet, phone, and keys. I fervently wish that I could remember anything about last night. Maybe I talked to grunge girl. Maybe she's why my mouth tastes like cigarettes. The tulip tasted nothing like cigarettes.

I am asked about my politics. I voice my frustrations with corporate corruption, the pay-to-win electoral system, the lack of transparency and accountability. This is met with great approval. The guy who was yelling at me claps me on the back. I get the impression that we became friends last night. I don't recognize his face. I do not know his name and he definitely does not know mine. I behave as though we're friends anyway. We are comrades on a quest.

By the time we make it to Tim Hortons, the gaggle of stoners I'm walking with have all run out of energy and/or attention span. People order snacks and break away in pairs or solo, to call for rides or plan the day's events or just vegetate and wait for the drugs to leave their systems. I look around and find that my nameless friend has also gone to the Upside-Down. As I wash the cigarette taste out of my mouth with coffee, I unsuccessfully try to remember whether I saw grunge girl smoking tobacco at any point. I remember nothing. That tulip was so fucking powerful that it instantly sent me a whole day forward in time.

Alone in the city, I try to call my best friend and get no answer. I walk to the nearest bus stop, catch a bus most of the way home, and call up my parents to ask for a ride back. They ask where my friend is. I tell them that I have no idea; we went to a house party and I don't remember anything else.

When they pick me up from the bus station, they ask me some very safe, nonspecific questions, and seem to relax when I describe what little I can remember. It isn't until years later that I realize they were probably terrified I'd gotten rufied or something, and were so relieved to learn otherwise that they didn't even bother chiding me for smoking myself unconscious in an effort to impress a strange woman. In any case, they were probably happy to find out that I did, in fact, like girls; I suspect they had been privately wondering whether I was gay.

After getting home, I finally manage to get my best friend to answer his phone. I discover that he tried the kitchen pills, spent most of the night crossing the entire city on foot, and crashed at his cousin's house. He sounds like shit. I tell him that he should have tried the tulip, instead. He fervently agrees with me.

I never see grunge girl again.

That's okay, though. She got to see a clueless stranger get fucked the entire way up on some ungodly strain of giga-weed, and I got smiled at by a cute girl, and then I got to go on a quest. Wherever grunge girl is, I hope she's happy. I hope she's smoking the fattest fucking blunt and smiling as some kid passes out behind a couch.

#I have no idea what to tag this. if you need me to tag it as something just tell me I guess

7K notes · View notes

nkogneatho · 6 months

Text

𝐂𝐈𝐓𝐘'𝐒 𝐇𝐎𝐓𝐓𝐄𝐒𝐓 𝐌𝐀𝐍 𝐈𝐒 𝐒𝐄𝐂𝐑𝐄𝐓𝐋𝐘 𝐀 𝐖𝐇𝐎𝐑𝐄 𝐎𝐍 𝐀 𝐏𝐎𝐑𝐍𝐒𝐈𝐓𝐄- 𝐂𝐀𝐌𝐁𝐎𝐘 𝐆𝐎𝐉𝐎

—cw: fem!reader, male and female masturbating, fingering, fistfucking, pillowfucking (put me in a cage pls), desperate gojo because i'll never shut up about that. not proofread.

—a/n: i wish his seiyuu had an asmr channel just like nanami's so this drabble would've been longer. enjoy though <33

You're used to stalking the social media of people you go out with. It comes naturally. Well you live alone in this city, and you sure as hell don't want to stumble across a creep with no defense. You never know what's crippling it's way across this sinful city at night. The questionable news reports just added the oil to the fire of your anxiety. So it was natural that tonight, you were stalking another one of your dates. Gojo Satoru. You knew he was pretty popular when those hand had to leave yours to dap or fist bump his peers on your first date. It's almost as if fifty percent of the city knew him, like a celebrity. If he was really so popular, it would be easy to dig up info about him.

That's what led to you eagerly scrolling past his Instagram, flipping through each highlight as if you were a child who just found the greatest comic book.

party,

and parties.

it was like his mantra the way his entire feed was just him dancing under the influence, in outfits too expensive and champagne to rich. He bathed in the luxury and the people around him were pleasuring off the drops sprinkling. So perfect that he had everyone wrapped around his finger. But won't he do the same to you? Overpower you. All those riches and he decided to go out with you, just so he could make you one of his whores, you were sure about that.

"Ugh, fuck it." You groaned, tossing your phone away. "Guess i'll have to use my hand again."

You opened your laptop, went incongnito typing the first letter, but your autocorrect knew better. It's like it has memorised what you do at this hour. But autocorrect works on algorithms so you were sure it's your fault that you visit the site so frequently.

The porn website was open and you clicked on search button, specifically typing "hot men jerking off webcam." It was one of your favorite things to watch.

You scrolled through the popular videos you had already watched maybe a million times. There was a reason they were popular. So you just changed the filter and selected "new to old". After rummaging through some of the boring videos, your eyes landed on the preview of one with the most beautiful cock. longest even. Curiously, you click on it. The video starts with the man rubbing his boner through the boxers. You put a hand inside your panties, and all you want right now is for him to take his boxers off. After a few minutes, he does and his long light peach cock springs out. when he leans back, your eyes do a double take.

is that gojo fucking satoru??

And indeed it was. The man who earlier gave you the rich spoiled misogynistic son vibes was now moaning like a slut, begging his viewers to ride their imaginary pussy. He had zero shame. Although...why didn't you log out?? Why did you not switch to some other video?

Because holy shit he is fistfucking his cock like an animal in heat. The chair is shaking and making squeaking noises but fuck who cares about that. Listen to his moans. His fucking whimpers. He changed his placement and now he was on the bed, had the pillow folded in half only to start ramming his dick into it. God! Is this the real Gojo Satoru? Is this what he is? A camboy whoring his body out. Because he has generational wealth so there's no way he is foung that for money. So the only logical answer is because he is such a fucking pussywhore that his exhibitionist cock only cums when there are others watching it.

Your fingers starts vigorously pumping in your cunt. They weren't long enough to reach and you were actually wishing Satoru was fucking you instead of that pillow because look. Look at that long dick. Look at the pretty flushed tip with his precum glistening. Fuck, how'd he taste on your? Sweet? Sour? But you know it would taste warm and filthy for sure.

The man in the screen increases his pace and so do you, imitating him. you want to cum at the same time. you want to see what his cum looks like on the gray pillowcase. your middle finger starts stimulating your clit even more while Satoru in the screen is now snapping his hips rougly against the bed, in the pillow. you imagine yourself in the position. Prone Bone. Never tried it but if it is what he is doing, then you're sure as hell down. It's the way his thrusts can be heard banging against the wood under the mattress even if there's not skin for his to slap against. compared to what other camboys do, talk about how they're going to ruin your dirty little pussy, gojo's is different. he does say he'll ruin your pussy but it's hotter because it is followed by endless pleas.

"fuck—lemme ruin this pussy—anh! please, yeah? gonna make you feel so good, baby please?" almost as if he is actually fucking someone. and you don't think twice before assuming he is talking to you. It's okay to be delusional sometimes. Specially when his words make you cum so hard, that you are whining at the lack of more girth to clench around. you look at the screen and Satoru came too. And he was whimpering. Like actually whimpering because it felt so good. Hot strings of cum now soaked in the pillow. Shit.

When you come back from the bathroom after washing yourself, you hear a notification. you pick up your phone to find a "Free tomorrow night?" from the same man who indirectly made you cum so hard tonight. And after what you saw today, you would be a fucking idiot to miss a chance like this.

"Yeah, Of course. Can't wait to see you tomorrow."

*Sent*

#gojo smut #gojo x reader #gojo satoru x reader #jjk smut #jjk x reader #jujutsu kaisen smut #jujutsu kaisen x reader #gojo x you #gojo drabbles #jjk drabbles #gojo x y/n #gojo satoru smut #jjk x you #jjk x y/n #gojo x female reader #gojo x fem!reader

7K notes · View notes

bit-b · 6 months

Text

About a trending Discord warning:

TL;DR: Discord is NOT making "Find your friends" enabled by default. You're probably not giving Discord your contact information without your knowledge. Their UI choices just suck.

There's a warning post going around by a person I'm not going to name, as I don't want people to dogpile on them. That is NOT the goal of this post, and if you DO harass anyone because of what I write, then you're a garbage person with garbage habits that needs to throw those habits in the garbage.

Rather, my goal with this post is to educate about a Discord feature that's not being represented properly.

-------------------------------------

Supposedly in the new mobile update, Discord added this ""NEW"" feature called "Find your friends", and then they enabled it by default. This feature allows users to use their smartphone contacts to search for their friends on Discord. It also enables others to be able to find you in the exact same way.

Obviously, this would be MASSIVELY dangerous from a privacy perspective.

Imagine if someone had relatives that use Discord. In a scenario like that, those relatives would have an easy way of finding the accounts of family members. And in some home situations, online anonymity from relatives could mean the difference between having an outlet and not having an outlet.

I'm also pretty sure I know some folks with alt accounts (you know who you are). And if Discord was somehow able to cross-reference all your contacts with the Discord accounts you're logged into, that would be DISASTROUSLY EMBARRASSING, to say the least.

So I totally understand how concerning this would be if it turned out to be true.

The thing is, it's not.

The person who made that warning misinterpreted THIS page:

This is the new "Add Friends" page for the Discord mobile app. Obviously, a page to help you add friends. There's a big 'ol window at the bottom showcasing Discord's "Find your friends" feature.

Now, this feature is actually NOT new. It's been around for a long time. But there's a very subtle change that happened with the new update. Take a look at how "Find your friends" used to look:

It starts by giving you a banner at the top of your friends list, telling you that this feature is available. Then when you click on it, it takes you to a page with UI elements that look awfully familiar.

It's pretty clear what happened. In an effort to condense down their friend-finding functions into one menu, Discord took the "Find your friends" setup menu and tossed it in with all the other ways to contact friends.

But by doing this, Discord has made this setup window confusing. It's not immediately obvious if the "Find your friends" feature is ON and running, or OFF and waiting to be activated.

Maybe it would have helped to make the blurple button read something like "Sync contacts" instead of "Find friends". At least then, you could tell at a glance that nothing has been sync'd yet. (Or y'know, maybe just stick to "Grant Permission". That was working just fine before.)

So it seems the OP:

Looked at the "Find your friends" setup menu that Discord hastily slapped into the "Add friends" page

Noticed the checkbox that read "Allow contacts to add me"

Saw that it was already marked

Then assumed that it must be some kind of tucked-away setting that was left ON by default.

To make this abundantly clear, "Find your friends" only works if you opt-in.

That checkmark allows you to tell Discord you are okay with people finding you in this manner. Unchecking it makes it possible to use "Find your friends" without others being able to find you the same way.

It doesn't get set up on your device until you press the big blurple "Find friends" button. Even then, you still have to add your phone number to your account and verify it via a 6-digit code sent via SMS.

After that, you have to give Discord permission to access your contacts via whatever phone OS you use.

You have to be pretty deliberate for any of these functions to start.

I won't say it's impossible to set it up on accident. It's a strange world, and stranger things have happened. If you want to, go check your app permissions to make sure you don't have contact permissions enabled for Discord. It's always good to be sure. But rest easy knowing that you probably don't have to worry about it.

-------------------------------------

In my opinion, I think that anyone who reblogged that warning should consider reversing those reblogs.

Honestly, I also think the OP should just delete their post instead of repeatedly adding amended reblogs to it. At the end of the day, the core of that post was misinformation and misguided assumptions. There's no real reason to keep it up.

Besides, I'd rather pin Discord on things they're ACTUALLY guilty of. Like designing a new UI that's widely mocked. And making things 10x more confusing for the end-user.

Here's Discord's official "Find your friends" FAQ page:

https://support.discord.com/hc/en-us/articles/360061878534-Find-Your-Friends-FAQ

I hate to beg, but I'd appreciate if people would reblog this post. I fear that the warning post is gonna steer a LOT of people to believe a lot of things about Discord that are logically and functionally not true.

#discord #misinformation

4K notes · View notes