“Attackers, Trellix wrote, use the platform’s webhooks to pull data from victims’ computers and drop it into Discord channels run by the attackers.”

68 points

I wonder if McAfee changing their name to Trellix to escape how much the general public hates them will work better than Comcast rebranding as Xfinity.

permalink
report
reply
3 points
Deleted by creator
permalink
report
parent
reply
7 points

Idk, but this issue was discovered by “Trellix” which is McAfee.

permalink
report
parent
reply
38 points

The general public doesn’t hate McAfee that much, so I’d bet it’ll work. Heck, I work in IT and I didn’t even know about the rebrand (mostly because I engage with McAfee as little as possible).

permalink
report
parent
reply
21 points

probably about as well as Twitter becoming “X, formerly known as Twitter”

permalink
report
parent
reply
14 points

Yeah let’s keep that going here. From here on our whenever I see Trelix I will say “Trelix, the brand fomally known as McAfee.”

permalink
report
parent
reply
1 point

or just call them mcafee, twitter, facebook, etc

permalink
report
parent
reply
2 points

Or Evri, the brand formerly known as Hermes

permalink
report
parent
reply
52 points

lol@ this. My bet what is actually happening: cost cutting or future nitro feature.

permalink
report
reply
9 points

Trying to keep those classified documents on the DL for home grown radical terror.

permalink
report
reply
15 points

It’s an annoying change for anyone using discord to share files outside of it’s closed platform but doesn’t affect most people.

I wonder whether bridges for matrix have to be fixed or if they’re already editing messages bridged to matrix to the new url.

permalink
report
reply
7 points

Depends on how it’s implemented. Anyone using a “media proxy” will see their discord bridged media probably fail to load (outside of possible caches) after a day. Anyone who has their bridge configured to reupload discord media to their homeserver should see no change.

permalink
report
parent
reply
1 point

What is this bridge you speak of? I’m intrigued. Does matrix have a functionality that lets you run a mirror of a discord channel?

permalink
report
parent
reply
6 points

Yes, but you have to selfhost your own instance. Big servers don’t have that, and the ones that have probably require payment.

permalink
report
parent
reply
3 points

Yes exactly. The bridge logs into the discord server as a user. Then it mirrors all chats from your user in matrix to the discord.

Oh matrix, every user on the connected server gets a user whose name is their snowflake. Those virtual users post into the matrix server whatever their respective discord users posts.

permalink
report
parent
reply
2 points

One of these four.

permalink
report
parent
reply
14 points

Honestly, I’m okay with this at least until they fix the fact that all shared files are accessible without authentication. Granted, you still had to get the link before downloading an uploaded file, but the fact that there was no authentication required to download a file uploaded to Discord was pretty surprising.

permalink
report
reply
1 point

And a LOT risky

permalink
report
parent
reply
3 points

It’s probably also way cheaper to do it that way. As far as I could tell when I checked in on it some time ago, most of the content goes through a Cloudflare proxy straight to a GCP S3-compatible bucket.

permalink
report
parent
reply
1 point

You still need to know magical numbers to download file.

permalink
report
parent
reply
0 points

What is a password? A string of characters. What is a link? A string of characters.

If you make it long enough, it’ll be impossible to guess one.

Your files are safe

permalink
report
parent
reply

Selfhosted

!selfhosted@lemmy.world

Create post

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.

Rules:

  1. Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

Community stats

  • 3.6K

    Monthly active users

  • 3.3K

    Posts

  • 71K

    Comments