It is easy to get the impression that Discord chat messages are ephemeral, particularly throughout completely different public servers, the place strains fly upward at a near-unreadable tempo. However somebody claims to be catching and compiling that information and is providing packages that may monitor greater than 600 million customers throughout greater than 14,000 servers.
Joseph Cox at 404 Media confirmed that Spy Pet, a service that sells entry to a database of purportedly 3 billion Discord messages, provides information “credit” to prospects who pay in bitcoin, ethereum, or different cryptocurrency. Looking particular person customers will reveal the servers that Spy Pet can monitor them throughout, a uncooked and exportable desk of their messages, and related accounts, corresponding to GitHub. Ominously, Spy Pet lists greater than 86,000 different servers wherein it has “no bots,” however “we all know it exists.”
As Cox notes, Discord does not make messages inside server channels, like weblog posts or unlocked social media feeds, simple to publicly entry and search. However many Discord customers many not anticipate their messages, server memberships, bans, or different information to be grabbed by a bot, compiled, and bought to anyone wishing to pin all of them on a selected consumer. 404 Media confirmed the service’s perform with a number of consumer examples. Non-public messages are usually not talked about by Spy Pet and are presumably nonetheless safe.
Spy Pet overtly asks these coaching AI fashions, or “federal brokers in search of a brand new supply of intel,” to contact them for offers. As famous by 404 Media and confirmed by Ars, clicking on the “Request Removing” hyperlink performs a clip of J. Jonah Jameson from Spider-Man (the Tobey Maguire/Sam Raimi model) laughing on the concept of advance fee earlier than an abrupt “You are critical?” Customers of Spy Pet, nonetheless, are assured of “safe and confidential” searches, with random usernames.
This creator discovered practically each public Discord he had ever dropped into for analysis or reporting in Spy Pet’s server checklist. Those that have not paid for message entry can solely see pretty benign public-facing components, like stickers, emojis, and charted member totals over time. However as a sign of the attain of Spy Pet’s scraping, it is an efficient warning, or enticement, relying in your objectives.
Ars has reached out to Spy Pet for remark and can replace this publish if we obtain a response. A Discord spokesperson informed Ars that the corporate is investigating whether or not Spy Pet violated its phrases of service and group pointers. It should take “acceptable steps to implement our insurance policies,” the corporate mentioned, and couldn’t present additional remark.