furthermore, it's trivial to make it impossible to guess filenames by adding a randomly generated ID to the file names. I really doubt you'd be able to find a single valid file before getting, say, IP banned by any DoS detection discord might be using. Thirdly, you'd have to guess not only the guild ID and the channel ID, but the file name too. you can only see it because it's in your cache, ctrl + shift + r and you will no longer be able to see it. Secondly, as others have said, delete the original message and the image will be gone. for memes), drastically reducing the load on the CDN. Secondly, when an attachement is deleted, it should be deleted from the CDN too.įirstly, keeping the files around means that you can just copy and paste links (e.g. This mean that you can only see it if you are within the server it was sent on, or if this was sent to you in private. What should be done ?įirst, when you try to access to an attachement it should check if you can see the requested attachement.

Because of this, then we may have to ditch Discord as we ditched Skype and TeamSpeak to use something else and get more privacy.Īlso, any attachement we may have sent could be get by anybody with a very simple script that scans urls. Nobody wants their super secret projet to be public because of this problem. It's also a big problem for compagnies that may use Discord to work. You cand delete the picture in Discord but it will remains in the CDN publicly. If you sent something that could be sensitive, a bank account for exemple, then anyone could see it and there's no way for you to prevent it. It also means that anything we send is online forever and can't be deleted at all. Why it's a problem?ĭiscord CDN is public, meaning anyone can see any attachement as long as they have the url for it. Whenever you delete your picture or not, it will be store forever, so you can see it using the same url. When you send an attachement, let's say a picture, to a friend or in a server, it will be store into.

Discordapp cdn