dev-chat

[daring wasp]

no bean water me only have coffee

[pale hull]

@eager notch if you have a question please send it here. I don't accept friend requests

[daring wasp]

the big cup coffee 3 times a day :p (sometimes)

[patent carbon]

Aww I didn't get one

[daring wasp]

I also got one although I usually just click ignore and that's it

[pale hull]

I got it 3 hours ago, which was like 1.5 hours after any activity from me. Which is strange

[jade current]

Refactored my code a bit :D

[dark moth]

down to the last thing to sync, and ofc it's the bot db

[spring hollow]

what are you working on AE?

[dark moth]

backups

[spring hollow]

gotcha

is that difficult?

i wouldn't know tbh

[dark moth]

just a lot of messing till you get it to do what you want

[spring hollow]

i see

[dark moth]

and being careful cause some of this stuff has existed for 10+ years but obviously evolved

[spring hollow]

reminds me of backups i have for a minecraft server going back to 2018 that i never deleted (i think)

[patent carbon]

The tools or your dataset?

[dark moth]

and some have weird things. like velero uses a fixed encryption key by default. no config option to change it. but what you can do is edit the kubernetes secret where this fixed key lives before it does the first backup, and now it works with your own key

its stupid, but does the trick

but only then to find out this only applies to the volume data and not the kubernetes state itself

[pale hull]

Backups and logging are 2 things I have never really done

Which is probably a bad thing

[dark moth]

better logging is an issue for later when i finish gearbot 3

till then, i don't mind not seeing every small issue. i know theres plenty of em at this point

[spring hollow]

what lang is your bot made in?

[dark moth]

python but rewriting in rust

[spring hollow]

oh, thats cool

[pale hull]

Raw API I assume?

[spring hollow]

i never really got interested in anything else besides typescript

[patent carbon]

If you like TypeScript.... Ever heard of Go? /j

[spring hollow]

learning a new lang is... a different level of difficult for me.

plus i don't really have a lot of time to anyway these days

[patent carbon]

Ideally. Yes

This is a developer server

[patent carbon]

Nah fair. I get that

TypeScript and Go

[pale hull]

Are you planning on getting a job in tech? (Or have one?)

[spring hollow]

i plan on it yeah. im almost finished getting my bachelors of technology, primarily in IT operations

i have a summer semester starting in june (only for about a month), then my last semester in the fall (september-december)

[patent carbon]

It's Google's alternative to C++ and Java

Between 13 and 99

[pale hull]

IT ops does not have a bunch of programming, does it?

[fallow ridge]

@vague ice did he get banned?

[patent carbon]

My devops lead at work doesn't even have a text editor installed. Uses nano and notepad++ to write PS scripts

[dark moth]

if you have a moderation question feel free to dm @willow gulch , but we generally do not discuss what actions where taken (or even if any was taken) with other users not involved in it

[patent carbon]

Or whatever web based editor is used in the tool

[runic field]

Blep

[spring hollow]

not really, i want to be an IT manager, but it is required for my major. ive taken java, which i despised greatly. right now im taking task automation and administration (lots of terminal scripting), database administration, networking security

[pale hull]

Notepad++ is great. It is what I am using for the dart tutorial I am doing

[patent carbon]

https://tenor.com/view/cat-blep-gif-27395371

[cunning pecan]

Why notepad++ above other similar solutions? 🤔

[modest geyser]

AIX

[pale hull]

What similar solutions are there

[runic field]

Oh hey, its unreal. But not the engine

[patent carbon]

Like Sublime

[quiet saddle]

does it put the letters on the screen when you press the keyboard

[pale hull]

Isn't sublime heavier

[patent carbon]

Not significantly. It's pretty lightweight

[runic field]

Just type the binary yourself, code editors are a conspiracy

[spring hollow]

i used sublime when i was in community college, not my favorite. i prefer vsc

[quiet saddle]

sublime is nice for just pasting random stuff i might care about one day

no need to save

no need to worry about it

[patent carbon]

That's what I use NP++ for

It's pretty great that the native Notepad remembers your tabs on close now as well

[pale hull]

Then I guess I just got notepad++ first

[spring hollow]

a number of months ago i created a code paste site (was meant for d.js specifically to show errors and docs), but i kinda stopped development on that. i have considered making it a general paste code site like sourcebin, but then i kinda lost motivation and questioned why i made it anyway

[meager orchid]

How to build a bot like Dyno

[patent carbon]

Wait. Is Notepad native? Or webview?

[modest geyser]

Do you know a programming language

[quiet saddle]

notepad++ and sublime are pretty much equivalent

[patent carbon]

Good morning Luna

[meager orchid]

Kinda,

[pale hull]

My suggestion is only do this if it is a private bot not intending to go public

[patent carbon]

Does sublime have native formatters?

[modest geyser]

Good morning opal badge guy

[patent carbon]

Any interesting scams?

[modest geyser]

Only bro and empty message content

[patent carbon]

Boring

[olive depot]

Get a better inspiration bro

[quiet saddle]

idk, wdym?

[modest geyser]

Dont know about the images

[patent carbon]

Like a JSON formatter. For when I get JSON as a string and want to actually read it without opening a full editor

Or paste it online

[meager orchid]

From Who?!

[quiet saddle]

no clue. if it's not built in there's probably an extension

[toxic gate]

How can I use the V2 components in my bot?

[flint epoch]

documentation suggestion for @toxic gate:
Using Message Components

[patent carbon]

Good bot

[pale hull]

Why do you want to make a bot like dyno?

[patent carbon]

Dyno is pretty generic these days. It's not really special. Reliable but not special

[meager orchid]

For my own server

In fact I wanted to learn how to make one like that

[patent carbon]

Ok. That's a good target to learn. General purpose moderation bots (in some ways) are pretty simple.

So to learn, I would first learn the fundamentals of whatever language you prefer. Python and JavaScript are the typical recommendations. As the libraries for those languages are generally easier to use and well updated

[nimble axle]

[patent carbon]

Hey Python people, where's actually good places to learn the language? I heard leardpython.org and the official python.org guides sometimes cause you to want to rip your hair out

[peak halo]

https://wiki.python.org/moin/BeginnersGuide/NonProgrammers
https://automatetheboringstuff.com/
https://docs.python.org/3/tutorial/

codecademy + sololearn as platform

[pale hull]

Automate the boring stuff is where I started. Then learned OOP from Corey Shaffers YouTube series.

[upbeat anchor]

#github-notifications message yo thats me (i wish it were fixed tho)

[vestal fractal]

One great way of learning and getting forward is by making a project in which you are going to encounter new stuff and will need to learn how to make it
But if you're just beginning then yeah you'd need to get the very basics first

[patent carbon]

I never learned from books. But the OOP course I took in college was super helpful. It was that and Java fundamentals

Used that to them go off and learn on my own

[patent carbon]

risky: makes a GitHub issue
also risky: "yo I'm on the GitHub webhook feed!"

[upbeat anchor]

[pale hull]

I think the notification above yours would be a great feature for the API

[upbeat anchor]

100%

[patent carbon]

It's surprising how inconsistent the banning behavior is. I've experienced this in the client as well

It's not common but I've had "delete last hour" and nothing goes away

[meager orchid]

Did you read that?

[patent carbon]

Lol it was sarcasm. It's a scam post

Too bad GitHub has terrible moderation tools

[quiet saddle]

I was wondering, what happens if your bot has the BAN_MEMBER permission but does not have MANAGE_MESSAGE (either in general, or in the specific channel)?

[patent carbon]

I don't think bots need manage messages to do ban cleanup...but risky would know

[vestal fractal]

I don't think it's really being done through your bot

[quiet saddle]

It could be an "implicit permission"

[patent carbon]

Ya just checked. It's not listed as required for the Create Guild Ban endpoint

[vestal fractal]

Makes sense to me

[patent carbon]

The message deletion is performed by discord not the bot. So ya wouldn't need the permission. Ban members is an elevated permission to manage messages anyways (not that discord does permission hierarchy like that)

[quiet saddle]

Elevated how?

[patent carbon]

As in more destructive. At least I see removing a member over removing a message as much more elevated

[quiet saddle]

Ah. Well in terms of how permissions are evaluated, apart from administrator, they're all the same rank

[dark moth]

if you're not completed and not voiled, what are you buddy?

[upbeat anchor]

ahhhhhhh

[upbeat anchor]

im scared by this

[upbeat anchor]

you dont

ironically

also i like using it coz you can cleanup messages in channels you have no access to

honestly permissions are weird, like why can you delete a whole channel but not be able to touch individual messages (ie manage channels vs manage messages)

[patent carbon]

Just from a bot standpoint, I'm curious if that is good behavior or not... on a user standpoint, someone able to ban should be able to cleanup messages

But, for a bot... I am not 100% certain if those should be combined... 99% of the time, yes... which is probably why they did it

[upbeat anchor]

yeah

they better not change it tho.. coz that would be painful

[modest geyser]

i found one that was 4-5 seconds apart

[upbeat anchor]

very scared

[modest geyser]

sent data to influx is the last operation in the function

oh wait i stripped timestamps

im stupid

i was too lazy to find another example

[upbeat anchor]

so nice

[modest geyser]

True

[upbeat anchor]

whats the chance that we have to wait another 2 weeks to have a response (or infinite coz its hard to repo)

[modest geyser]

Probably quite high

[upbeat anchor]

:(

wow its been a month since i did that followup, like on the day... nice timing

[modest geyser]

It def seems like some sort of delay with different parts of the api communicating

[upbeat anchor]

the joys of distributed systems

does that mean that it falls upon to us bot devs again (ie why our bots even exist in the first place)

[pale hull]

Could this issue be solved by discord just running the remove messages function on the lowest duration 1 minute after the ban.

[upbeat anchor]

yeah literally

but remember guys, before they touched it... double banning 1sec later worked all the time

then they did something and now the base case works better, but that double has no affect and now some dont at all

im trying @modest geyser's suggestion of waiting 10sec now and seeing if there is any change

[kindred bison]

Hello, eveyone, how’s everying dojng

[frigid ferry]

That might feel unresponsive tho. Unless you mean to run it a 2nd time behind the scene

[modest geyser]

The thing is this affects my boat less as it doesnt depend on specific channels or spam

[pale hull]

Maukkis when you say the banned user can send a message 5 seconds after. Do you mean that the user sent a message 5 seconds before being banned that was not deleted

[modest geyser]

So most of the time its handled properly

[upbeat anchor]

trueee

[modest geyser]

No they were banned then 5 seconds later i got a message event from that user

[upbeat anchor]

but it could be discord queue being dumb for all we know

(idk about 5sec slow tho)

[modest geyser]

And this wasnt network latency

[upbeat anchor]

also me casually trying to ping in a way without pinging

yeah there is no way 5 whole sec can be latency

[modest geyser]

And the message wasnt deleted by the first ban

[upbeat anchor]

unrelated but can someone explain discord - like in the top few channels of this server it doesn't show the role ping by default, but in the ones more lower down it does nicely

[upbeat anchor]

:(((((((

[toxic gate]

When using the V2 component, and sending it in a channel, it comes out as a normal message.

[modest geyser]

This is why i said 10 sec delay

[upbeat anchor]

what do you mean? by default if you only send text display it looks like a normal msg

[toxic gate]

Watch

[upbeat anchor]

looks like a cv2 message to me

the divider is there

[pale hull]

You used separators just fine. You are probably looking for a container though

[upbeat anchor]

did you want to put it into a container item?

damn i was too slow

[lethal pier]

thats all that is missing , the container

[pale rapids]

[toxic gate]

I solved the prolema, grax igual

[unborn copper]

i am a bit disappointed into discord devs and staff right now. I have been paying money, for 5 years straight for discord nitro, and today, the ONLY thing i got, is a different color badge.. not an email, not a message from the official discord bot, not an invite to a discord with others who paid for 5 years, no. just a small color change in a badge and a notification...
i had to say something, i dont care about your replies.

[olive depot]

Inspire from a better bot

[modest geyser]

What did you expect just because you paid for something you would be special?

[unborn copper]

yes.

[neat olive]

5s of network latency would be bad

[pale hull]

Do you get a gift from the gas station when you will up your car 100 times?

[upbeat anchor]

tbf you have to have many months worth of nitro to pay for one hour of engineer salery

[olive depot]

I don't think its dependent of channels

[upbeat anchor]

idk, in #dev-chat #game-dev-chat #api-chat it doesn't show, but in #social-sdk-dev-chat #activities-dev-chat it does

[olive depot]

Even in top channels it shows the ping sometime for me, that's just random cache thing ig

[upbeat anchor]

hmmm

[olive depot]

Not showing in all for me rn

[native pilot]

probably just based on the messages you have loaded in each channel

[upbeat anchor]

ah

[pale hull]

@ will always show people in order of the messages

I guess if it can't find enough it starts populating roles

[upbeat anchor]

you know what would be cool - to be able to shift click this to add ping like you can with users (also same with channels on left too could be cool)

[olive depot]

Add ping? Mention in chat?

[cunning pecan]

select top user > scroll to end > shift click > send

alternatively - select top user > scroll to end > shift click > scroll to middle > unselect one > send

[upbeat anchor]

wait what do you mean

[cunning pecan]

mass ping be real in smaller communities

[upbeat anchor]

ah

i know too many servers that actually have everyone perm

[cunning pecan]

ofc ddevs is kind of immune to that due to limits but still

[patent carbon]

do those servers have more than 500 members?

[native pilot]

I thought this already existed

[upbeat anchor]

like you can ping the person

but i wish you could mention the role

or the channel on sidebar

[near crescent]

what'd be really cool is if you had at-here for roles (as in: mention people with that role that are online)

[minor jasper]

free/cheap bot hosting

[patent carbon]

is that a question or a statement?

[minor jasper]

question sorry

[patent carbon]

#1478860733365354687 then

[minor jasper]

thanks!

[upbeat anchor]

would be even cooler for github codeowners style where it only pings a few at a time too

[patent carbon]

pinned message in that post has a list

[minor jasper]

nice

[upbeat anchor]

<@&936746847437983786> is the goat

[minor jasper]

do you personally recommend a specific service?

[upbeat anchor]

i like me some hetzner

but its not free

[eager notch]

[patent carbon]

I haven't personally used it but the Oracle Cloud free tier is extremely generous... just sometimes hard to get access as it's a "while supplies last" kinda thing

[upbeat anchor]

see when i did the math some time ago, it was cheaper to just get vps than get static ip at home

and vps >> those overly fancy stuff

[neat olive]

not particularly surprising that a cheap vps would be cheaper than a static ip at home, though of course the math gets a bit more in favour of selfhosting if you need more resources

[patent carbon]

@ruby monolith if you have a question, feel free to ask here... I don't accept random friend requests

[modest geyser]

You are famous because of your opal badge

[upbeat anchor]

where are your badges

[modest geyser]

I didnt pay discord so they took my badges away

[upbeat anchor]

lol

[rugged vector]

<@&1050493473033289778>

[fiery comet]

guys whats a vibe coder

[upbeat anchor]

someone who uses AI to make a bad website/app/thing

generally they dont actually understand what they are doing

[fiery comet]

oh lord

[serene wind]

hi guys, where do u recommend finding emojis that fit discord UI

[gritty spruce]

where can i find help regarding building a game on roblox?

[patent carbon]

probably a roblox development server

[fiery comet]

cuz i was searching for bots of the same category as the one im making and its just vibe coders and vibe coders so i thought it was a new meta 😭 no comp for me i guess

[gritty spruce]

oh thank you bro

[fiery comet]

i can send some links if u want of servers

[gritty spruce]

yea please

[tacit hill]

Heyyy- new to the server, here for a friend; if his account is actively getting hacked with threats of leaked/lost info, who would be best to help with that when it comes to dev support

[quiet saddle]

!support

[strong seal]

This server is for help with Discord APIs, SDK and other various integrations. For general support, please contact Discord at https://dis.gd/contact, or send us a message on Twitter at @discord_support

[patent carbon]

https://dis.gd/hackedaccount

[cunning pecan]

#safety and links inside have the best resources!

If there is an imminent threat involving harm, law enforcement contact would be my recommendation

[modest geyser]

Unreal

[verbal wraith]

[pale hull]

Unfortunately that is like 75% of new projects these days.

[ember crystal]

How do I get hype squad balance

[patent carbon]

you dont, and off topic

[tacit hill]

He says that this only takes him to a loading page where it’s kind of stuck waiting.
I will check #safety to see what more I can do for my gng, tysm🙏🏾

[rugged vector]

u don’t

[rugged vector]

u fast

[pale hull]

Which despite the low quality code has the other downside of vibe coders don't care about their projects enough to keep supporting them. So if you accidentally use one you are out of luck

[patent carbon]

[ember crystal]

Why do you talk like that?

[patent carbon]

like what?

[tacit hill]

What are APIs and SDKs?

[bronze granite]

Is there any way for my bot to see what i have in clipboard?

[spring hollow]

nope

[modest geyser]

Application Programming Interface and Software Development Kit

[tacit hill]

Wait so are yall the official discord server type shii?

[pale hull]

Essentially tools for making software

[tacit hill]

Ahh, okay- so that would be a no I take it..😩

[pale hull]

This is an official server. The majority of users are not discord staff

[bronze granite]

there is gotta be way to do it

[spring hollow]

there isn’t

[bronze granite]

there is

[spring hollow]

no, there isn’t.

[near crescent]

have fun finding it then!

[vestal fractal]

There is tho?

Run it on the same machine...

[pale hull]

Can you see what is in another users clipboard? Bots operate with pretty much the same data as users

[patent carbon]

bots do not run as Administrator level programs on your computer... there's no other way to see what you have in your clipboard

[vestal fractal]

Hmmmmmmmmmmm

[tacit hill]

And there isn’t more of a way to get help other than twitter or putting in a support form?

[pale hull]

No

[vestal fractal]

Sure you can't just run it on an admin cmd?

[patent carbon]

discord does not have any form of live support... only their support tickets and their FAQ posts

[pale hull]

I guess we should specify what user they are talking about. Did they mean only them or anyone interacting with the bot

[teal schooner]

chat what do we think abt using ipv6 mainly?

[vestal fractal]

Yeah they probably meant anyone, I don't see how'd it be useful to make that for yourself

[vestal fractal]

Fine, unnecessary locally

[pale hull]

Don't for discord

[patent carbon]

depends on what youre using it for... if youre using it public facing... then youre going to have compatibility issues

[bronze granite]

only admins

[vestal fractal]

Then no

[bronze granite]

[tacit hill]

And if the support page isn’t working properly and twitter doesn’t respond-
Sorry I’m asking all the questions, I’m js tryna get more info, a lil worried for my hommie rn

[vestal fractal]

You could only do it on the same machine. Unless you will have a process on your machine that talks to your bot

[pale hull]

Unless you have each admin install a separate piece of software that communicates with your bot

[bronze granite]

that feels like such obvious thing to have and that would be great QoL impropvment

[dark moth]

we get you are worried, but we can not help you. we are not even discord employees

[patent carbon]

twitter does not respond to account support... they only answer general questions

[dark moth]

and the few who are here do not work for support

[vestal fractal]

As a feature in discord?

[dark moth]

the only thing we can do here is point you to support

[bronze granite]

y

[vestal fractal]

?

[tacit hill]

Okokok, thank you for the info, I’m sorry to be annoying I’m js tryna do what I can

[vestal fractal]

Bots having access to your clipboard would be a huge privacy concern

[pale hull]

Can most applications overall see what is in your clipboard?

[patent carbon]

generally speaking... a user's clipboard is sensitive information... as it often contains private information or passwords

[bronze granite]

well most sites when you're trying to paste picture see what you have in clipboard

[tacit hill]

Whole situation with this- this month has been Hell and I’m js trying man😭

[bronze granite]

so i don't see why it would be different

[vestal fractal]

Being able to pin things in Windows clipboard is great, and I use it to store some stuff I wouldn't want a bot to access

[teal schooner]

i mean basically i wanna try making like a small hosting provider for small devs with basically ahh free tiers primarily for like testing and small stuff so idk if i should be giving each container its own ipv6 ip or have one ipv4 shared across the whole node

[patent carbon]

because that's the website itself... discord bots are 3rd party tools and could easily use that maliciously

[pale hull]

Wouldn't the paste operation be different then viewing clipboard tho

[vestal fractal]

No, only by prompt

[patent carbon]

again, depends on what youre hosting... if it's for discord bots... then it wont work... discord does not support v6 i dont believe

[vestal fractal]

You can at most click a button to paste the last thing from your clipboard.

[teal schooner]

oh... 😭

[bronze granite]

So there could be something like giving access to bot to see your clipboard while you're entering server for first time or smth

[patent carbon]

no

bots should NOT have access to a clipboard

[pale hull]

But why do you need this information

[vestal fractal]

Why's this necessary by any means?

[pale hull]

If a user needs to share what is in there clipboard they can do Ctrl+v

[teal schooner]

discord rate limits per bot token right? not per ip cuz if it does then if one bad actor comes and mashes discord with requests then the whole node would get rate limited so like do you know if it rate limits per bot token or per ip

[patent carbon]

both

[teal schooner]

so basically im cooked if some guy decides to be annoying

[patent carbon]

yes

[bronze granite]

just saying for "my" bot it would be QoL since when im trying to upload evidence for banning somone i have to actually download jpg/png

[patent carbon]

unless you want to give a dedicated ip address to all of your users

[rugged vector]

no offense but it geniuely seems like a scam

[pale hull]

It's a very common problem people have

[patent carbon]

which is going to be far more expensive

[vestal fractal]

Idk what you mean but you can always just paste manually

[pale hull]

So what you actually want is to be able to paste to a modal

file input

[vestal fractal]

If Discord added a paste button that'd be a completely different thing

[rugged vector]

like if he has his passwords or any token in his clipboard giving access to some discord bot to access it like definelty a problem

[bronze granite]

ig? im not really into that stuff im on second year of computer science and i didn't make that bot

[vestal fractal]

well

[teal schooner]

i dont plan on getting dedicated ip addresses any time soon lol if i do end up getting users and i make a bit of money from ad banners plus premium users if they decide to get a premium plan then ill see if i can get a /24 ipv4 sub net which should be good but expensive should be covered by profits tho

[vestal fractal]

You can also self host

[teal schooner]

after all im starting with a very cheap infrastructure

then scaling based off users

[patent carbon]

This is why we generally discourage free hosting providers here... as they used shared IPs and suffer from unpredictable rate limiting from bad actors

[vestal fractal]

Self hosting with port forwarding or Cloudflare is free (only cost is the device)

[pale hull]

I get a VPS with a dedicated IP for $4 a month

[teal schooner]

i can get a pretty good vps with 1 ipv4 and a /64 ipv6 sub net which is why i was asking if i can use ipv6 primarily

[vestal fractal]

Apparently if you tunnel a Minecraft server via public hostname it's gonna be slow as hell

[pale hull]

Oh, this is not only for you it's for each user

I don't think discord supports ipv6

[patent carbon]

You can read more about the Shared IP issues here: #1478860733365354687 message

[teal schooner]

sadly it doesnt

[vestal fractal]

It's not thaaat much of a problem

[teal schooner]

i mean i might like buy a couple ips incase one gets rate limited and rotate between them

[vestal fractal]

Or... dynamic ip?

[teal schooner]

after all current server costs will be around 7 ish euros per month

[teal schooner]

so buying a couple of ips isnt that big of a problem

especially since itll be hard to even get users at the start

[patent carbon]

if you really care, you should track the traffic origins to see where the bad actors are and cut them off when they trigger the limits on the shared ip

[vestal fractal]

Atp buy a proper dedicated setup, I don't get the priorities here

[patent carbon]

to offer cheap hosting to others... it's not for him

[teal schooner]

i mean i have like usage limits in place for the free tier which should kind of make bad actors unable to do much without having their server killed automatically

[teal schooner]

its meant for users who dont wanna buy a vps for a small bot they js wanna test/use for a small server

[vestal fractal]

[teal schooner]

welp i might js go ahead and see what happens hopefully bad actors dont come at me since ill be a very small provider

[vestal fractal]

But for the long term they should probably go for self hosting if they don't like paying

[verbal wraith]

[teal schooner]

hi nynu

i think its been a while since i saw u idk

[vestal fractal]

Make a decent global rate limit that'll do the work

[teal schooner]

wym? my issue is with discord rate limits not ones on my website

i have a token bucket rate limiter already

[vestal fractal]

Oh

[trim geode]

All it takes is one user, using multiple accounts to get multiple IPs and getting your IPs CF banned.

[patent carbon]

and i believe the CF ban can be 24 hours or longer

[teal schooner]

i mean i do have fingerprinting so it wouldnt be as easy to make alts and make alot of servers to abuse the hosting

[trim geode]

believe me. you can't prevent it

[teal schooner]

plus youd have to get the discord alts which if i recall correctly get suspended if the emails seem sus

[teal schooner]

prevent it no, mitigate it potentially

[trim geode]

I have like 15 alts on Discord.

[teal schooner]

well ye but like i can still try to mitigate it

[patent carbon]

only deter it... like by requesting a government ID from anyone making an account like some major providers do for their dedicated IPs

[teal schooner]

i dont think requesting an id would work for this lmao

[patent carbon]

right... thats my point

[teal schooner]

i mean i might js like try and take a risk see what happens

after all i wont be losing much money

[trim geode]

Also having a hosting service tied to Discord account is probably not a good thing especially because Discord accounts get hijacked all the time.

[teal schooner]

what do u recommend

[patent carbon]

agreed... but if users start complaining, youll know why (and from my experience, the people who AREN'T paying generally complain more)

[teal schooner]

google auth?

[trim geode]

Just have a regular authentication.

Not everything needs OAuth

[patent carbon]

requesting a valid payment method even for free tiers is not uncommon too

[vestal fractal]

My browser keeps crashing tabs with STATUS_STACK_BUFFER_OVERRUN

[teal schooner]

i mean idk js seems to have eaiest integration

[polar viper]

display name styles on bots is still only patching per-guild right

[vestal fractal]

yes

[patent carbon]

yes?

[polar viper]

alright

[trim geode]

Also not uncommon to make a $1 charge and immediately refund it to ensure the card is actually valid.

[teal schooner]

maybe google auth since it requires phone auth to create more gmails now

ill js test and like see what happens and make changes accordingly

[patent carbon]

does it? i dont think i did for a gmail i made recently... but i wouldnt be surprised... google is doing dumb things with workspaces recently

[trim geode]

I'm actually of the opinion that even for a "free tier" you should always have some sort of payment associated which would make it not a free tier but essentially free.

[teal schooner]

i mean it sure is requiring me to verify my sim to make a phone number

[neat olive]

it's a rather common KYC requirement for a reason

[teal schooner]

i mean ill see what ima do though i do thank you guys for like chatting with me and giving me options

[trim geode]

Or you can go to the approach that I've seen some people take in modern days with their SaaS and offer like in place of a free trial have a heavily discounted set of months so like for example if you charge $100 a month then you discount it by 90% for $10 for the first month and then you go up to normal charge so that people get a full month of the first month. And really get to experience it.

But all of this is moot because most of the "summer hosting" services I see are essentially just resold over provisioned virtual servers anyway with a pterodactyl or Pelican install on them. And they're not actually a viable hosting solution.

[teal schooner]

i dont rly plan to use pterodactyl or pelican

[patent carbon]

whats the number, something like 70%+ of users dont actually use their service on hosting plans... or something high like that... i might be overestimating

might be closer to 40%

[teal schooner]

either ill make my own panel so i have more customizability or start giving users free kvm servers that have the same resources as u would get on the panel

[trim geode]

Enough to where a common ratio I see for over-provision is 3:1 or 4:1.

[patent carbon]

lol ya 4:1 is insane... assuming only 25% of the users use their plan to the fullest... or at least something like 50% use it but not to full capacity

[trim geode]

Which you would need a way to manage all of these notes and resources which you would need a panel for.

[pale hull]

They don't make one low enough. I use less than 10% memory and like 3% CPU

[teal schooner]

i might get a blesta license if i do end up growing and i see demand for kvm servers so each user has their own panel and link it to proxmox

[trim geode]

I think it was another one where it was like NetCup or something does like a 5 to 1 provisioning is what I was reading. But take that with a grain of salt because I genuinely forget where I read that.

[trim geode]

I think you might be overestimating the market because there's two main parties of people from my research: The people who want to essentially just run the code and not have anything to do with the actual server management or administration; and then the people who want an actual VPS themselves.

Plus you have to remember that software like Blesta is designed for web hosting not discord bot hosting so you'd be fighting the actual software to do exactly what you need potentially.

[pale hull]

Ok I lied, I'm at 55% memory. But my CPU peaked at 6.1% in the last 14 days

[patent carbon]

The CPU:Memory ratio on hosting is often scewed that way... at least right now... RAM is expensive... compute is cheap

[oblique marlin]

Oh wow

[patent carbon]

obviously i know that compute is not ALWAYS cheap... it can be a significant factor especially on larger systems... but at least for bots

[teal schooner]

blesta would be for the vps side of things

[dark moth]

no clue how but i broke garage already

[patent carbon]

that was fast

[dark moth]

got a bucket where every single operation fails with a 403

including with owner tokens

no clue what happened

[patent carbon]

403? really? what might have caused that?

[dark moth]

i have no clue

everything gets rejected as not allowed

[patent carbon]

401 would make more sense if you broke something

[dark moth]

i can't even see in the bucket from the garage ui

even that gets rejected

and that's using a global admin token with no expiry and * scope

[candid lodge]

What are we talking about here

[patent carbon]

why are you talking through a bot?

[granite tusk]

I wanted to see if my bot worked in other servers

And it does thats so cool

[trim geode]

The problem is, you see, if you're already looking at multiple pieces of software to do the job then, IMO, you're going about it all wrong. Plus you're already talking about "X side of things" which means you're looking at multiple services, which means you're not focusing on making a superior service to start out with.

[patent carbon]

personally... i also think hosting providing is a flooded market especially when your target is to offer cheap hosting

like do you own the dedis in the datacenter? or are you reprovisioning hardware from another provider (that likely offers their own budget hosting)

[granite tusk]

What are we talking about tho

[patent carbon]

hosting

[hazy cave]

ciao

[trim geode]

which is why you should go the Vercel/SST route, create a wrapper :P

[hazy cave]

sono italiano

iimmagini che siate tutto inglesi

[trim geode]

Or like blend the 2, offer hosting + managed options

[granite tusk]

I rlly have a bad experience with hosting stuff

[patent carbon]

i think vercel is a nice exception... because they offer reprovisioned hardware because of their UX/DX with NextJS

[patent carbon]

#rules this is an english only server

[modest geyser]

yey dealing with a dbus interface that uses xml to display its results

i like how qt literally has everything

[granite tusk]

I once tried this mobile app called bdfd (bot designer for discord) when i was starting to build bots, and the way you can host bots there is actually pretty comfortable, the free version you can only js watch an ad and they give you like 30 minutes of hosting for the bot i think, and you can js keep stacking the minutes everytime u watch an ad, and they arent that long.
I once reached 12 hours of hosting js by watching free ads

[pale hull]

12 hours is not a whole lot. But I think it is an interesting concept

To use ads

[patent carbon]

Ya. Hosting with ads is a wild concept. People are willing to spend hours just watching ads a week, than spend $2

[trim geode]

For the hoster, absolutely...they make bank off selling the data

for the user, not at all.

[pale hull]

It is a truly free option that works 🤷‍♂️

[patent carbon]

Is it free? I guess people don't value their time into the cost of a service

[trim geode]

Cause that 12 hours of hosting cost maybe like $0.5 at the very very most....but they probably gave the hosting company quadrupole that which gives them way more than they deserve

You could literally spend an hour mowing a lawn and pay for a full month..

[patent carbon]

Like I stopped playing mobile games filled with (non-forced) ads because I value my time more than that

[trim geode]

It's not "truly free" though. they're literally selling their data, and time...

So that hour they're watching ads (or 30 minutes or whatever) they could've actually been doing something else

[patent carbon]

Ya I had a kid come by to ask if he could mow by lawn. Gave him like $10 and he did a TERRIBLE job. Cute kid tho

[pale hull]

Time and data are still things you can give for free

[patent carbon]

He was sweating using that push mower he dragged down the block

[trim geode]

no...no they aren't.

because companies put a price on your time and data

and jobs put a price on it

[pale hull]

You can give things for free even if some people will pay for it

[trim geode]

That doesn't mean the value of it is nothing

just means you don't know the value and they're taking advantage

[rugged vector]

i checked in app an they have a premium plan for 168 days of hosting for 200$ with “ premium “ features

[pale hull]

Someone with no income stream but lots of time might be willing to watch ads

[trim geode]

And if they're making a crap ton of money, great...but they aren't.

[patent carbon]

Hahaha that's insane!

[trim geode]

and they could pay for a month of OVH VPS for that too!

[patent carbon]

Exactly

[trim geode]

almost 2 months actually!

[patent carbon]

Mow every lawn on your block and you pay for a year

Can do that in a day or 2

[trim geode]

well, you gotta pay for the gas for the mower of course

but yeah, basically

[patent carbon]

Push mower. But a sharpening kit is like $20 so account that into the cost

[trim geode]

oh eww, but that's offtopic lmaoo. the general point stands for sure

[patent carbon]

True. But like, teach kids how capitalism works. Teach them how service equals monetary gain. Like a lemonade stand is the common example but that's for like really young kids. Just to teach them how buying and selling works. Now teach them how offering service is given a reward

Because, product == money is simple. Work == money is less tangible

[granite tusk]

There is not alot of people with that kind of amount of money

Or atleast they dont wanna use it for that

[mental helm]

It’s like having a kid

[patent carbon]

Ya that was the point I believe. That's an insanely high amount of money

[trim geode]

they're targeting whales

[rugged vector]

i think if someone have 200$ willingy to spend on some bot they shouldnt use it in bdfd

[trim geode]

no?

[granite tusk]

Congrats

[patent carbon]

Or at least whales who don't know any better. Like Replit

[granite tusk]

Yeah thats what im saying

[dark moth]

ok so it looks from the errors that garage may have bricked itself when i deleted a key, or when it expired, not sure

the 403 forbidden has a body of "unknown key id" with an id that's different from the key i'm using

[rugged vector]

only think i like in that they have a captcha code gives 30 minutes of hosting for free something like this

[granite tusk]

Replit is so comfortable to use, im using replit now with my bots and i rlly like it

[eternal oyster]

Garage? You don't have a garage

[trim geode]

replit also has it's issues from what Ihear

[dark moth]

i'm building a digital garage depot 😛

[trim geode]

what does that even mean

[eternal oyster]

I don't even know what that would entail

[patent carbon]

I've heard the opposite. I've heard it's bloatware, gets almost unusable at scale, and overmonetizes their AI features

[eternal oyster]

Do you park your digital car in it

[patent carbon]

And their pricing is ALSO insane

$20 a month for hosting

[granite tusk]

Unusable for the people who only use the AI agent

[patent carbon]

No. Like so laggy it doesn't load

[dark moth]

well right now its a brick cause 1 of the 3 buckets i made has already become completely broken in less then 8h

[trim geode]

and LLMs are terrible with a lot of Discord bot development

[rugged vector]

they made the main of it agent tho

[granite tusk]

Ive never experience that

[eternal oyster]

Depends on what you're getting

[dark moth]

great sofware, wasn't even trying to break anything

[granite tusk]

I only use the AI for bug fixes

[patent carbon]

How big is your largest project on that? Like estimated file count and estimated lines per file

[eternal oyster]

I don't think €20 was gonna cut it for our bot back in the day. We needed like a TB of RAM, iirc

[rugged vector]

same and it sometimes gives me more bugs in codes it created

[trim geode]

that sounds like yall messed up something ngl

[eternal oyster]

Unsure, but this was Rythm

In any case that wasn't my department

[trim geode]

the only software I know of that needs a TB of RAM is RightAngle and that's processing petroleum trading and a lot of other stuff

and was terribly built

and like 30 years old

[eternal oyster]

I mean we did serve a lot of servers I guess

Actually that may have been for our whole stack, all services, all bots

Ah, whatever. I never touched that side nor do I know much about it

[granite tusk]

My biggest project rn is a security bot to clean up raids and nukes, which has included a backup command that rebuilds the entire server, now the file counts i dont remember, but the project is big just by seeing it and it doesnt lag at all

[eternal oyster]

Rebuilding a server isn't much use when the messages can't be recovered

[granite tusk]

Im working on that, i wanna find a way to do that

[eternal oyster]

You won't find a way, I'm afraid

Not without significant API spam

Potentially, anyway

[rugged vector]

well, it’s not possible that’s why they added a report raid button on discord so they stopped making anti-raid bots

[eternal oyster]

Not to mention it's not great in terms of data retention policies

[granite tusk]

Does it work with external apps?

[trim geode]

Or violating the terms of service

[eternal oyster]

Iirc the person who built the anti raid into discord was hired bc of their anti raid bot

[trim geode]

Or violating people's standard of privacy. Plus if you were trying to resend the messages they would all show a different timestamp so then you lose all context

[eternal oyster]

You'd also have to save all files

[trim geode]

Yep. Which is its own thing entirely

[granite tusk]

For the moment my bot can only save emojis, stickers, channels, server name, only that

[trim geode]

And at that point you might as well just create an online browser for that. But that's in and of itself violates discourse developer TOS because of the whole privacy thing

[granite tusk]

I see

[eternal oyster]

At best you could make an offline backup but that doesn't beat the privacy issue

[trim geode]

But if it's a public but and it joins more than 75 servers you'd have to justify the usage of the message content intent to Discord which I feel pretty confident saying they're not going to approve it for the use of offline backup

[eternal oyster]

Aye

[trim geode]

I mean I'm not discord support or a discord employee but I still feel pretty confident saying that

Especially for perpetual retention

[granite tusk]

Would it be acceptable if the bot asks you for consent to save those chats?

[solid moss]

how is this possible?

[eternal oyster]

Maybe? If you're comfortable with now having to follow GDPR legislation

[trim geode]

It's not about the user consent alone it's about what Discord will approve.

[rugged vector]

nobody would agree probably still it’s the only way, if u dont let them choose u cannot exist

[trim geode]

And I very highly doubt that Discord will approve of your bot storing message data in perpetuity for the use of offline backup and restoration in case of a raid.

[dark moth]

look at the "invites should look like" at the bottom. it prob doesn't recognize it. also this isn't even dev related. contact support for further help with it

[eternal oyster]

But practically I don't think many people would consent, and frankly the idea falls apart quickly without unanimous consent

[granite tusk]

I see then, i wont add that to the bot then

[solid moss]

okay thanks

[trim geode]

DDevs, preventing terms of service violations...one day at a time

[patent carbon]

generally speaking, if you are ever considering storing user data... you have to start considering the legal retention issues... because neither you nor the server owners OWN the messages sent from users

[eternal oyster]

It's also just impractical on an engineering level

[trim geode]

Especially at scale

[rugged vector]

i guess there was a website who clones the server data with selfbots

with messages etc.

[trim geode]

Keyword "was"

[patent carbon]

which is both a tos violation and GDPR issue

[trim geode]

Because I was kind of services are incredibly against terms of service

[rugged vector]

yeah, of course

[trim geode]

So there's no point in bringing it up

[granite tusk]

Yeah im not adding this message store thing i dont wanna deal with that kind of stuff 😭

[eternal oyster]

Legally I'm not entirely sure the person who sent the message 'owns' the message. I do know none of us own our accounts legally, because that would mean the legal right to sell it, which we don't have

[trim geode]

Because it's not relevant in any capacity to what bots do because not only is it bypassing the normal API to do it but it's also a violation otherwise

[rugged vector]

oh yeah it was this

[patent carbon]

oh ya that's a friendly reminder... messages sent in a discord server should never be considered private... always assume that any time you send a message... it's permamently stored by people who dont have your best intentions in mind

[granite tusk]

But yeah what im trying to do with my bot is that you can clean up easily raids and nukes that your server got, and with the backup command it rebuilds everything of the server, except messages ofc
The main point is that you dont have to create a new server when u can rebuild the server itself with the bot

[patent carbon]

server templates exist

[rugged vector]

it’s in probably ever server with more than 5000 members that ur messages getting saved in someplace

[patent carbon]

id say far smaller than that... but ya... same idea

[patent carbon]

https://support.discord.com/hc/en-us/articles/360041033511-Server-Templates

[granite tusk]

What about the big servers that has alot of channels

[patent carbon]

use the built in tool to create snapshots of a server and restore them at any time

[granite tusk]

Plus not eveyrone has the time to edit the channels

[patent carbon]

what you are making is literally a built in feature and has been for a while

[mental helm]

There’s a bot named xenon that offers to save messages with premium tier but I haven’t looked to deep into it

[rugged vector]

there is bots can make it

[trim geode]

Why are people editing the channels so often then? I think I've maybe changed the channels once or twice in the past 6 months

[grave garden]

thats the whole point of server templates is to be a point in time copy of channels, roles and permissions for those roles

[granite tusk]

Im js making like my version of that feature, and you can js do all that with my bot by js using 2 commands

Literally 2 clicks

[patent carbon]

oh... the built in one is 3 clicks... dang

[grave garden]

gl with it!

[verbal wraith]

1 less click, less than a second saved

Man, what I'm gonna do with that time

[granite tusk]

I can make it just one click

[zenith belfry]

guys i made my first physical project

[granite tusk]

To save time yk haha

[trim geode]

But at the same time also requires a bot to be added to your server with full permissions to everything with a high risk of being hijacked

[zenith belfry]

never tried arduino

[patent carbon]

and you have to hope that the bot doesn't go down at any point and you lose your backup... especially from a small bot

[verbal wraith]

You are saving more time typing "yk" you know

[granite tusk]

Yeah see

[patent carbon]

backups are generally a thing you set up once, forget about for many years, and then hope you have

not something i would rely on a bot for, personally... any bot

[rugged vector]

a bot that creates a backup would be good when it does anything on the server, but it is not necessery

the only anti-raid feature i like is protecting the server vanity url

[patent carbon]

what does protecting a vanity url mean?

[rugged vector]

when someone try to stole ur vanity url the bot makes it the one u selected

so nobody can use /discord-developers or ur server url in another server

[patent carbon]

... i dont understand the logistics of that... how is that something a bot can do?

[neat olive]

yeah I'm not following this, either

[granite tusk]

Well besides the backup thing, the bot can also tell you who did the raid, mainly for people who use external apps for raid, and that type of bots those not appear registered in the server audit log

[rugged vector]

look, im not the one who created the bot, but does it work, f yeah

[neat olive]

also a backup of a discord guild is a rather vague thing

[neat olive]

but how does it work

[patent carbon]

sounds like with scraping

[robust tusk]

Hello guys, how do I get rid of this "likely spammer" thingy? My dms and friend requests get ignored or go to spam, and even my messages used to hide from users in server.

[patent carbon]

maybe with the Get Invite just to see if it returns a value... but like... hmm

[strong seal]

This server is for help with Discord APIs, SDK and other various integrations. For general support, please contact Discord at https://dis.gd/contact, or send us a message on Twitter at @discord_support

[viscid steppe]

me when i

[robust tusk]

A bot auto replied with some irrelevant stuff and closed my ticket

[granite tusk]

This server does not even have that lmao 😭

[patent carbon]

no one can help you here

[granite tusk]

Literally js tested it

[neat olive]

me when I look at the interaction info

[verbal wraith]

Hacker moment

[patent carbon]

hax0r moment*

[granite tusk]

Nynu moment

[pliant tartan]

i think it does??

[patent carbon]

it does

[pliant tartan]

nope it doesnt

[patent carbon]

this server 100% does allow the use of external apps... because the moderators actually know how to moderate it... while most people dont

[granite tusk]

I just used my external app to type here and indeed it does not have that enabled

[pliant tartan]

definitely used to tho

[verbal wraith]

[flint epoch]

Permissions discord.js@14.26.4

[modest geyser]

I love dbus!!!!!!! /j

[patent carbon]

100% does

[pliant tartan]

p sure thats guild installed

[patent carbon]

its not

[verbal wraith]

It's not

[pliant tartan]

huh

[spring hollow]

it’s a user app

[cold bay]

meow

[flint epoch]

Teams

[viscid steppe]

you can use external apps here, as long as it's relevant

[pliant tartan]

now im confused because my message command didnt work

[viscid steppe]

you can just turn off on your server if you don't want to deal with it

[pliant tartan]

does discord have different behaviors for slash and message commands

[patent carbon]

is it your app? are you sure it's not forcing itself to ephemeral?

[neat olive]

I want to work on some functions but I need to wake up early tomorrow

[pliant tartan]

150%, its mine and it works perfectly elsewhere

[dark moth]

well with how dismissive some garage people are about this thing eating my data i guess i might end up having to go for something else for my storiage, that would suck

[short charm]

Seems like there aren't any images here

[pliant tartan]

what

[dark moth]

[pliant tartan]

why did it not work then but works now

[modest geyser]

Probably slowmode

[pliant tartan]

could be...

[candid lodge]

🧠 IQ Report: Samtino
[██████████░░░░░░░░░░] 103/200

Perfectly cooked. Not too raw, not overdone.

[verbal wraith]

Looks like fun thing to debug

[neat olive]

it does mention it

[granite tusk]

@patent carbon congrats

[pliant tartan]

oh hell no, nobodys reading that 😭
id much prefer if it just denied sending the interaction 😭

[modest geyser]

Also why tf is dbus so stupid and their introspect interface returns xml

I would have much rather took json

[dark moth]

tbf enterprise tooling is a lot better for xml then json

[modest geyser]

Dbus isnt enterprise tooling

[dark moth]

the fact xml can have its own blueprint schema reference baked in is quite nice

[modest geyser]

Dbus is the worst invention ever made

[dark moth]

its a core linux stuff, lots of the people working on it are engineers from enterprises

[modest geyser]

Good idea bad implementation

[modest geyser]

No wonder its so bad /j

[pliant tartan]

ive been thinking abt it and what is red hats business model

is it just selling rhel

[dark moth]

those tend to stick to what already works well with their (enterprise) stacks

[modest geyser]

Money from support contracts

[pliant tartan]

that kinda makes sense

[pale hull]

I imagine they are quite a bit of money from being the Linux distro that my uni uses for the Linux labs

[candid lodge]

🎱 Is 2026 gonna be my best year

Don't count on it.

[granite tusk]

Oh god

[pliant tartan]

just gonna leave this here

[modest geyser]

Yo chat is it good if my hard drive is making a rattling and a clicking sound

[pliant tartan]

my drive did this once, that was agonal breathing apparently because it completely died the next day

[modest geyser]

But that drive is apart of my laptop hdd raid 0 array with all my yuri anime!!!

[pliant tartan]

better email it all to me again

[frigid ferry]

:spatklyEmoji: Yes. This indicates that the hard drive is about to reach peak performance!

[stoic umbra]

SOMEONE HELP

FOR SOME REASON MY ACCOUNT SENT PICTURES THAT I DID BIT SEND WHAT IS GOING ON

[patent carbon]

you downloaded malware... on a device other than the one you are currently using, change your password

[stoic umbra]

What of if I use 2

I use phone and computer

[patent carbon]

just reset your password on a device that you didnt download the malware to

so i am assuming use your phone (less likely to have malware on it)

[stoic umbra]

Okay thanks

What if it happens again

[patent carbon]

once you do that... you should completely reset your computer... reinstall windows and start from scratch

[stoic umbra]

Wait you know the mr beast photo with the money ?

[patent carbon]

yes...

[stoic umbra]

That’s what they sent

[patent carbon]

yes... because you downloaded malware and they stole your token

you should be a lot more concerned about the malware you installed than your discord account... that currently has full access to everything on your computer... you should go ahead and reset your password for everything you can think of

[fallow ridge]

https://cdn.discordapp.com/attachments/1468551135123214336/1495417515784802504/mistorbeast.gif

[unique tundra]

FSFYUSDGHBFNUIDSBFGHNOUIUSHANFISPS

[verbal wraith]

[patent carbon]

https://tenor.com/view/magic-fetus-keyboard-slam-keyboard-smash-head-slam-osu-gif-21215168

[pliant tartan]

dude its not even mrbeast

did yall see the hello kitty smp malware 😭

[rugged vector]

damn i guess im gonna give all my money to them

[pliant tartan]

https://youtu.be/JKKMcoyiFDQ
literally steals your discord token (really badly written malware btw, p sure i could do better)

[vestal fractal]

🥀

[pliant tartan]

eric parker has some gems on his channel

older videos were better tho icl

no need to reverse engineer a malware written in unobfuscated javascript tho

[silent bane]

x

[rugged vector]

there was one as a minecraft pack that stoles ur token too but never saw this

[cunning coyote]

Eric Parker mentioned

lfg

[patent carbon]

honestly... not a bad malware method... it would probably be a while before someone realizes this is malware...

[stoic umbra]

I only downloaded discord though the Microsoft store

[patent carbon]

obviously not... because that's the only way those scam images could be sent from your account

[viscid steppe]

It could be any apps

[pliant tartan]

scanned a qr code?

[patent carbon]

^

[patent carbon]

exactly... it isn't necessarily installing Discord that was the source of the malware

[stoic umbra]

Yeah on my phone

[valid jungle]

i create internet

[pliant tartan]

and it took you to discord...?

[stoic umbra]

No I had discord on my phone and it Logged me onto this account on my cot

Computer

[patent carbon]

and you only put in that QR code into the Discord app you installed from the microsoft store? you didn't put it into some website or server "verification" system?

[pliant tartan]

this is why i say qr code login should be destroyed and dismembered

[stoic umbra]

Idk bro

This was like 1 year ago

[patent carbon]

... this happened a year ago?

[valid jungle]

i create windows

[patent carbon]

then why are you asking for help now? the problem is over...

[pliant tartan]

anyway i hope discord removes qr code login forever

[valid jungle]

aye!

[latent cipher]

Won't happen

[pliant tartan]

dont see why

[latent cipher]

Don't see why they should either

[patent carbon]

nah i see why they should but i agree that they wont

QR Code login is a very easy way for bad actors to perform phishing attacks... and people don't generally read warning messages at least analyze what they are signing into

[pliant tartan]

because its an attack vector on its users

webauthn solves this - convenience of qr code log-in with the security of public/private key signing

[latent cipher]

So are passwords and you don't see them removing those either

[dark moth]

it's a pretty safe way to hand off a session. they just need to secure it better

[blissful sequoia]

omg this conversation again 😭

[pliant tartan]

we teach 7 year olds to not share passwords, qr codes are considered safer by the public

[dark moth]

like don't let let users send such links to each other on platform, and maybe don't allow it if the user teleports all over the world

[patent carbon]

ya, people are generally less willing to give out password, and these days, most people use a password manager so unless they are manually putting in their details against the password manager's recommendations (as most have phishing detection), that is a layer 8 issue

[dark moth]

but when secured qr codes are far safer as you can't really brute force them

[pliant tartan]

or just use webauthn and dont allow entities that arent discord to create sign-in qr codes

[dark moth]

you need an already authenticated session to confirm

[latent cipher]

QR code login is already country geolocation locked

[dark moth]

with how much i see scams around them that's hard to believe

[latent cipher]

I've had it not work several times whilst connected to a VPN in another country

[patent carbon]

well the VPN might be the issue, not the georestriction

[pliant tartan]

which just means the attackers can use a vpn and brute force your country

or create a scam targeted towards a certain country, like, shared in their language

[latent cipher]

Well no, it worked fine when I then switched to a VPN server in Germany. Of course could still just be that the servers from that country specifically were blocked but I'm fairly certain it's always worked when connecting via a German server

[pliant tartan]

but the solution is already there - its webauthn and it's already implemented in discord and works fantastic*
-# * - except on linux

[stoic umbra]

No I Loggen in 1 year ago

[patent carbon]

ok... so at this point, we really told you all we can say based on the information you provided...

your course of action is still the same, reset your password, and to be safe, reinstall windows to ensure that there's no malicious files on your computer

if you have any issues beyond that, you should check out #safety or contact !support

[strong seal]

This server is for help with Discord APIs, SDK and other various integrations. For general support, please contact Discord at https://dis.gd/contact, or send us a message on Twitter at @discord_support

[latent cipher]

Now get the entire userbase to migrate

[pliant tartan]

takes 2 months of upfront notice with notifications, wouldn't delete email/password log-in

also most of the userbase doesnt login on a daily basis

they have a computer and a phone logged in, maybe they log in when they get a new device

[latent cipher]

Okay so I just checked and apparently it doesn't geo location block it but I think it forces a captcha and as of recent also requires you to enter your 2FA code

The captcha I'm not certain because it just keeps giving me it and I'm not gonna keep trying until it doesn't but for 2FA they'd obviously not just put that on some

[pliant tartan]

yeah 2fa was a good change

i assume many peoples little red lightbulb lights up when they have to supply a 2fa code

[sacred oak]

I think discord should at very least block linking the qr code links elsewhere. Basically all those NSFW scams use those

[pliant tartan]

these scams really depended on you just doing stuff on autopilot

[pliant tartan]

quite impossible to do that, id just go all in on passkeys

one problem with passkeys is you either have to have a passkey-compatible desktop password manager or a phone and a computer with bluetooth, where many desktop PCs simply don't have bluetooth

[pale hull]

Requiring 2FA for the QR code login kinda defeats the point. The QR code is the 2FA

[native pilot]

yeah I saw someone logging in the other day and get 2fad

[pale hull]

I just want a physical device that I can use for my passwords that does not require additional software on the device.

[trim geode]

Yubikeys are great

[pale hull]

I thought they require you to have additional things installed on a computer before they work

[trim geode]

Never had to for me

[pale hull]

time for youtube as I might have a misconception on how they work

[modest geyser]

@patent carbon bro

[patent carbon]

bro

[trim geode]

https://www.yubico.com/products/how-the-yubikey-works/

depends on which one you use and how you're using it.

I have an older version that's essentially hardware OTP

[jade current]

Can it host a Discord bot

[blissful sequoia]

well given thats not what its for probably not lol

[trim geode]

yes

[blissful sequoia]

welp

[trim geode]

you should buy one to do it

for legal reasons that's a joke

[pale hull]

Interesting

[trim geode]

and I just want you to be more secure

[pale hull]

So it just acts like a usb keyboard. That is cool

[trim geode]

sometimes, yeah

my copy does because it's older.

but the modern specs are a bit different

but tbh that's outside my wheelhouse

[pale hull]

how do you carry yours around? That would be my main concern

[trim geode]

On my keychain

It's right there with my carkeys

Basically so I always have it or always stored safely, which works for me

[sacred oak]

Ngl, I don't even have a passkey

I just use auth app. I'm increasingly being worried about that

[simple fog]

am thinking of making a custom music bot for my server. what resources am I going to need?

[patent carbon]

music bots are almost always a TOS violation... unless you are able to secure a commercial license to the music, or exclusively use non-copyright music

[trim geode]

#1 resource you need? A good lawyer 😉

[simple fog]

am still learning to make bots by taking help from ai

[jade current]

AI won't be much of a reliable help

[simple fog]

but how do i make it from scratch

[patent carbon]

we are NOT going to help you violate the TOS

[simple fog]

its impossible for me

[jade current]

With documentations and guides online that aren't AI

[simple fog]

um okay but can u help me with moderation bot?

[patent carbon]

depends on your question... what help do you need?

[twilit python]

Hi guys, I have a problem with threads, I can't create private ones even though I have Nitro and level 2 Discord server boost

[strong seal]

This server is for help with Discord APIs, SDK and other various integrations. For general support, please contact Discord at https://dis.gd/contact, or send us a message on Twitter at @discord_support

[simple fog]

as am still in the learning stage, Ive been trying to make some bots, like a music bot. but since it’s a TOS violation, I canceled that project and am now thinking of making a bot like Dyno that can moderate the server.

[twilit python]

I just wanted to know if I'm the only one experiencing this issue after the latest update

[trim geode]

That's even easier, and there's plenty of guides online

[polar viper]

go to support

[polar viper]

defo good

[simple fog]

umm can u redirect me there?

[patent carbon]

What programming language are you using to make your bot? And what library, if any, are you using?

[simple fog]

am using python and for the library am using discord.py

[spark idol]

a moderation bot with d.py for me was about a 5.5/10 on the difficulty scale

it scaled though it didnt go down or up the further i got into the project, maybe a 6 near the end though

[grizzled remnant]

Hey new glitch came
In my server there is security bot
I given admistrative roles to my friend but those roles are below the bot
But in that time the again authorize the bot and added again same bot but now this time they stopped the perms after they nuke my server

Now is there any solution for this

[patent carbon]

ya, i personally can't help you with python... i have never used it

[simple fog]

what do u use?

[patent carbon]

either typescript or go

but leaning more to go these days

[patent carbon]

first problem was giving a bot administrator permissions

[jade current]

Python is cool

[grizzled remnant]

No see
This way if given any perms means they can easily nuke svr

My issue is there any code related solution for this

[simple fog]

oops whats go btw

[tired obsidian]

A programming language
https://go.dev

[spark idol]

if err != nil

[jade current]

Don't give bot perms

[spring hollow]

that doesn’t even make sense

[tired obsidian]

That's b/c you don't Go

It's standard Go error handling

[grizzled remnant]

Bro can you dm me once i will explain everything

[jade current]

No

[tired obsidian]

Dont' try to draw people into DMs. Your server is cooked, nothing to do

[spring hollow]

makes sense now lol

[patent carbon]

in go, an error type is a pointer to an error struct... nil is their version of null and so that is a common pattern where you do

value, err := function()
if err != nil { return }

[simple fog]

man ive never heard about it

[tired obsidian]

Well, nothing but "don't give ~~ random ~~ bots admin perms" that is

[jade current]

https://discordpy.readthedocs.io

[patent carbon]

dont give ANY bot admin

[spark idol]

you should have created a template for your server too

periodically

[grizzled remnant]

Server not bot issue

[spark idol]

giving a bot admin is one token away from blowing up everything

[tired obsidian]

Well, the server issue is you gave a bot admin perms so…both? lol

[tired obsidian]

Server templates don't help when a bot with admin perms does what it does 🤷

[jade current]

Mi levelling bot requires admin

[tired obsidian]

No, no it doesn't

[simple fog]

even the ones that are fully made by us?

[spark idol]

yes

[patent carbon]

i wouldnt even give my own bots admin

[simple fog]

why tho

[tired obsidian]

There is very little that a bot should be doing with admin perms that a person shouldn't be doing, y'know?

[patent carbon]

i actually am less likely to give my own bot admin than a public bot... as i have far less security than they do with my token

[spark idol]

agreed

[patent carbon]

but ya, there is 0 reason to give a bot admin permissions... it's 1 mistake (from anyone) away from destroying your server permanently

[spark idol]

ive blown up a server by accidentally pushing a bots token with admin to github its very easy to accidentally do

never again

[patent carbon]

i cant think of a single reason to ever give a bot admin... there is no reason a bot should ever need to bypass permissions

[tired obsidian]

Here's the thing, ADMINISTRATOR perms is just a shortcut for "let it do everything". Instead, you should give the bot exactly the perms it needs

[spark idol]

maybe a little script to check if it has the perms it needs and if not then enable those only

[tired obsidian]

Again, just use the perms it needs. If it's a "mod bot" then give it MODERATE_MEMBERS perms. No reason it should be able to delete channels, right?

[patent carbon]

the bots that ask for administrator permissions are the ones with lazy developers... aka... ones i wouldnt trust

[trim geode]

go mentioned

[spark idol]

its pretty easy to see what permissions it needs with the built in discord permission code generator on the dev page

[patent carbon]

especially the ones that claim they're "security bots" which themselves are following bad security practices

[tired obsidian]

The more I write my own bots the more I realize how ridiculously bad popular and "big" bots are. Like 🤢

[patent carbon]

ikr... the things that big bots offer are so simple... most of the time

[tired obsidian]

And now most of what they do are built-in to the app. Kick/ban has always been there but now there's timeout too

[trim geode]

There are limitations to native though

[tired obsidian]

True, but most "mod bots" don't do anything the native client does

[trim geode]

for example, timeout is limited to 27 days

[patent carbon]

the bot i think i do like the most, not because it's super hard... but because it's annoying, is Apollo... an event maker and RSVP tracker somewhat designed for raid planning so you can have specific slots

but ya, Scheduled Events solve this just in a much more simple way... less detail

[trim geode]

Or tempbans

[tired obsidian]

See above about "lazy devs"

[patent carbon]

the fact that tempban / softban isn't a native feature in the big 2026 is also wild to me... but it's fine

[tired obsidian]

To be fair, if you're going to timeout someone for the entire month of February…just kick or ban 'em

[trim geode]

ehhh, there's reasons to keep them

[tired obsidian]

Yeah, but those reasons are few and far between. Most servers just need to timeout for a day or less or just outright ban

[trim geode]

For example, if someone is in a streamer's server and uses it for live notifications (which are notoriously bad for mobile notifications on Twitch) then they could still use timeouts.

agreed though it's rare to need a longer timeout, but it is technically a limitation of the native

Which is wild to me cause like if it was 12 months, that would make more sense to me

[tired obsidian]

Are there good reasons to use a bot for more granularity? Totally, yes. Do most devs use those features to set their bot apart from the native client? No, not really

[trim geode]

but 27 days feels so strange

I'm genuinely curious the logic behind that

30, 31 days...even those make sense

[tired obsidian]

I'm not saying you're wrong, Matt. I'm just saying that most of the "Mod bots" I've seen don't do anything beyond what I can do myself with a few taps of the screen

[trim geode]

oh yeah I agree, but now I'm just more curious about the 27 day limit

and the reasoning behind it lmao

[tired obsidian]

My totally random and in-no-way rational guess? JS Dates 😭

[trim geode]

how would that make sense?

[tired obsidian]

Because the JS Date object doesn't lol

-# make sense, that is

[patent carbon]

27 does seem a little arbitrary.. especially because the api is python iirc

[trim geode]

I know JS dates can be bad, but 27 days still feels weird

[patent carbon]

like, why not 30?

[trim geode]

My only guess would be that there's some partitioning or system that's running that if someone hits 30 days or something..something breaks. which is super vague I know, but it's the only thing I can think

Like how if you mass delete messages that are too old you negatively impact the DB because of partitioning

[patent carbon]

actually... that doesn't sound completely unrealistic...

[granite tusk]

Guys i wanna do a new bot but idk what type of bot can i do, give me ideas

[trim geode]

or maybe something with the pruning system? My only other guess

[jade current]

A bot that gives ideas

[patent carbon]

a bot that generates bot ideas

[trim geode]

a bot that generates bot ideas

[tired obsidian]

Connect the bot to a joke API or something like Chuck Norris Facts

[trim geode]

Okay Mr 2010

[granite tusk]

This server is full of intelligent people

[tired obsidian]

Make a command that grabs a random fact and one with a kind of fuzzy search

[patent carbon]

icanhazdadjoke.com is great

[tired obsidian]

There you go!

[granite tusk]

I wanna do smth big bro

[tired obsidian]

Start small first

Walk, then run

[patent carbon]

then go to the servers youre in, find a problem that could be solved with a bot, then make that

[trim geode]

makes sense

[patent carbon]

is that before or after i fixed the typo

[trim geode]

after

before there was no registration

[granite tusk]

Bro its not my first time making a bot give me a good idea

[tired obsidian]

That was a great idea, though!

[tired obsidian]

Otherwise this ☝️

[trim geode]

then go to the servers youre in, find a problem that could be solved with a bot, then make that

– @patent carbon, literally 1.5 minutes ago

[granite tusk]

[jade current]

Just ask AI for ideas

[tired obsidian]

If they wanted to ask an LLM they would have done so. They asked people for real ideas

[granite tusk]

Oh thanks matt you r a genius, nobody else would have such an idea, not even samtino

[jade current]

In a world of Discord bots that does something and everything, build one that does nothing at all

[granite tusk]

That one bot prototype i have in my trashcan

[patent carbon]

the reason i learned to make discord bots is because in a server i was moderating, we had issues with the amount of manual intervention it took to review applications for permissions in our gaming server, and the amount of time it took to 1, review the request 2, update a google spreadsheet, 3, send a dm... so i made a bot to automate it

the bot wasn't special... it wouldnt be popular outside of that server... but even with how bad the codebase was/is (i should finish the rewrite for it some day... ) it's still used to this day, years later

[granite tusk]

Is this supposed to be a bot idea cuz i already did it

[tired obsidian]

It's an example

[patent carbon]

no, it was not a bot idea... it was an example of how to FIND a bot idea

[tired obsidian]

He found a problem to be solved and solved it

[granite tusk]

OOOH OKK

I think i have an idea

[patent carbon]

i even sait it in the last section... the bot wasn't special... but it filled a need and is used to this day

[granite tusk]

Im gonna make a bot that gives me good ideas and not jokes or stories

A bot that will solve MY problem rn

Haha see i listen to your idea

In a very bad way

🙄

[river rapids]

If you can't find any ideas for a bot, how about you expand your skills and learn something new that can integrate with a discord bot? Such as a dashboard, or a tool that solves a problem you may have

[patent carbon]

you can listen to our advise however you wish... you could completely ignore it... or you could follow it word for word... it doesn't really effect us... we just offer it anyways

[trim geode]

But how will you populate ideas...without ideas....

[patent carbon]

^^^

[granite tusk]

Hmm idk i have tried everything maybe thats why im out of ideas

[patent carbon]

that is also really good advise... the amount of private github repos i have of half finished things that will never see the light of day is huge

[granite tusk]

You confused me soo bad rn

[trim geode]

Fr...me too. I have domains, private repos, and notepads full of them

[granite tusk]

You making me feel guilty by not listening to ur idea

[river rapids]

There are alot of ideas, just because something may be done doesn't mean you can't improve and innovate upon that idea. Such as if you're a student, a quiz based discord bot could be a great idea to improve your knowledge on something you enjoy

[patent carbon]

dont feel guilty... there's no right way to be a developer... you can do it however you want... we aren't the golden source of truth... we actually have some often unpopular opinions on development

[tired obsidian]

JS is best language. Hashtag-fightMe

-# my unpopular opinion

[granite tusk]

STOP YOU R STILL MAKING ME FEEL GUILTY VRO 😭😭😭😭

[native pilot]

typescript my beloved

[river rapids]

You could quite literally check social media and see people's criticisms about a tool, platform, or system and then see if that's something you can improve, if not try learn to do that. Expanding your skillset is the best you can do until you can find a good idea

[tired obsidian]

madeline has been slowly converting me to liking TS…

[granite tusk]

Mhmm

Great idea banana
This is why you are my fav fruit

[patent carbon]

good... TS is just objectively better... it does everything JS does and more

[trim geode]

wait...maybe you can answer our question from earlier

[patent carbon]

yes, purple is a color

[jade current]

Violet