Spyware Scraping Discord Messages for AI Training
Discord, a platform known for its lively and ephemeral chat messages, is facing scrutiny due to a service named Spy Pet, which is actively scraping and compiling user data from public servers. Despite the seemingly transient nature of Discord chats, Spy Pet is capturing vast amounts of data, claiming to track over 600 million users across more than 14,000 servers. This revelation raises significant privacy concerns for Discord users who might have assumed their activities were more private and scattered.
Spy Pet, as confirmed by Joseph Cox at 404 Media, offers access to a database of purportedly 3 billion Discord messages. Customers can pay for this data using bitcoin, ethereum, or other cryptocurrencies. The service allows users to search for individuals, revealing the servers they are active in, a raw and exportable table of their messages, and even connected accounts like GitHub. Moreover, Spy Pet lists over 86,000 other servers in which it has “no bots,” yet still claims knowledge of their existence, suggesting a broader reach than directly indicated.
Discord’s platform does not make server messages easily accessible or searchable like blog posts or social media feeds. Many users might not anticipate their messages, server memberships, bans, or other data being captured by a bot, compiled, and sold. 404 Media verified Spy Pet’s capabilities with multiple user examples, confirming the service’s claims. Notably, private messages are not mentioned by Spy Pet and are presumably secure, but the extent of the public data collection is alarming.
Spy Pet’s website openly targets various audiences, including those training AI models and federal agents seeking new intelligence sources. The service ensures “secure and confidential” searches with random usernames for its users. However, attempts to request data removal are met with derision, as clicking on the “Request Removal” link plays a mocking clip from the Spider-Man movie, featuring J. Jonah Jameson laughing at the idea of advance payment.
The reach of Spy Pet’s scraping is extensive, affecting nearly every public Discord server frequented by the author for research or reporting purposes. While those who haven’t paid for access can only see benign public-facing elements like stickers, emojis, and member totals, the potential for misuse of this data is significant. Discord’s investigation into whether Spy Pet violated its terms of service and community guidelines is ongoing, with the company committed to enforcing its policies if violations are found.
Spy Pet’s operation underscores a broader issue of privacy and data security on platforms like Discord. The service scrapes data en masse, archiving and tracking users’ messages and activity across servers, including voice channel participation. This data is then sold for as little as $5, making it accessible to anyone with cryptocurrency. The implications for ordinary users are concerning, as their activity, previously assumed to be fragmented and relatively private, is now potentially exposed to third parties, including stalkers and law enforcement.
The service claims to track over 14,000 servers and 600 million users, maintaining a database of over 3 billion messages. Spy Pet’s website pitches itself as a tool for curious individuals and professional entities alike, with a bold and somewhat sinister marketing approach. The ability to look up specific users and see their messages across various servers at once is a powerful tool, one that could be misused in numerous ways.
The legality of Spy Pet’s activities is murky. While scraping publicly accessible data is not inherently illegal, the service’s disregard for certain regulations could lead to legal troubles. For instance, scraping and selling data about minors without consent is illegal in many regions, including the United States. Additionally, under the General Data Protection Regulation (GDPR), European Union citizens must have a method to request the removal of their data. Spy Pet’s mocking response to such requests clearly violates these principles, exposing the service to potential legal action.
Discord’s response to the situation is critical. The platform is committed to protecting user privacy and data, and its ongoing investigation into Spy Pet’s activities will determine the appropriate course of action. If violations of Discord’s terms of service and community guidelines are confirmed, the company will take necessary steps to enforce its policies. However, the extent of the data already captured and sold by Spy Pet poses a significant challenge.
This situation serves as a stark reminder of the vulnerabilities in digital communication platforms. Users must be aware of the potential for their data to be scraped and sold, even on platforms that seem private and secure. The rise of services like Spy Pet highlights the need for stricter data protection regulations and more robust enforcement mechanisms to safeguard user privacy.
As digital communication becomes increasingly central to our lives, the importance of protecting personal data cannot be overstated. The case of Spy Pet and Discord underscores the need for vigilance and proactive measures to ensure that our digital interactions remain private and secure. Users should be mindful of their online activities and the potential for their data to be misused, while platforms must prioritise user privacy and enforce policies that protect against such invasive practices.
In conclusion, the revelation of Spy Pet’s extensive data scraping operation on Discord is a wake-up call for both users and platform operators. It highlights the ease with which public data can be harvested and the potential consequences for user privacy. As the investigation into Spy Pet continues, it will be crucial for Discord to take decisive action to protect its users and reinforce the importance of privacy in the digital age.
for all my daily news and tips on AI, Emerging technologies at the intersection of humans, just sign up for my FREE newsletter at www.robotpigeon.be
