Arc Raiders Logged Private Discord DMs And Tokens In Plaintext, Researcher Finds

A serious security issue in Arc Raiders’ Discord integration has been uncovered by computer engineer Timothy D Meadows II, who posted a full write-up of the findings on his personal blog. These issues stem from the fact that the Discord software development kit (SDK) logs an unnecessarily large amount of user data, including direct messages that most users assume will remain private.

One of the more concerning of Meadows’ findings is that a players’ Direct Messages “were captured by the game's Discord SDK gateway connection and written in full to a plaintext log file stored locally on the user's machine.” While this file is stored locally, it’s often transmitted to the developers so that it’s easier to troubleshoot bugs. That means these messages could have been read by anyone on the development team because they were saved in plaintext rather than being encrypted.

This isn’t ...