This was enabled because you enabled it. Nobody else is experiencing this my guy.
If you didn’t give it permission it can’t read contacts. That’s an explicit permission request on both iOS and Android: You can’t just scrape someone’s contacts.
This is my job. I’m a staff level software engineer who previously worked at Google. My entire career has been writing Android apps.
Permissions are integral to phone app development and contacts is a specific permission that is heavily locked down.
So yes: I can possibly know and I have literally read the source code.
Unless you’re trying to insist that Discord developed a new 0 day that lets them bypass both Android and iOS operating system locks and then decided to use it to scrape contacts while giving you an option to turn it off?
Cause if that’s your supposition you’ve got a bad case of magical thinking.
So yes: I can possibly know and I have literally read the source code.
Discord, to my knowledge, is closed source, and has not had a source code leak. So taking your word for it, if you’ve seen Discord’s source code, then you work for Discord?
Access to Contacts has to go through the Android API, which means the user has to explicitly grant permission for Discord to access that specific functionality. That’s what the comment you’re replying to meant: access to contacts is protected at the operating system level and they’ve seen the source code on the OS side. Permissions might have been granted by the user reflexively, just muscle memory, when setting up Discord, but it absolutely had to have happened if Sync Contacts was enabled. Unless there’s some kind of bug where Discord enables the in-app setting without actually having the permissions to access contacts–I guess that could be possible. It couldn’t actually see any contact info in that instance, but it would try. If I go into Discord settings and try to enable the Sync Contacts option my phone displays the built-in Android permissions prompt with the text “Allow Discord to access your contacts?”
Thanks for the reply. I wouldn’t have thought they meant Android source code but that makes sense lol. Also this is the kind of reply I think OP would have appreciated more than just someone saying “you’re wrong, you must have done something wrong.”
Unless there’s some kind of bug where Discord enables the in-app setting without actually having the permissions to access contacts
That’s the bug exactly. It’s kind of a UI glitch; but I found out through Samsung bungling my permissions preferences through a One UI (OTA System) update, that it actually does enable the in-app setting by accident and that this is going to access your contacts if the permission is presently GRANTED, but not throw up a prompt asking for permission if the permission is already DENIED.
I saw the comment before it was removed. It was along the lines of OP saying,
“This is the type of reddit response that I moved to Lemmy to avoid” and then continued on a few more sentences antagonizing the person for making a dissenting comment. Essentially finishing with “just because you aren’t having the issue doesn’t mean tumblr and I aren’t”.
IMO the commenter wasn’t out of line by any means. It may not have been insightful or additive, but the response it received was tonally angry and not very nice. “My guy” isn’t instigatory by any means, IMO at least. However, other comments OP responded to didn’t all have this same inflection so it may have just been getting tired of the same kind of responses.
Either way, I think it was an overreaction overall. OP has no way of knowing with certainty that this setting had been disabled by them before and subsequently re-enabled by Discord, obviously we have no proof either, and given the litany of comment saying it was disabled without user interaction we quickly fall into speculative territory. Which is meaningless and easily becomes what we see here in this thread, very very quickly. Edit: I think something that may have helped prevent this is posing the thread more as a PSA/are others affected style post, rather than being accusatory about an update changing settings.
When I made my post about Meta Services on Android, I wasn’t insinuating that Meta on Android is spyware and that every phone is going to have this background service running regardless. No, I got a new phone, I did some snooping, I found the service. I thought it would suck if others didn’t know about it, so I brought it up. Many people did, many people didn’t, and that was all I wanted. The tone from this post didn’t feel like that and I think that tends to skew responses to be more antagonizing than they might mean to be. :End edit
And of course, it doesn’t help that the closing comment of the thread is “Apparently we can’t have a civil discussion here without arrogant assholes inserting themselves into the conversation so they can gaslight us. This has become as bad as reddit.”
So effectively doubling down on the “I moved here away to get away from reddit opinions”, calling anyone who has a tone arrogant and uncivil? Further fueling the fire.
Largely owned by tencent afaik, putting things that are QoL and somewhat accessibility behind paywalls (like themes are a nitro only thing), do nothing against the spam bot malware thing (and they can scan the messages, since you can set the nsfw filter on them), not searchable outside of the app so things can get lost easily, their audio function is somewhat known to be problematic (for me it „catches“ the full audio out without software in between, so game sound or Netflix or whatever gets cut off completely).
Those are what I can think of quickly. I am also not knowledgeable enough to accurately judge their software in terms of performance, but it feels very bad to me.
Discord is not publicly traded yet, so you can’t buy Discord stock on the stock market. A publicly traded company has registered its shares for trading on a public stock exchange such as the Nasdaq or the New York Stock Exchange, and that hasn’t happened yet for Discord.Nov 17, 2023
While the exact percentage of Tencent’s ownership in Discord is not publicly disclosed, reports indicate that Tencent acquired a minority stake in the company through a funding round in 2018. This investment allowed Discord to secure substantial funding and further develop its platform and services. Despite Tencent’s involvement, Discord maintains its operational independence and continues to be managed by its own team.
I’m not 100% in the loop on things they’ve done, but I think the main thing is that there are better alternatives out there such as Signal for keeping in touch with friends and family, but oftentimes those friends/family just don’t want to have yet another messaging app so it leaves you needing Discord to keep in touch.
I use servers extensively, for several communities (some small like my weekly RPG game servers and my book club, some much bigger like the AI art servers I’m on), all of which have multiple channels which are used for different things. Correct me if I’m wrong but afaik Signal (and Molly which I’d previously not heard of) doesn’t do that
It being closed source is unfortunate, not being very privacy friendly is certainly not good but I don’t think there have been any major leaks have there?
both of those alternatives are missing so many features Discord has that i wouldn’t really call them alternatives, especially many of the core features that make Discord Discord.
I checked my discord, and i think this is a case of discords shitty ui, not changing privacy settings. Yes, my checkbox in that exact location was allowing other people to find based on phone number contamination. However, when i visited the privacy page that i did know existed, that permission was still turned off for me.
I also unticked the two things below, which told me I can’t get experimental features if I do so. Who knows how they label stuff internally, maybe they have something new in regards to contact scanning and we got „volunteered for testing“?
Am also with you in the situation that discord isn’t my first choice, but one big community I engage in is there.
The “Sync Contacts” setting is weird. You can toggle it on, but it doesn’t gain or ask for the OS permissions on Android. There’s a brief message saying you have to give it the permission. No idea why they didn’t just use the built in SDK to ask for the permission.
Stranger still, the other screenshot you posted did have the “Allow contacts to add me” checkbox checked, but it only appears when you tap “Add Friends.” When you leave that screen and return, the checkbox is always checked. It makes me think it’s a setting solely applicable to that screen, like just for the “Find Friends” button, and not to your profile as a whole. IDK if that even makes sense.
I’m in Washington State. Perhaps it’s something else. I had Nitro and canceled it this year. I don’t remember turning off this specific setting but maybe I did and it’s kept it since? My phone is a S21. I’ve had my Discord account since Dec 2015. The only thing I can think of is that I’ve used my Discord account in California which has slightly different privacy laws than the USA.
Just to clarify, it’s not just that there’s an Android API to ask for permissions that apps use to show a consistent UI: that’s the way that apps actually get access to whatever feature they’re requesting, and if they don’t go through that API they don’t get access. An app can’t just decide in an update that it wants access to contacts without asking. The Android API to get contact info checks the app requesting the info and won’t give it anything if the user hasn’t explicitly granted that permission to that app. Most commonly when something like this comes up it’s a permission that was granted in the set of permissions requested when the app was installed and the user just skipped through the prompt and they don’t realize they granted access to contacts.
Edit to add: You can go into the settings for the app (not in the app itself, but in the app manager under your device settings, usually also accessible by holding on the app’s launcher icon and going to Info) and you can remove permissions that you’ve granted previously. So if you’re worried about this you can yank the Contacts permissions at the OS level and it doesn’t matter what the Discord settings are, they won’t be able to access your contacts anymore.
I did not have it updated! I was on 192 something. However, I just updated it now and checked and the settings are still not enabled. So it did not change my settings on me. I previously had them disabled and they are still disabled after update.
Tinfoil hat time, but there’s a possibility it does flip the setting for some users but not all. If they unilaterally changed a privacy setting to just take and share data it would get SLAMMED. But if it’s just like… 1/3 of the users and everyone else says no, that’s not happening then they can get away with a lot. Not saying that’s what’s happening. But I’m not saying it’s not what’s happening.
Didn’t switch on for me but I only launched the new UI once. After I realized it was different and animating page transitions (which I have disabled in my android settings, meaning it felt super slow), I had a little bit of a reee moment and uninstalled their client and downloaded an alt client.
Oh man those animations, I’m glad I wasn’t the only one to notice how slow they were. Turning them off helped increase the speed of navigation, but there’s still some delay when tapping the DM’s bottom bar item specifically. App settings are also in a super unintuitive place now.
I feel like this style of leaving closed or abandoned threads like this up is… not great.
The front page is slow enough when it’s just Beehaw that one post like this really kinda sticks out. I feel like as a smaller community it might be better when something like this happens to like, delete the thread after a certain length of time so it doesn’t show up at all.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@beehaw.org
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
This was enabled because you enabled it. Nobody else is experiencing this my guy.
If you didn’t give it permission it can’t read contacts. That’s an explicit permission request on both iOS and Android: You can’t just scrape someone’s contacts.
removed by mod
This is literally my job.
I’m a professional app developer.
deleted by creator
removed by mod
I agree. You’re wrong.
removed by mod
This thread is way more toxic than it needs to be, but this isn’t helping. And you’re like, actually from this instance.
deleted by creator
deleted by creator
You didn’t need to take the time to tell me you blocked me. I literally don’t think of you.
he literally disagreed with you, ur the one being condescending. also pretty sure he’s right…
deleted by creator
it was enabled on my phone and it never asked me
There are 2 possibilities:
UI bug or you’ve given it access to your contacts. There are 0 other possibilities.
You know a weirdly large amount about something you can’t possibly know about or have sources for.
This is my job. I’m a staff level software engineer who previously worked at Google. My entire career has been writing Android apps.
Permissions are integral to phone app development and contacts is a specific permission that is heavily locked down.
So yes: I can possibly know and I have literally read the source code.
Unless you’re trying to insist that Discord developed a new 0 day that lets them bypass both Android and iOS operating system locks and then decided to use it to scrape contacts while giving you an option to turn it off?
Cause if that’s your supposition you’ve got a bad case of magical thinking.
Discord, to my knowledge, is closed source, and has not had a source code leak. So taking your word for it, if you’ve seen Discord’s source code, then you work for Discord?
Access to Contacts has to go through the Android API, which means the user has to explicitly grant permission for Discord to access that specific functionality. That’s what the comment you’re replying to meant: access to contacts is protected at the operating system level and they’ve seen the source code on the OS side. Permissions might have been granted by the user reflexively, just muscle memory, when setting up Discord, but it absolutely had to have happened if Sync Contacts was enabled. Unless there’s some kind of bug where Discord enables the in-app setting without actually having the permissions to access contacts–I guess that could be possible. It couldn’t actually see any contact info in that instance, but it would try. If I go into Discord settings and try to enable the Sync Contacts option my phone displays the built-in Android permissions prompt with the text “Allow Discord to access your contacts?”
Thanks for the reply. I wouldn’t have thought they meant Android source code but that makes sense lol. Also this is the kind of reply I think OP would have appreciated more than just someone saying “you’re wrong, you must have done something wrong.”
That’s the bug exactly. It’s kind of a UI glitch; but I found out through Samsung bungling my permissions preferences through a One UI (OTA System) update, that it actually does enable the in-app setting by accident and that this is going to access your contacts if the permission is presently GRANTED, but not throw up a prompt asking for permission if the permission is already DENIED.
Permanently deleted
Mine didn’t have it enabled, but I think it’s because I denied its contacts permission request on iOS. That’s probably why some people don’t have it.
What the hell did you guys do to OP to make him throw a fit and delete a post over… discord?
Though I can confirm that sync contacts was enabled and I do not recall ever having done so, so there’s my two cents
Presumably this comment. OP has some back and forth which I can’t see for myself because it was deleted.
But that comment was correct and not offensive. What happened? Was there some kind of argument / rudeness, which I am not seeing?
I saw the comment before it was removed. It was along the lines of OP saying,
“This is the type of reddit response that I moved to Lemmy to avoid” and then continued on a few more sentences antagonizing the person for making a dissenting comment. Essentially finishing with “just because you aren’t having the issue doesn’t mean tumblr and I aren’t”.
IMO the commenter wasn’t out of line by any means. It may not have been insightful or additive, but the response it received was tonally angry and not very nice. “My guy” isn’t instigatory by any means, IMO at least. However, other comments OP responded to didn’t all have this same inflection so it may have just been getting tired of the same kind of responses.
Either way, I think it was an overreaction overall. OP has no way of knowing with certainty that this setting had been disabled by them before and subsequently re-enabled by Discord, obviously we have no proof either, and given the litany of comment saying it was disabled without user interaction we quickly fall into speculative territory. Which is meaningless and easily becomes what we see here in this thread, very very quickly. Edit: I think something that may have helped prevent this is posing the thread more as a PSA/are others affected style post, rather than being accusatory about an update changing settings.
When I made my post about Meta Services on Android, I wasn’t insinuating that Meta on Android is spyware and that every phone is going to have this background service running regardless. No, I got a new phone, I did some snooping, I found the service. I thought it would suck if others didn’t know about it, so I brought it up. Many people did, many people didn’t, and that was all I wanted. The tone from this post didn’t feel like that and I think that tends to skew responses to be more antagonizing than they might mean to be. :End edit
And of course, it doesn’t help that the closing comment of the thread is “Apparently we can’t have a civil discussion here without arrogant assholes inserting themselves into the conversation so they can gaslight us. This has become as bad as reddit.”
So effectively doubling down on the “I moved here away to get away from reddit opinions”, calling anyone who has a tone arrogant and uncivil? Further fueling the fire.
well I just checked and while “sync contacts” did not turn itself on, “allow contacts to add me” did. there’s definitely something going on
Ugh I hate when that kinda shit happens
Why? What have they done that I am unaware of?
Largely owned by tencent afaik, putting things that are QoL and somewhat accessibility behind paywalls (like themes are a nitro only thing), do nothing against the spam bot malware thing (and they can scan the messages, since you can set the nsfw filter on them), not searchable outside of the app so things can get lost easily, their audio function is somewhat known to be problematic (for me it „catches“ the full audio out without software in between, so game sound or Netflix or whatever gets cut off completely). Those are what I can think of quickly. I am also not knowledgeable enough to accurately judge their software in terms of performance, but it feels very bad to me.
Please quit with this fucking bullshit.
Discord is not publicly traded yet, so you can’t buy Discord stock on the stock market. A publicly traded company has registered its shares for trading on a public stock exchange such as the Nasdaq or the New York Stock Exchange, and that hasn’t happened yet for Discord.Nov 17, 2023
While the exact percentage of Tencent’s ownership in Discord is not publicly disclosed, reports indicate that Tencent acquired a minority stake in the company through a funding round in 2018. This investment allowed Discord to secure substantial funding and further develop its platform and services. Despite Tencent’s involvement, Discord maintains its operational independence and continues to be managed by its own team.
I’m not 100% in the loop on things they’ve done, but I think the main thing is that there are better alternatives out there such as Signal for keeping in touch with friends and family, but oftentimes those friends/family just don’t want to have yet another messaging app so it leaves you needing Discord to keep in touch.
Permanently deleted
I use servers extensively, for several communities (some small like my weekly RPG game servers and my book club, some much bigger like the AI art servers I’m on), all of which have multiple channels which are used for different things. Correct me if I’m wrong but afaik Signal (and Molly which I’d previously not heard of) doesn’t do that
It being closed source is unfortunate, not being very privacy friendly is certainly not good but I don’t think there have been any major leaks have there?
Permanently deleted
both of those alternatives are missing so many features Discord has that i wouldn’t really call them alternatives, especially many of the core features that make Discord Discord.
I checked my discord, and i think this is a case of discords shitty ui, not changing privacy settings. Yes, my checkbox in that exact location was allowing other people to find based on phone number contamination. However, when i visited the privacy page that i did know existed, that permission was still turned off for me.
Permanently deleted
The bug is definitely known; and a fix is probably being worked on.
But I will say that it does in fact turn on the setting.
Permanently deleted
Thanks for this. It was on for me and I am the same as you with regards to apps getting to read my contacts.
For context I am in the EU and am using an iPhone.
Permanently deleted
I also unticked the two things below, which told me I can’t get experimental features if I do so. Who knows how they label stuff internally, maybe they have something new in regards to contact scanning and we got „volunteered for testing“?
Am also with you in the situation that discord isn’t my first choice, but one big community I engage in is there.
Permanently deleted
Just to throw in my two cents… I’m on iOS version 207 (which appears to be the latest) and this setting was not on for me.
The “Sync Contacts” setting is weird. You can toggle it on, but it doesn’t gain or ask for the OS permissions on Android. There’s a brief message saying you have to give it the permission. No idea why they didn’t just use the built in SDK to ask for the permission.
Permanently deleted
It was enabled for me and I’m very glad I saw this post so I could disable it. I would have never known it existed.
It was disabled for me.
Stranger still, the other screenshot you posted did have the “Allow contacts to add me” checkbox checked, but it only appears when you tap “Add Friends.” When you leave that screen and return, the checkbox is always checked. It makes me think it’s a setting solely applicable to that screen, like just for the “Find Friends” button, and not to your profile as a whole. IDK if that even makes sense.
Permanently deleted
Did Discord hire Google’s laid off UX designers or something? Jesus Christ.
Permanently deleted
Yeah, I just checked after updating yesterday and didn’t have it enabled.
Permanently deleted
I’m in Washington State. Perhaps it’s something else. I had Nitro and canceled it this year. I don’t remember turning off this specific setting but maybe I did and it’s kept it since? My phone is a S21. I’ve had my Discord account since Dec 2015. The only thing I can think of is that I’ve used my Discord account in California which has slightly different privacy laws than the USA.
Permanently deleted
Just to clarify, it’s not just that there’s an Android API to ask for permissions that apps use to show a consistent UI: that’s the way that apps actually get access to whatever feature they’re requesting, and if they don’t go through that API they don’t get access. An app can’t just decide in an update that it wants access to contacts without asking. The Android API to get contact info checks the app requesting the info and won’t give it anything if the user hasn’t explicitly granted that permission to that app. Most commonly when something like this comes up it’s a permission that was granted in the set of permissions requested when the app was installed and the user just skipped through the prompt and they don’t realize they granted access to contacts.
For the curious, here’s the Android developer guide page that describes how Contacts permissions work for app authors. And the page describing permissions in general, how to request, etc.
Edit to add: You can go into the settings for the app (not in the app itself, but in the app manager under your device settings, usually also accessible by holding on the app’s launcher icon and going to Info) and you can remove permissions that you’ve granted previously. So if you’re worried about this you can yank the Contacts permissions at the OS level and it doesn’t matter what the Discord settings are, they won’t be able to access your contacts anymore.
It’s there but not enabled for me, all 3 were disabled
Mine didn’t have this enabled
Mine also didn’t have this enabled
Permanently deleted
207.23 for me. Not enabled
I did not have it updated! I was on 192 something. However, I just updated it now and checked and the settings are still not enabled. So it did not change my settings on me. I previously had them disabled and they are still disabled after update.
Permanently deleted
Tinfoil hat time, but there’s a possibility it does flip the setting for some users but not all. If they unilaterally changed a privacy setting to just take and share data it would get SLAMMED. But if it’s just like… 1/3 of the users and everyone else says no, that’s not happening then they can get away with a lot. Not saying that’s what’s happening. But I’m not saying it’s not what’s happening.
Permanently deleted
Same. I just got the update the other day. This setting is not enabled for me.
Didn’t switch on for me but I only launched the new UI once. After I realized it was different and animating page transitions (which I have disabled in my android settings, meaning it felt super slow), I had a little bit of a reee moment and uninstalled their client and downloaded an alt client.
Permanently deleted
Oh man those animations, I’m glad I wasn’t the only one to notice how slow they were. Turning them off helped increase the speed of navigation, but there’s still some delay when tapping the DM’s bottom bar item specifically. App settings are also in a super unintuitive place now.
Wow, op got pissy!
So like, while we’re here.
I feel like this style of leaving closed or abandoned threads like this up is… not great.
The front page is slow enough when it’s just Beehaw that one post like this really kinda sticks out. I feel like as a smaller community it might be better when something like this happens to like, delete the thread after a certain length of time so it doesn’t show up at all.
Yep. I can’t even see why, probably something in the stuff they deleted. How bizarre!
Seems like they really thought they were right and argued with people. If only they realized it takes 2 people to argue.
This particular OP tends to be fairly contentious, I’m surprised Beehaw didn’t ever take action on his account.
Beehaw doesn’t ban you for having an opinion loudly.
What it does address typically is when users are horrifically disrespectful or rude…which usually the OP was not.
I guess they just reached their limit of patience.