@immalloy yes big win, hopefully it gets progressively removed
In the meantime, share the bypasses :) https://t.co/c6P0e2GN5Q (or others if any is published)
Let's destroy double counter
@c3dralian@Woffer21@Scqi_skee don't detect alts and actually do a proper moderation job.
Raids can be avoided by so many bots with captchas. No privacy invasive bot needed.
Hopefully double counter bypasses get used more and more so double counter has no point anymore
@VaultCord@bellandttv@Not666w@panley01 most of them are imperfect though.
Recently there are some bypass websites. Unfortunately https://t.co/4kp8yhdOF1 closed but https://t.co/c6P0e2Gfgi is open now
@discortics Yes, so avoid falsely claiming yourself that the bot wasn't compromised because it was, though there was only minimal damage. Funny to say not to spread misinformation while you do.
Double Counter’s data breach may be much bigger than initially reported, someone in contact with the hacker just sent me more info
The stolen database allegedly contained much more:
-21.7 million verified user records
IP addresses, geographic data, ISPs and Discord usernames
-44.1 million device fingerprint records
14.5 GB of device fingerprint data
-31 million server records
-19.2 million lens-counter records
-14.6 million VPN-attempt records
-831,000 Google user records
~220,000 user emails
~1.08 million Google search records
-A database around 39 GB
>The source also claims Double Counter’s GDPR deletion system did not actually remove all user data.
>According to them, the /privacy deletion command allegedly only removed a user’s current IP, while other information could remain stored, including emails, alternate accounts, their IPs and connections between main and alternate accounts.
>They also claim Double Counter staff deleted messages and banned users who questioned how much data had actually been leaked.
>The source further described an attack chain:
Metabase breach → plaintext password found → same password used on the server → SSH access → logged-in Google Cloud CLI session → access to the cloud environment → database downloaded.
They claim the attackers also obtained secrets, runtime logs and the entire Discord support ticket history.
>One ticket reportedly involved a user warning Double Counter that an ad on its verification page was malicious but the owner refused to remove it because the ad revenue was needed to pay for the servers.
@YFavhomie I found https://t.co/c6P0e2Gfgi that you can use
You might need a new discord accounts cause your previous ones got flagged together.
Use private browsing & mobile IP address if you ever verify again