Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

They should not remove it but it shouldn't be the way for most bots. Unless your bot is working with the messages instead of commands, it should get access to zero messages. While adding the bot, it should clearly say if it can read messages and if it can, why does it need it.

I wrote a bot and then realized my boy can easily log everything even tho it was only posting some updates from somewhere else.

Since then I've been restricting bot permissions as much as possible. Most bots these days directly want admin permissions in every channel. They don't need it. They can get their 99% things done with slash commands. I should be able to deny message permissions and get those 99% things working.

If your bot is not in your own channel and is reading messages, you should be fully verified by discord.

If it is your own channel and you _host_ the bot server, you should be able to anything without verification.



> I wrote a bot and then realized my boy can easily log everything

Well, yes. If you join the server yourself it’s even worse. You’ll immediately be able to see it’s entire history. No logging necessary.


Hi

The issue is most bots setup instructions include adding them with tons of privileges including admin even if they don't need it. Then they get private channel access and can log those. This is not really apparent to most (non-engineering) people.

I think bots that can read messages, should always be self hosted instead of some random 3rd party.

Most bots just post updates and responds to commands. / Is the way to go.


So? Don’t install the bot if you don’t like the idea of them doing that.


That entire thing experience might be slightly different from actual log dumps


If people want to log things they'll just write bots that appear to be regular users. They'll get access to all message content and history.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: