Update: So, a lot has transpired in the last 2 days. A Guilded staff member claimed that these vulnerabilities were never reported, causing a fair chunk of backlash and drama. No biggie because I was already shown that multiple disclosure attempts were made and acknowledged. 24 hours later, Guilded responds in their partner server stating that "for some unknown reason, the reports were closed before it ever reached the team". Now this could be because Guilded's hackerone program is through Roblox and there is miscommunication, but I don't have a solid answer. However, they said they were diving into old closed bug reports to ensure that they were actually fixed. And I can confirm this as I received reports of old tickets opening back up. So overall, mixed response from Guilded. I'm glad they are getting their platform fixed and making sure their bug program is operational. But I wish I didn't have to kick them in the butt to do this in the first place. Original post: Fun little facts for the nerds + comments about disclosure Three years ago, Guilded had a thing where you could view every server that a guilded user was in when you visited their profile (not good obviously because that means you could see people's personal server with friends). There was a reddit post about it here: www.reddit.com/r/guilded/comments/hkhsev/comment/fxgipdk/ Guilded made a fix to remove that stuff from the client. You couldn't click on someone's profile and stalk them. Now, that was three years ago. However between then and A MONTH AGO, you could still get all that information through the API (the comment I linked to stated that). So for three years you could just stalk someone on Guilded. (Thank you amia for letting me know about this) Regarding disclosure, Guilded was made aware of these issues months and months ago, yet nothing happened. Considering the previous thing took a solid 3 years to fix (and some of these exploits were being abused in the wild), giving Guilded a swift kick in the butt was in my eyes a good option. I know some of yall might be upset, but nothing makes me happier than a Guilded skid getting mad at me for "revealing" his method.
I remember when they bumped up the file upload limit to 400mb 2 years ago !!!!!!!! and since then I use guilded time to time when transfering big files between my phone and pc or just to send to friends, tho am still sometime lost in the guilded ui because am not habituated to it, just like for discord half a decade ago and thats just a skill issue x3
Tried out Guilded with some mates, and it was alright, nothing too crazy. But gotta say, the app has a couple of quirks. We ran into some audio glitches, video stream bugs, and a few other hiccups that still need fixing. Also, there were some features that didn't really click with us, like the Voice Channel and the Streaming Channel, that were seperated. Didn't see the point, you know? Not that we're big fans of Discord, but when it comes to stability, Guilded's got some work to do. Just wish that the Devs, update the Core feature more frequently since at one point it got quite annoying.
other than minor bugs in vc (which can usually be fixed by screen sharing & stopping instantly), i find the platform to be fairly nice edit: edited the message because it made no sense due to me being half-awake while writing this
i mean it's not like you should use either guilded or discord... and while Matrix as a protocol isn't fully featured compared to either of them... it is better because it is private and self hosted.... or you could piggy back off another server kinda like mastidon.
Making voice channels a separate thing can be useful if you well.. Just don't want others to ever be able to at all use their video. That's the whole reason for them existing separately even if you can just make people disable their voice in video calls. I think it makes enough sense and should stay as it is, while having the streaming/video channel be the fully fledged channel type with all the options.
@@LugiDergX No hard feelings but I don't get what you mean, It sounds like being peer pressured to turn on your video. If you really don't want to show your stream or webcam you can just turn it off. You also can use the streaming channel as a normal channel, with no big difference if you compare it with a voice channel. We used guilded for half a year and we like to show stuff via streaming our monitor. It was annoying if you like to show something.
And It's great how roblox bought it for 99 Million which is already too much since its a tiny platform, and they could've used that money to fix their servers@@pneumaofficial9581
Guilded barely worked properly in the first place, so this is probably going to be the nail in the coffin for it to not be chosen by people looking for Discord alternatives.
Used it when it first came out, not even surprised that it's still ass. I remember requesting push to talk support for mobile and they STILL haven't implemented it
I rememeber seeing Guilded and it was during the time when Discord was fiddling with NFTs. I was excited at first cuz I love a lot of the features Guilded has! Free unlimited Emojis, animated pfp and banners, gradients on usernames, whispering, lots of cool stuff!! But it was just lacking in BASIC features. Streaming didn't work, might still not. The mobile app to this day still doesn't have a voice sensitivity option. Basically unusable for my friend who would constantly stutter unless using push to talk. And honestly, I really need my music bots.
I remember when I used it a lot a few years ago, compared to discord, the android guilded app use a Lot of performances, like, my phone would get hot and it would force close background apps and games because of using too much ram which wasnt an issue on discord
Some time ago I reported an issue to Guilded staff that allowed you to bypass all server side checks regarding messages - you could essentially post messages from someone's account without them ever knowing. Not only that, you could post them in any existing channel (including private dms), and even send system messages (such as those that you see when editing a thread). It took them OVER A YEAR to even acknowledge this issue, and even now I'm pretty sure it partially works. I have no idea what their priorities are but clearly it's not user safety.
Another thing, you can trigger a react error (similar to the one shown in this video) in one of the uppermost components by simply changing your profile picture to a badly formatted url. And if anyone sees your profile rendered in the member sidebar, it will make a large part of the app completely unusable.
I reported an issue where you could bypass Guilded's media proxy and directly link something ages ago. It got fixed eventually but it took months and they never acknowledged
The crash comes from the script sending like 50 requests that overload all Guilded's API servers (one request for each of their API servers since they have around 50 running). So, no this is not some kind of ratelimiting, this is their API dying
Neat, just a few days ago I was talking with some friends about guilded and wondered if you ever make another video about it. Didn't expect that outcome though.
reminder that while competition to discord is (mostly) good, guilded is still owned by roblox corporation. their whole business strategy is literal child labor that isn't regulated yet
depends of games tbh, some games either reload faster than swapping or the secondary is absolutely useless, but I have like 1 game where it works well like that :3
You better not get taken down for sharing the Crash metod since, uhh.. for the first time I ever hear about this guilded and haven't read the TOS yet 🤓☝
except they werent as it was reported through hackerone (a separate company) and closed out by hackerone. Meaning hackerone didnt properly allow these to reach guilded staff, which guilded is now going through every case file report to ensure this hasn't happened with more malicious things than this.@@nobody-to-care-about
The script NTTS showed at the end most likely just rate limited him, which means your IP is temporarily blocked from sending data to a website so it can prevent a DDOS. I dont have the script and havent tested it so this is just a guess.
Surely this would mean that only the person running the script would be affected, but I interpreted the messages at 07:10 to mean that the other person was running the script and NTTS was also unable to do anything on Guilded.
These guilded servers seem to be very trashy if they cannot block a singular computer from overloading the servers. I have made servers at one time and they were more stable than what guilded offers. Very interesting video!❤
Can a video about IRC integration into discord be a thing? The only real way a discord alternative can thrive is if there is some level of cross-communication.
I think issue with discord alternatives is that the “majority effect” (aka everyone’s here so I will stay here) isn’t going in their favor. A good way this can be bypased is through individual communities doing chat bridging, aka having one or more platforms be in direct communication with the platform that the community is based out of. In 2021 an admin in my server and I managed to connect IRC and Matrix to Discord for some time with a Revolt connection being made earlier this year. Only issue with bridging is the difficulty, for some platforms it can be as easy as getting a bot and running two commands while for others you need to get a wargammer tech priest to do things that may include fetching some API stuff and utilizing some unknown powers to get it to work
the crasher reminds me of the old Xfire crippler that would crash peoples clients just by spamming messages and also take down people livestreaming on it.
@@Sown. No it's the actual IP of the user looking at the profile. Guilded has no proxy for this, they normally just check whether the domain in the link is whitelisted, but just don't in the case that's shown in the video
As I'm a Guilded member since 2022, it kinda needs a bit more attention and we're not getting any or barely getting any, all we get is jokes on how a ripoff we are compare to discord. I wanna be straight up honest, just because discord makes fun of us doesnt mean they're original either. They copied slack, many features are stolen from slack. As I took a deep compare on both slack and discord. Is guilded buggy? Yes but at least it has some feautres only discord nitro has. I wish guilded had more but I'm fine with the features it's got. For those who say "guildeds a ripoff" you have no room to talk, cuz discord did the same before guilded.
Im not saying guilded's PERFECT as in gold, they still have raids, toxic people and shit like that, but not as bad as discord all im saying, dont get your hopes up on that.
That's wild, If I were a evil person I could possibly post IP grabbers and stuff in my own server and then using the transfer ownership API to brute force through everyone's User ID and then everyone gets IP logged 😭😭
If guilded fixes problems that caused this needing to be escalated into a public call-out, and adds a light mode, I'll probably try switching to it as my platform.. although, moving my friends there is unlikely.
Lol they are a copy cat and that's not even the problem they are a horrible copy cat they made discord but worse 😂😂 nobody moving there only Roblox kids
A home network cannot overwhelm an entire server's download bandwidth. 5 gigabit upload might take down a single, low end server instance, not affecting the many others.
I believed in Guilded because they gave us global emotes for free when Discord removed and paywalled them T_T but then they got bought by Roblox and now this...
But Roblox barely affects the staff's operation on Guilded? All Roblox does is own Guilded and give them more fund as themselves said they will not interfere with the operations of the staff on Guilded.
I was about to say the same thing. I just want Discord without all the extra bloat marketed squarely at teenagers, but Roblox is a step too far. It's been shown time and time again that platform is not safe for children so I'd feel weird openly supporting it.
While it is owned by Roblox, it's actually operated by its own staff. Roblox has agreed that it will not interfere with Guilded operations. Roblox simply is the owner and group who funds Guilded, nothing more.
@@Squant at this point, i'm not even sure what to choose anymore. i guess matrix is good. revolt sure as hell isn't, having a "bottom" language option puts them in the same "not safe for children" basket of clear weirdness where it doesn't belong.
@@pixel_pizza Because they're a shit company, with shit policies, openly protecting groomers and evil people, and they immediately abandoned this app as soon as they bought it. lol It's just acquisitions for acquisition's sake. Furthermore, maybe I don't want to use anything related to the world's best known grooming ring.
Guilded does have built-in polls, as well as forms, proper server applications, and much more! I got it 2 months ago, and I'm loving it so far! And the staff are aware of the issues showcased in this video today, they're working on fixes right now. I talked to a staff member earlier today about it in the official Guilded server. 😁 They're working on improving mobile performance as well. So that's exciting.
@@BahBahBearam hearing that they are improving the mobile performances is a huge thing, I remember stoping using it because it would make my phone hot and it would use enough ram to force kill background apps and gammes which mades it unusable while playing games on my phone back then while discord could even split screen no problems, but its a huge that they are finally improving that :3
@@SpeedyGwen Yeah, it runs waaaay better than it did even just a couple months ago. They released an update this week that improved it even more, where the chat doesn't glitch out like it used to. I think they'll be a very good competitor to Discord next year. Also, the staff said they patched all the issues that were shown in this video and worked out issues with their report system, so things should be a lot better from here on out.
Guilded did not crash probably - you were rate limited. Once you stopped spamming the API, you were able to get under the rate limit again. If you had actually crashed a server it would have taken more time to recover.
@NoTextToSpeech Use black bars (they need to cover all the text) instead of blur, since bluring might become weaker at one point against certain tools which get more and more sophisticated.
Who cares? Someone may unblur this years in the future if Gilded finally discovers the importance of devops and cybersecurity. The fact that they released the project in this state publically means they deserve a swift kick in the nuts.
the fact one singular person can freeze up the entire platform is borderline insane Guilded probably got bought by Roblox because they realised Guilded is just as bad at software development as they are
Honestly Guilded gives so much more than Discord... But how am I going to get people transfer to it lol, there's no way I've tried to look for communities there too, nothing
It gives you more but it has absolutely horrible user security system and keeps breaking. It's also owned by Roblox. Still surprised no one in their right mind is gonna use that thing?
I've gotten over 500 people to join alone, and my two main servers have 600+ members on it, I'm apart of some servers with 15k+ members. There's videos showing the differences and comparing them that you could use. If you show all of the positives side by side the negatives of discord it's fairly easy for most people to switch over.
Even with these issues, I personally think it's still better than Guilded. Like you talked about how there's a way to get the server to shutdown in this video, but you can do the same in Discord like it actually happened recently again infact. Guilded has better support, like it took 1 month for me to get a response in Discord and I don't just mean they saw it 1 month later cause alot of users either, they literary ignored me on purpose, I know cause I seen hints of them doing just that, and there's a video about how Discord let their server be gone forever too only because they server weren't popular enough and that's despite the fact that Discord support let it again in the first place cause hacker shut their server down after that 1 month of that user contacting the support, Guilded third-party apps isn't against terms of service too unlike Discord cause the third-party app asked for Guilded permission already. Guilded has better server creations/customizations, are you a creator of the server but was forced to create multiple different server in order to do different things? Well you no longer need to do that if you have Guilded cause there's sub server within the main server. Guilded does "almost" everything you can do in Discord nitro but completely for free while also improving and adding features that wasn't in Discord, Guilded just get paid through donation to other creators instead kinda like what Ko-fi and Patreon does which I like even better, granted Discord does have that too but that doesn't change the fact that nitro exist. Discord is 3/5 in Playstore while Guilded has 4/5, the thing about playstore is that I feel it's easier for bad things to get 4/5 compare to something like metacritic user score so that doesn't mean Guilded is good, but that does mean it's harder to reach 3/5 and Discord still got 3/5. You can link your profile and server to games to make it easier to know what games you're into but only if it's part of the list, but bio isn't had good and there's no animationed banner sadly, there is animatied profile pic though and once again free. Guilded also increase the limits too rather that be file size, texts, servers, channels, roles, and even amount of users that can be in the server (though it's so underrated that I haven't seen a server that reached max users). So this is what I think Guilded is better at, now time for Discord. It may not matter much for some people, but Guilded does use up more power so Discord may help people who has that bad of a PC. Discord is more popular too and I consider this to be the most important one cause it's literally called *"Social"* Media for a reason. And because Discord is both older and more popular, that also means Discord has more Bots too. Better bios, and has animated banner (though animated banner is locked behind nitro). I thought it can be abit annoying in Guilded to reply messages by left-clicking cause of how common left-clicking is, but that's not the case in Discord which is nice. I use Discord cause popularity is the most important aspect of Social Media as I stated before, but I also use Guilded cause I think it's better and I want to support software like that, so I'm using both, would love to see Guilded becoming more popular than Discord someday but that probably won't happen though. I remember Guilded being super bad years ago, but it became so much better after Roblox bought it. Guilded isn't perfect by any means, I did mentioned the flaws afterall, but I wanted to point this out cause I noticed alot of people talking about it's bad because Roblox own it when it actually became so much better after Roblox bought it despite the fact that Roblox had nothing to do with Guilded, Roblox only owns them and funds them, Roblox is letting the Staff do their own thing. Also it's funny to me how it was like that in the first place and it's no wonder since Roblox own it when Roblox didn't created Guilded, Roblox just purchase them after it already existed, and only only they are only funding them and that's it, which also means requesting Roblox to add stuff in Guilded won't do anything, but contact Guilded dev instead, which would explain why Guilded support is very good. In other words, comparing Guilded dev to Roblox dev is just wrong, you can treat Guilded as it's own standalone thing separate from Roblox.
i guess the crasher is a loop that signals the api hard. and therefore it gets overflowed(ddosed) so that the api cant give anyone the necesary data for your browser/app to load
@@ttaylor-st No, it isn't legal. Showing it isn't the issue, but he just showed himself conducting an unauthorized denial of service, which is a blatant violation of the CFAA. Even if he's based in Canada, the US is on great terms on a federal law enforcement level. If Roblox really wanted to, they'd certainly have grounds to pursue legal action and he provided a time stamp for them to go review APM data to verify it. Will anything come of it? Probably not, but if they wanted to make an example of him, they've certainly got the legal grounds to do so. If I was the CISO making the recommendation to legal counsel, I probably would recommend pursuing it to deter similar behavior, as he kinda gave away a critical part of the attack vector, whether he realizes it or not.
Guilded forces me to Log In to X in Guilded app, even tho i already have the X app. But when I successfully logged into X in the Guilded app, I can't return back to the Guilded app. wtf am i supposed to do
Did they already Hotpatch the expiolts? trying the forcing ownership on a server i made with a ALt. And i can't seem to get the api request to be accepted
The funniest part about all of this is that Guilded was -made by- edit: bought by the Roblox team, so most of this bullshit can be attributed to Roblox shenanigans
I remember trying Guilded back in 2020 and finding it more confusing to use than Discord. Nowadays, I'm considering trying it again because of Discord's awful UI changes (among other things).
Atleast Guilded doesn't f*ing ban my account when I get falsely reported and when I were to try and appeal my appeal would actually get read and not be flagged as "solved" 8 times in a row without any response.
I've been beta user of Revolt, and let me tell you, at the state it is right now, it's barely a skeleton, unfortunately. Reactions and emote pickers have only been recently added and its UI is sorta terrible, especially accessing settings by having to right click your own PFP at the top right, which is like the most confusing thing ever. It's also rather unfortunate that it's not seen as serious by devs or the community, which makes it harder to use for official contexts, like game development.
@@ttaylor-st cut out the /j, silly. but to use a platform with a "bottom" language option over one that's properly decentralized? matrix sure seems better there.
I have a guilded exploit that will crash an entire channel similarly to that last showcased js script, but it's one channel at a time, but the crash is persistent, and cannot be fixed by the user, and isn't a constantly running script I reported this to guilded and they denied the report!
I assume Guilded doesn't work out because it looks like malware. Most legitimate programs from most legitimate companies don't seek to nearly perfectly emulate the UI of their number one (and arguably only) competitor. If I wasn't informed this was a real program by NTTS, if I had ever seen it, I would immediately assume it's either a discord hacked/modded client OR a malware program looking to steal information.
Update: So, a lot has transpired in the last 2 days.
A Guilded staff member claimed that these vulnerabilities were never reported, causing a fair chunk of backlash and drama. No biggie because I was already shown that multiple disclosure attempts were made and acknowledged.
24 hours later, Guilded responds in their partner server stating that "for some unknown reason, the reports were closed before it ever reached the team". Now this could be because Guilded's hackerone program is through Roblox and there is miscommunication, but I don't have a solid answer. However, they said they were diving into old closed bug reports to ensure that they were actually fixed. And I can confirm this as I received reports of old tickets opening back up.
So overall, mixed response from Guilded. I'm glad they are getting their platform fixed and making sure their bug program is operational. But I wish I didn't have to kick them in the butt to do this in the first place.
Original post:
Fun little facts for the nerds + comments about disclosure
Three years ago, Guilded had a thing where you could view every server that a guilded user was in when you visited their profile (not good obviously because that means you could see people's personal server with friends). There was a reddit post about it here: www.reddit.com/r/guilded/comments/hkhsev/comment/fxgipdk/
Guilded made a fix to remove that stuff from the client. You couldn't click on someone's profile and stalk them.
Now, that was three years ago. However between then and A MONTH AGO, you could still get all that information through the API (the comment I linked to stated that). So for three years you could just stalk someone on Guilded. (Thank you amia for letting me know about this)
Regarding disclosure, Guilded was made aware of these issues months and months ago, yet nothing happened. Considering the previous thing took a solid 3 years to fix (and some of these exploits were being abused in the wild), giving Guilded a swift kick in the butt was in my eyes a good option. I know some of yall might be upset, but nothing makes me happier than a Guilded skid getting mad at me for "revealing" his method.
first
Sup losers
damn, so i wasn't the only person to find out that you can see other people's server list using their API
@@amogus3 yes
imagine having your name, address, face and other personal info leaked just because you talked to friends
We need to remember though that competition to Discord is good and healthy. I hope they can put the issues aside and live up to Discord
Guilded is Sooo good but has awful coding
@@thatpenguin965 Matrix is very good, but no one knows about it
I remember when they bumped up the file upload limit to 400mb 2 years ago !!!!!!!! and since then I use guilded time to time when transfering big files between my phone and pc or just to send to friends, tho am still sometime lost in the guilded ui because am not habituated to it, just like for discord half a decade ago and thats just a skill issue x3
It's owned by Roblox so I wouldn't count on it improving
@@kemanorel3110 Jesus Christ for the last time Roblox doesn't do anything with guilded
Tried out Guilded with some mates, and it was alright, nothing too crazy. But gotta say, the app has a couple of quirks. We ran into some audio glitches, video stream bugs, and a few other hiccups that still need fixing.
Also, there were some features that didn't really click with us, like the Voice Channel and the Streaming Channel, that were seperated. Didn't see the point, you know?
Not that we're big fans of Discord, but when it comes to stability, Guilded's got some work to do.
Just wish that the Devs, update the Core feature more frequently since at one point it got quite annoying.
@soulinferno-offical That's the sad part about it, it would've been a really good competitor.
other than minor bugs in vc (which can usually be fixed by screen sharing & stopping instantly), i find the platform to be fairly nice
edit: edited the message because it made no sense due to me being half-awake while writing this
i mean it's not like you should use either guilded or discord... and while Matrix as a protocol isn't fully featured compared to either of them... it is better because it is private and self hosted.... or you could piggy back off another server kinda like mastidon.
Making voice channels a separate thing can be useful if you well.. Just don't want others to ever be able to at all use their video. That's the whole reason for them existing separately even if you can just make people disable their voice in video calls. I think it makes enough sense and should stay as it is, while having the streaming/video channel be the fully fledged channel type with all the options.
@@LugiDergX No hard feelings but I don't get what you mean, It sounds like being peer pressured to turn on your video. If you really don't want to show your stream or webcam you can just turn it off.
You also can use the streaming channel as a normal channel, with no big difference if you compare it with a voice channel.
We used guilded for half a year and we like to show stuff via streaming our monitor. It was annoying if you like to show something.
guilded is such a good idea, but so badly implemented
Yeah, as soon as it became a thing it was bought out by Roblox so, its not gonna ever get better lmao
@@pneumaofficial9581 bought out by roblox?
you are saying that i can sell my company to another company for making a sub-par product?
And It's great how roblox bought it for 99 Million which is already too much since its a tiny platform, and they could've used that money to fix their servers@@pneumaofficial9581
Literally just a rip-off without almost any creativity 😂
@@CG-ej8nu Have you heard of Slack? I don't think you need to be original to be successful as proven by Discord.
Guilded barely worked properly in the first place, so this is probably going to be the nail in the coffin for it to not be chosen by people looking for Discord alternatives.
Used it when it first came out, not even surprised that it's still ass. I remember requesting push to talk support for mobile and they STILL haven't implemented it
Thats what happens when Roblox owns something
among us
yeah@@pneumaofficial9581
Uh, Guilded has worked since it's release. A few bugs is not the end of the world.
I rememeber seeing Guilded and it was during the time when Discord was fiddling with NFTs. I was excited at first cuz I love a lot of the features Guilded has! Free unlimited Emojis, animated pfp and banners, gradients on usernames, whispering, lots of cool stuff!! But it was just lacking in BASIC features. Streaming didn't work, might still not. The mobile app to this day still doesn't have a voice sensitivity option. Basically unusable for my friend who would constantly stutter unless using push to talk. And honestly, I really need my music bots.
I remember when I used it a lot a few years ago, compared to discord, the android guilded app use a Lot of performances, like, my phone would get hot and it would force close background apps and games because of using too much ram which wasnt an issue on discord
I love the responsible disclosure of making a youtube video about it
RUclips told me to rate your comment
fuck yeah, love the profile pic.
@@Shywizz When I set it I thought maybe a couple people would know what it is, but seems like there's a lot more MBR fans than I thought lol
Some time ago I reported an issue to Guilded staff that allowed you to bypass all server side checks regarding messages - you could essentially post messages from someone's account without them ever knowing. Not only that, you could post them in any existing channel (including private dms), and even send system messages (such as those that you see when editing a thread).
It took them OVER A YEAR to even acknowledge this issue, and even now I'm pretty sure it partially works. I have no idea what their priorities are but clearly it's not user safety.
Another thing, you can trigger a react error (similar to the one shown in this video) in one of the uppermost components by simply changing your profile picture to a badly formatted url. And if anyone sees your profile rendered in the member sidebar, it will make a large part of the app completely unusable.
I reported an issue where you could bypass Guilded's media proxy and directly link something ages ago. It got fixed eventually but it took months and they never acknowledged
It was due to a bad regex
Update: just tried it, it's still possible to send messages from your account in private/inaccessible channels
@@Alulaadid you use the in-app report form or their bug bounty program?
A naked man fears no pickpocket.
What
hes right@@spead1615_3
read that again@@spead1615_3
@@spead1615_3 he said "A naked man fears no pickpocket."
This man chose to speak facts
The crash is probably because the API has a max request limit, which means that there is a fixed number of requests per unit of time for all Users.
aka spamming
Does it not have a per-user/IP rate-limit?
soo its just a dos..
Made a program to spam requests to the api and the results are; guilded will be only down for you, also i got banned so
The crash comes from the script sending like 50 requests that overload all Guilded's API servers (one request for each of their API servers since they have around 50 running). So, no this is not some kind of ratelimiting, this is their API dying
And that, ladies and gentlemen, is why you validate user input on the server side, not in the client.
Neat, just a few days ago I was talking with some friends about guilded and wondered if you ever make another video about it. Didn't expect that outcome though.
I like how Roblox says it's "safe"
reminder that while competition to discord is (mostly) good, guilded is still owned by roblox corporation. their whole business strategy is literal child labor that isn't regulated yet
Love how Discord is self-aware enough to have "nonce" as a message ID.
that reloading tip just changed gaming for me forever holy shit
depends of games tbh, some games either reload faster than swapping or the secondary is absolutely useless, but I have like 1 game where it works well like that :3
You better not get taken down for sharing the Crash metod since, uhh.. for the first time I ever hear about this guilded and haven't read the TOS yet 🤓☝
If it's interpreted as self-botting, it could be. Looks more like ratelimiting it seems.
Thank you for the Mercfleet tip that I will likely forget about in a few days.
Guilded (nor its staff) we're aware of these issues. (Source: Jared, Guilded staff member)
They were made aware of it several months ago
except they werent as it was reported through hackerone (a separate company) and closed out by hackerone. Meaning hackerone didnt properly allow these to reach guilded staff, which guilded is now going through every case file report to ensure this hasn't happened with more malicious things than this.@@nobody-to-care-about
when you remember that roblox has data breaches, you aren't surprised that guilded is broken
The data breaches are in their like money handle thingy not them
@@Goldenlighter0001 Its still them
roblox doesn't host the servers nor does it develop anything. they just own it.
I only remember one leak, and i don't think it was even their fault? which are you talking about?
@@basiliotornado there has been many leaks in roblox and yes it was their fault
The script NTTS showed at the end most likely just rate limited him, which means your IP is temporarily blocked from sending data to a website so it can prevent a DDOS.
I dont have the script and havent tested it so this is just a guess.
Surely this would mean that only the person running the script would be affected, but I interpreted the messages at 07:10 to mean that the other person was running the script and NTTS was also unable to do anything on Guilded.
He said it shuts down the guilted server for everybody in it. Not just the person running the script.
@@pchris said. If we can't take a look at the code we can't tell for sure
@@MasterCraft_48 If the script was shown it could be abused which isn't the purpose of the video.
@@nobody-to-care-about i know. I never said I wanted the script. We just can't tell whats going on unless we see the code
Guilded - when you need the ILLUSION of golden security details
These guilded servers seem to be very trashy if they cannot block a singular computer from overloading the servers. I have made servers at one time and they were more stable than what guilded offers. Very interesting video!❤
dude makes a once in a blue moon video about guilded and casually shows that he can crash/slow down the entire API with a single computer
Its really sad, that a skid with a laptop or phone, can just be like, oops, and crash an ENTIRE PLATFORM
Can a video about IRC integration into discord be a thing?
The only real way a discord alternative can thrive is if there is some level of cross-communication.
I think issue with discord alternatives is that the “majority effect” (aka everyone’s here so I will stay here) isn’t going in their favor. A good way this can be bypased is through individual communities doing chat bridging, aka having one or more platforms be in direct communication with the platform that the community is based out of. In 2021 an admin in my server and I managed to connect IRC and Matrix to Discord for some time with a Revolt connection being made earlier this year. Only issue with bridging is the difficulty, for some platforms it can be as easy as getting a bot and running two commands while for others you need to get a wargammer tech priest to do things that may include fetching some API stuff and utilizing some unknown powers to get it to work
We already have discord and guilded bridging and have had it for uh 2 ish years now through parrotbot and it's predecessors@@lautlexvt
@@lautlexvt yea chat bridging is the only solution to this I myself am already implementing bridging on my discord server
releasing that code sounds like a good idea, perfect to expedite the bug fixing :)
Yo, they didnt patch the malformed stuff? I remember finding that years ago
I remember it being way worse though, like, you could break the entire chat window with some malformed packets
the crasher reminds me of the old Xfire crippler that would crash peoples clients just by spamming messages and also take down people livestreaming on it.
It genuinely blows my mind how there isn't a single good competitor to Discord yet, especially considering how bad Discord is itself
ong 💀
Try element
@@bits360wastaken Like he said GOOOD Element is just a BAD front end for the new version of IRC rooms
Thats pretty dangerous that you can grab an IP deffenietly NEEDS to be fixed!
I'm very sure it's not the actual IP, but rather the ip of a guilded bot that checks the webpage and returns it's contents
not that dangerous
@@driestmarlin4317plus ip changes everyday
@@Sown. No it's the actual IP of the user looking at the profile. Guilded has no proxy for this, they normally just check whether the domain in the link is whitelisted, but just don't in the case that's shown in the video
@@nobody-to-care-about peak security
As I'm a Guilded member since 2022, it kinda needs a bit more attention and we're not getting any or barely getting any, all we get is jokes on how a ripoff we are compare to discord. I wanna be straight up honest, just because discord makes fun of us doesnt mean they're original either. They copied slack, many features are stolen from slack. As I took a deep compare on both slack and discord. Is guilded buggy? Yes but at least it has some feautres only discord nitro has. I wish guilded had more but I'm fine with the features it's got. For those who say "guildeds a ripoff" you have no room to talk, cuz discord did the same before guilded.
Im not saying guilded's PERFECT as in gold, they still have raids, toxic people and shit like that, but not as bad as discord all im saying, dont get your hopes up on that.
@@Revan_ishhWhat about now
@@itsyaboivoid now Guilded is in great danger since the Roblox connection announcement
That's wild, If I were a evil person I could possibly post IP grabbers and stuff in my own server and then using the transfer ownership API to brute force through everyone's User ID and then everyone gets IP logged 😭😭
That script sends a dos or ddos attack to guilded’s backend which is probably weak since they thought it was hidden right?
If guilded fixes problems that caused this needing to be escalated into a public call-out, and adds a light mode, I'll probably try switching to it as my platform.. although, moving my friends there is unlikely.
Lol they are a copy cat and that's not even the problem they are a horrible copy cat they made discord but worse 😂😂 nobody moving there only Roblox kids
@@ThaTrisme to be fair, it does at least have more channel types compared to discord.
I think the last one could already be described as a DoS. And that's not really legal
A home network cannot overwhelm an entire server's download bandwidth. 5 gigabit upload might take down a single, low end server instance, not affecting the many others.
@@bits360wastaken I think you misunderstood the definition of DoS. It can also be a packet, that uses up all of the processing resources
I wish Guilded had more members :c
I'll be a Guilded member :3
I’m a guilded member, we need to make it more popular
I’m a Guilded member! I like it much better than Discord it’s much more organized. I hope this gets addressed ASAP.
@@sonikku1011 The staff addressed it in their main server today. They're investigating it. 😁
been using it for years now, its slowly growing but hopefully we get some proper growth in future
I believed in Guilded because they gave us global emotes for free when Discord removed and paywalled them T_T but then they got bought by Roblox and now this...
they were always incompetent
But Roblox barely affects the staff's operation on Guilded? All Roblox does is own Guilded and give them more fund as themselves said they will not interfere with the operations of the staff on Guilded.
I'm actively looking for a a Discord alternative for my friend group but this being owned by Roblox to begin with immediately wrote it off.
I was about to say the same thing. I just want Discord without all the extra bloat marketed squarely at teenagers, but Roblox is a step too far. It's been shown time and time again that platform is not safe for children so I'd feel weird openly supporting it.
While it is owned by Roblox, it's actually operated by its own staff. Roblox has agreed that it will not interfere with Guilded operations. Roblox simply is the owner and group who funds Guilded, nothing more.
@@Squant at this point, i'm not even sure what to choose anymore. i guess matrix is good. revolt sure as hell isn't, having a "bottom" language option puts them in the same "not safe for children" basket of clear weirdness where it doesn't belong.
Why is Roblox owning it bad? They're not even participating in the development part. If anything, it just means more funding.
@@pixel_pizza Because they're a shit company, with shit policies, openly protecting groomers and evil people, and they immediately abandoned this app as soon as they bought it. lol
It's just acquisitions for acquisition's sake. Furthermore, maybe I don't want to use anything related to the world's best known grooming ring.
gill issue?
those emojis are crazy
@@Oxfert
@@Oxfert its ez
@@Oxfert
@@enmaquratix8555
(7:45) That would be 13 Dec 2023 20:59 UTC in normal terms and 2023-12-13T20:59Z in ISO 8601
Even with all this, if they had built-in polls I would switch in a heartbeat.
Guilded does have built-in polls, as well as forms, proper server applications, and much more! I got it 2 months ago, and I'm loving it so far! And the staff are aware of the issues showcased in this video today, they're working on fixes right now. I talked to a staff member earlier today about it in the official Guilded server. 😁
They're working on improving mobile performance as well. So that's exciting.
They do
They do so uh.. welcome to Guilded?
@@BahBahBearam hearing that they are improving the mobile performances is a huge thing, I remember stoping using it because it would make my phone hot and it would use enough ram to force kill background apps and gammes which mades it unusable while playing games on my phone back then while discord could even split screen no problems, but its a huge that they are finally improving that :3
@@SpeedyGwen Yeah, it runs waaaay better than it did even just a couple months ago. They released an update this week that improved it even more, where the chat doesn't glitch out like it used to. I think they'll be a very good competitor to Discord next year.
Also, the staff said they patched all the issues that were shown in this video and worked out issues with their report system, so things should be a lot better from here on out.
I like the "(A bit) broken" title, ha, and so i though when i watch the vid.
Never tought Guilded would be this broken ☠☠
Guilded did not crash probably - you were rate limited. Once you stopped spamming the API, you were able to get under the rate limit again. If you had actually crashed a server it would have taken more time to recover.
This is the only time I have heard of Guilded.
As a Guileded fanboy I love this video, this public shaming will hopefully make it even better
@NoTextToSpeech Use black bars (they need to cover all the text) instead of blur, since bluring might become weaker at one point against certain tools which get more and more sophisticated.
its still impossible to nicely reverse competently made blur tools without a level of destruction no matter how sophisticated tools get
Who cares? Someone may unblur this years in the future if Gilded finally discovers the importance of devops and cybersecurity. The fact that they released the project in this state publically means they deserve a swift kick in the nuts.
the fact one singular person can freeze up the entire platform is borderline insane
Guilded probably got bought by Roblox because they realised Guilded is just as bad at software development as they are
Honestly Guilded gives so much more than Discord... But how am I going to get people transfer to it lol, there's no way
I've tried to look for communities there too, nothing
Discord monopolized chatrooms so sadly no matter how good guilded is no ones gonna use it
It gives you more but it has absolutely horrible user security system and keeps breaking. It's also owned by Roblox. Still surprised no one in their right mind is gonna use that thing?
I've gotten over 500 people to join alone, and my two main servers have 600+ members on it, I'm apart of some servers with 15k+ members. There's videos showing the differences and comparing them that you could use. If you show all of the positives side by side the negatives of discord it's fairly easy for most people to switch over.
@@Xyphiencan you invite me to those servers please?
discord is better
HAVE A GOOD DAY EVERYONE
Even with these issues, I personally think it's still better than Guilded. Like you talked about how there's a way to get the server to shutdown in this video, but you can do the same in Discord like it actually happened recently again infact. Guilded has better support, like it took 1 month for me to get a response in Discord and I don't just mean they saw it 1 month later cause alot of users either, they literary ignored me on purpose, I know cause I seen hints of them doing just that, and there's a video about how Discord let their server be gone forever too only because they server weren't popular enough and that's despite the fact that Discord support let it again in the first place cause hacker shut their server down after that 1 month of that user contacting the support, Guilded third-party apps isn't against terms of service too unlike Discord cause the third-party app asked for Guilded permission already. Guilded has better server creations/customizations, are you a creator of the server but was forced to create multiple different server in order to do different things? Well you no longer need to do that if you have Guilded cause there's sub server within the main server. Guilded does "almost" everything you can do in Discord nitro but completely for free while also improving and adding features that wasn't in Discord, Guilded just get paid through donation to other creators instead kinda like what Ko-fi and Patreon does which I like even better, granted Discord does have that too but that doesn't change the fact that nitro exist. Discord is 3/5 in Playstore while Guilded has 4/5, the thing about playstore is that I feel it's easier for bad things to get 4/5 compare to something like metacritic user score so that doesn't mean Guilded is good, but that does mean it's harder to reach 3/5 and Discord still got 3/5. You can link your profile and server to games to make it easier to know what games you're into but only if it's part of the list, but bio isn't had good and there's no animationed banner sadly, there is animatied profile pic though and once again free. Guilded also increase the limits too rather that be file size, texts, servers, channels, roles, and even amount of users that can be in the server (though it's so underrated that I haven't seen a server that reached max users).
So this is what I think Guilded is better at, now time for Discord. It may not matter much for some people, but Guilded does use up more power so Discord may help people who has that bad of a PC. Discord is more popular too and I consider this to be the most important one cause it's literally called *"Social"* Media for a reason. And because Discord is both older and more popular, that also means Discord has more Bots too. Better bios, and has animated banner (though animated banner is locked behind nitro). I thought it can be abit annoying in Guilded to reply messages by left-clicking cause of how common left-clicking is, but that's not the case in Discord which is nice. I use Discord cause popularity is the most important aspect of Social Media as I stated before, but I also use Guilded cause I think it's better and I want to support software like that, so I'm using both, would love to see Guilded becoming more popular than Discord someday but that probably won't happen though.
I remember Guilded being super bad years ago, but it became so much better after Roblox bought it. Guilded isn't perfect by any means, I did mentioned the flaws afterall, but I wanted to point this out cause I noticed alot of people talking about it's bad because Roblox own it when it actually became so much better after Roblox bought it despite the fact that Roblox had nothing to do with Guilded, Roblox only owns them and funds them, Roblox is letting the Staff do their own thing. Also it's funny to me how it was like that in the first place and it's no wonder since Roblox own it when Roblox didn't created Guilded, Roblox just purchase them after it already existed, and only only they are only funding them and that's it, which also means requesting Roblox to add stuff in Guilded won't do anything, but contact Guilded dev instead, which would explain why Guilded support is very good. In other words, comparing Guilded dev to Roblox dev is just wrong, you can treat Guilded as it's own standalone thing separate from Roblox.
Ever heard of responsible disclosure?
I saw you in Event Stage on Discord Dev Server 😁
i love guilded!!!!
I don’t understand why Roblox wants us to use Guilded if this can happen. They’ve only recently began adding support for Discord links.
not surprised it's a glitchy mess considering it's owned by roblox.
“All 5 of them”
YOU FORGOT ABOUT GUILDTALE
How much did discord pay you😭
71 billion dollars. JK, lol XD
(Yea, I put it just a little higher than Blizzard purchase on purpose, lol XD)
7:35 this is a spiffing brit video title
bro is working for discord 💀💀💀💀💀💀
As a guilded user. I can confirm most of this works but the crashing one.
Also, you're making the whole guilded server scared
6:23 always record yourself committing crimes and then post them on youtube
i forgot this existed
*oh no*
💀
I used it exactly once for the Roblox bundle.
i guess the crasher is a loop that signals the api hard. and therefore it gets overflowed(ddosed) so that the api cant give anyone the necesary data for your browser/app to load
As a developer, AAAAAAAAAAAAAAAAAAAAAA
Hey you forgot to mention that matrix is the best discord alternative we currently have
gotta question the legality of showing all of this lmao
its legal... just not the right thing to do.
@@ttaylor-st No, it isn't legal. Showing it isn't the issue, but he just showed himself conducting an unauthorized denial of service, which is a blatant violation of the CFAA. Even if he's based in Canada, the US is on great terms on a federal law enforcement level. If Roblox really wanted to, they'd certainly have grounds to pursue legal action and he provided a time stamp for them to go review APM data to verify it. Will anything come of it? Probably not, but if they wanted to make an example of him, they've certainly got the legal grounds to do so. If I was the CISO making the recommendation to legal counsel, I probably would recommend pursuing it to deter similar behavior, as he kinda gave away a critical part of the attack vector, whether he realizes it or not.
I'm more of a Postman man myself rather than Insomnia.
HTTPie > *
:)
burp
expect to hear a lawsuit soon
2:55 Robot NTTS who fails to do the captcha :/
Guilded forces me to Log In to X in Guilded app, even tho i already have the X app. But when I successfully logged into X in the Guilded app, I can't return back to the Guilded app. wtf am i supposed to do
Its so sad we cant have nice things. No matter what we get something and there is always that one person that chooses to ruin people because "fun"
I can’t even be mad because on the 13th I was truly wondering WHY my Guilded was crashing nonstop 😭
Knowing Roblox they probably don't give jack shit about Guilded so this probably wont be fixed in a while
'All 5 of them'
Some of my friends cannot get discord- but can use guilded.
There are 5 people in my guilded server.
Did some research and it took me ~1h to make a similar script. It's really not that hard
Interested in how this stuff works (Im very bad at coding and i would love a explanation if you want to make one)
They dont care about this platform. It is crawling with bugs now.
3:48 this part may not be IP logging the user clicking on the profile, that IP may be belong to the Guilded server also, saying just to confirm.
It's the user's IP, not Guilded's
Average Guilded hater and Discord Stan
Did they already Hotpatch the expiolts? trying the forcing ownership on a server i made with a ALt. And i can't seem to get the api request to be accepted
The funniest part about all of this is that Guilded was -made by- edit: bought by the Roblox team, so most of this bullshit can be attributed to Roblox shenanigans
No, just bought by Roblox
It is not made by the Roblox team. Roblox just owns it.
Roblox just bought it, they didn’t make it
Roblox's crash last year was caused by that piece of code
Nah Roblox does nothing with guilded besides give them money
I remember trying Guilded back in 2020 and finding it more confusing to use than Discord. Nowadays, I'm considering trying it again because of Discord's awful UI changes (among other things).
So how did it go? Are you talking with Roblox kids and enjoying playing with them lmfaooooo
@@ThaTrisme I never went back to Guilded lmao
Fun fact: Guilded is owned and operated on Roblox.
why kingcobra lmao, at least it wasnt goblin boy cyrax
the fastest RUclips has recommended me your video after its been uploaded-
Atleast Guilded doesn't f*ing ban my account when I get falsely reported and when I were to try and appeal my appeal would actually get read and not be flagged as "solved" 8 times in a row without any response.
Why would someone use guilded instead of matrix or revolt
for that matter, why would anyone use revolt over matrix?
I've been beta user of Revolt, and let me tell you, at the state it is right now, it's barely a skeleton, unfortunately. Reactions and emote pickers have only been recently added and its UI is sorta terrible, especially accessing settings by having to right click your own PFP at the top right, which is like the most confusing thing ever.
It's also rather unfortunate that it's not seen as serious by devs or the community, which makes it harder to use for official contexts, like game development.
@@noxxyy why would anyone use anything over good old IRC? /j
@@ttaylor-st cut out the /j, silly. but to use a platform with a "bottom" language option over one that's properly decentralized? matrix sure seems better there.
@@noxxyy Yep for sure, Matrix is almost definitely the best solution! Got a Synapse server up with a Discord bridge myself
1:35 Crazy? I was crazy once
Imagine getting a like on a 10 month old comment
I have a guilded exploit that will crash an entire channel similarly to that last showcased js script, but it's one channel at a time, but the crash is persistent, and cannot be fixed by the user, and isn't a constantly running script
I reported this to guilded and they denied the report!
I much prefer Guilded now because Discord has gone super corporate and obnoxious.
how so
What about now?
as of today i am no longer using Guilded because it's now required to link to a Roblox account makin' it forever more broken than ever
please dont tell santa
Roblox gotta have mods working on guildid too
More Discord news, yay!
Discord would pay you to destroy guilded
hello no text to speech :)) (edit): pls respond
I assume Guilded doesn't work out because it looks like malware. Most legitimate programs from most legitimate companies don't seek to nearly perfectly emulate the UI of their number one (and arguably only) competitor. If I wasn't informed this was a real program by NTTS, if I had ever seen it, I would immediately assume it's either a discord hacked/modded client OR a malware program looking to steal information.
"Because none of your friends use guilded"
I do not have any friends...
Andddd almost everyone from my discord server is also in my guilded server