Update: So, a lot has transpired in the last 2 days. A Guilded staff member claimed that these vulnerabilities were never reported, causing a fair chunk of backlash and drama. No biggie because I was already shown that multiple disclosure attempts were made and acknowledged. 24 hours later, Guilded responds in their partner server stating that "for some unknown reason, the reports were closed before it ever reached the team". Now this could be because Guilded's hackerone program is through Roblox and there is miscommunication, but I don't have a solid answer. However, they said they were diving into old closed bug reports to ensure that they were actually fixed. And I can confirm this as I received reports of old tickets opening back up. So overall, mixed response from Guilded. I'm glad they are getting their platform fixed and making sure their bug program is operational. But I wish I didn't have to kick them in the butt to do this in the first place. Original post: Fun little facts for the nerds + comments about disclosure Three years ago, Guilded had a thing where you could view every server that a guilded user was in when you visited their profile (not good obviously because that means you could see people's personal server with friends). There was a reddit post about it here: www.reddit.com/r/guilded/comments/hkhsev/comment/fxgipdk/ Guilded made a fix to remove that stuff from the client. You couldn't click on someone's profile and stalk them. Now, that was three years ago. However between then and A MONTH AGO, you could still get all that information through the API (the comment I linked to stated that). So for three years you could just stalk someone on Guilded. (Thank you amia for letting me know about this) Regarding disclosure, Guilded was made aware of these issues months and months ago, yet nothing happened. Considering the previous thing took a solid 3 years to fix (and some of these exploits were being abused in the wild), giving Guilded a swift kick in the butt was in my eyes a good option. I know some of yall might be upset, but nothing makes me happier than a Guilded skid getting mad at me for "revealing" his method.

We need to remember though that competition to Discord is good and healthy. I hope they can put the issues aside and live up to Discord

Tried out Guilded with some mates, and it was alright, nothing too crazy. But gotta say, the app has a couple of quirks. We ran into some audio glitches, video stream bugs, and a few other hiccups that still need fixing. Also, there were some features that didn't really click with us, like the Voice Channel and the Streaming Channel, that were seperated. Didn't see the point, you know? Not that we're big fans of Discord, but when it comes to stability, Guilded's got some work to do. Just wish that the Devs, update the Core feature more frequently since at one point it got quite annoying.

guilded is such a good idea, but so badly implemented

Guilded barely worked properly in the first place, so this is probably going to be the nail in the coffin for it to not be chosen by people looking for Discord alternatives.

A naked man fears no pickpocket.

I love the responsible disclosure of making a youtube video about it

Some time ago I reported an issue to Guilded staff that allowed you to bypass all server side checks regarding messages - you could essentially post messages from someone's account without them ever knowing. Not only that, you could post them in any existing channel (including private dms), and even send system messages (such as those that you see when editing a thread). It took them OVER A YEAR to even acknowledge this issue, and even now I'm pretty sure it partially works. I have no idea what their priorities are but clearly it's not user safety.

And that, ladies and gentlemen, is why you validate user input on the server side, not in the client.

The crash is probably because the API has a max request limit, which means that there is a fixed number of requests per unit of time for all Users.

I rememeber seeing Guilded and it was during the time when Discord was fiddling with NFTs. I was excited at first cuz I love a lot of the features Guilded has! Free unlimited Emojis, animated pfp and banners, gradients on usernames, whispering, lots of cool stuff!! But it was just lacking in BASIC features. Streaming didn't work, might still not. The mobile app to this day still doesn't have a voice sensitivity option. Basically unusable for my friend who would constantly stutter unless using push to talk. And honestly, I really need my music bots.

I like how Roblox says it's "safe"

Neat, just a few days ago I was talking with some friends about guilded and wondered if you ever make another video about it. Didn't expect that outcome though.

gill issue?

reminder that while competition to discord is (mostly) good, guilded is still owned by roblox corporation. their whole business strategy is literal child labor that isn't regulated yet

that reloading tip just changed gaming for me forever holy shit

Guilded (nor its staff) we're aware of these issues. (Source: Jared, Guilded staff member)

The script NTTS showed at the end most likely just rate limited him, which means your IP is temporarily blocked from sending data to a website so it can prevent a DDOS. I dont have the script and havent tested it so this is just a guess.

when you remember that roblox has data breaches, you aren't surprised that guilded is broken

dude makes a once in a blue moon video about guilded and casually shows that he can crash/slow down the entire API with a single computer

Love how Discord is self-aware enough to have "nonce" as a message ID.

Thank you for the Mercfleet tip that I will likely forget about in a few days.

Can a video about IRC integration into discord be a thing? The only real way a discord alternative can thrive is if there is some level of cross-communication.

Its really sad, that a skid with a laptop or phone, can just be like, oops, and crash an ENTIRE PLATFORM

As I'm a Guilded member since 2022, it kinda needs a bit more attention and we're not getting any or barely getting any, all we get is jokes on how a ripoff we are compare to discord. I wanna be straight up honest, just because discord makes fun of us doesnt mean they're original either. They copied slack, many features are stolen from slack. As I took a deep compare on both slack and discord. Is guilded buggy? Yes but at least it has some feautres only discord nitro has. I wish guilded had more but I'm fine with the features it's got. For those who say "guildeds a ripoff" you have no room to talk, cuz discord did the same before guilded.

6:18 this makes me think about matrix/element. You can't delete, just kick everyone and leave

i forgot this existed

You better not get taken down for sharing the Crash metod since, uhh.. for the first time I ever hear about this guilded and haven't read the TOS yet 🤓☝

Thanks for this coverage, I was very recently checking this platform out and we just couldnt stop running into issues

I think the last one could already be described as a DoS. And that's not really legal

HAVE A GOOD DAY EVERYONE

Yo, they didnt patch the malformed stuff? I remember finding that years ago

Guilded - when you need the ILLUSION of golden security details

How much did discord pay you😭

That script sends a dos or ddos attack to guilded’s backend which is probably weak since they thought it was hidden right?

i love guilded!!!!

I'm actively looking for a a Discord alternative for my friend group but this being owned by Roblox to begin with immediately wrote it off.

releasing that code sounds like a good idea, perfect to expedite the bug fixing :)

Thats pretty dangerous that you can grab an IP deffenietly NEEDS to be fixed!

7:35 this is a spiffing brit video title

bro is working for discord 💀💀💀💀💀💀

im here

As a developer, AAAAAAAAAAAAAAAAAAAAAA

the crasher reminds me of the old Xfire crippler that would crash peoples clients just by spamming messages and also take down people livestreaming on it.

*oh no*

I wish Guilded had more members :c

6:23 always record yourself committing crimes and then post them on youtube

gotta question the legality of showing all of this lmao

Guilded did not crash probably - you were rate limited. Once you stopped spamming the API, you were able to get under the rate limit again. If you had actually crashed a server it would have taken more time to recover.

I used it exactly once for the Roblox bundle.

i peed on the floor today

not surprised it's a glitchy mess considering it's owned by roblox.

Even with all this, if they had built-in polls I would switch in a heartbeat.

These guilded servers seem to be very trashy if they cannot block a singular computer from overloading the servers. I have made servers at one time and they were more stable than what guilded offers. Very interesting video!❤

les gooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

It has better features than discord but nobody uses it

Never tought Guilded would be this broken ☠☠

expect to hear a lawsuit soon

Before 1 hour / Before 1K Views GANG

Ever heard of responsible disclosure?

It genuinely blows my mind how there isn't a single good competitor to Discord yet, especially considering how bad Discord is itself

I believed in Guilded because they gave us global emotes for free when Discord removed and paywalled them T_T but then they got bought by Roblox and now this...

Honestly Guilded gives so much more than Discord... But how am I going to get people transfer to it lol, there's no way I've tried to look for communities there too, nothing

Average Guilded hater and Discord Stan

Did some research and it took me ~1h to make a similar script. It's really not that hard

That's wild, If I were a evil person I could possibly post IP grabbers and stuff in my own server and then using the transfer ownership API to brute force through everyone's User ID and then everyone gets IP logged 😭😭

This is the only time I have heard of Guilded.

(7:45) That would be 13 Dec 2023 20:59 UTC in normal terms and 2023-12-13T20:59Z in ISO 8601

why kingcobra lmao, at least it wasnt goblin boy cyrax

omagad video

i like cheese

I like the "(A bit) broken" title, ha, and so i though when i watch the vid.

If guilded fixes problems that caused this needing to be escalated into a public call-out, and adds a light mode, I'll probably try switching to it as my platform.. although, moving my friends there is unlikely.

More Discord news, yay!

Even with these issues, I personally think it's still better than Guilded. Like you talked about how there's a way to get the server to shutdown in this video, but you can do the same in Discord like it actually happened recently again infact. Guilded has better support, like it took 1 month for me to get a response in Discord and I don't just mean they saw it 1 month later cause alot of users either, they literary ignored me on purpose, I know cause I seen hints of them doing just that, and there's a video about how Discord let their server be gone forever too only because they server weren't popular enough and that's despite the fact that Discord support let it again in the first place cause hacker shut their server down after that 1 month of that user contacting the support, Guilded third-party apps isn't against terms of service too unlike Discord cause the third-party app asked for Guilded permission already. Guilded has better server creations/customizations, are you a creator of the server but was forced to create multiple different server in order to do different things? Well you no longer need to do that if you have Guilded cause there's sub server within the main server. Guilded does "almost" everything you can do in Discord nitro but completely for free while also improving and adding features that wasn't in Discord, Guilded just get paid through donation to other creators instead kinda like what Ko-fi and Patreon does which I like even better, granted Discord does have that too but that doesn't change the fact that nitro exist. Discord is 3/5 in Playstore while Guilded has 4/5, the thing about playstore is that I feel it's easier for bad things to get 4/5 compare to something like metacritic user score so that doesn't mean Guilded is good, but that does mean it's harder to reach 3/5 and Discord still got 3/5. You can link your profile and server to games to make it easier to know what games you're into but only if it's part of the list, but bio isn't had good and there's no animationed banner sadly, there is animatied profile pic though and once again free. Guilded also increase the limits too rather that be file size, texts, servers, channels, roles, and even amount of users that can be in the server (though it's so underrated that I haven't seen a server that reached max users). So this is what I think Guilded is better at, now time for Discord. It may not matter much for some people, but Guilded does use up more power so Discord may help people who has that bad of a PC. Discord is more popular too and I consider this to be the most important one cause it's literally called *"Social"* Media for a reason. And because Discord is both older and more popular, that also means Discord has more Bots too. Better bios, and has animated banner (though animated banner is locked behind nitro). I thought it can be abit annoying in Guilded to reply messages by left-clicking cause of how common left-clicking is, but that's not the case in Discord which is nice. I use Discord cause popularity is the most important aspect of Social Media as I stated before, but I also use Guilded cause I think it's better and I want to support software like that, so I'm using both, would love to see Guilded becoming more popular than Discord someday but that probably won't happen though. I remember Guilded being super bad years ago, but it became so much better after Roblox bought it. Guilded isn't perfect by any means, I did mentioned the flaws afterall, but I wanted to point this out cause I noticed alot of people talking about it's bad because Roblox own it when it actually became so much better after Roblox bought it despite the fact that Roblox had nothing to do with Guilded, Roblox only owns them and funds them, Roblox is letting the Staff do their own thing. Also it's funny to me how it was like that in the first place and it's no wonder since Roblox own it when Roblox didn't created Guilded, Roblox just purchase them after it already existed, and only only they are only funding them and that's it, which also means requesting Roblox to add stuff in Guilded won't do anything, but contact Guilded dev instead, which would explain why Guilded support is very good. In other words, comparing Guilded dev to Roblox dev is just wrong, you can treat Guilded as it's own standalone thing separate from Roblox.

are you sure you didn't just ratelimit yourself

This Damn Nerd

Roblox gotta have mods working on guildid too

2:55 Robot NTTS who fails to do the captcha :/

hello no text to speech :)) (edit): pls respond

As a Guileded fanboy I love this video, this public shaming will hopefully make it even better

1:35 Crazy? I was crazy once

the fastest KZfaq has recommended me your video after its been uploaded-

nuclear weapons

please dont tell santa

invite me to the next one bro lol

Well discord didn't have to even try to kill gilded, they did that to themselves.

They dont care about this platform. It is crawling with bugs now.

Roblox owns it, what do you expect

I saw you in Event Stage on Discord Dev Server 😁

teamspeak on top fr

“All 5 of them” YOU FORGOT ABOUT GUILDTALE

I much prefer Guilded now because Discord has gone super corporate and obnoxious.

people here before this blows up like

Why would someone use guilded instead of matrix or revolt

I'm more of a Postman man myself rather than Insomnia.

1 minute ago 🔥🔥🔥🔥

well it works with my roblox webhook

hi

Never even heard of this one