Discord is switching to temporary links to stop malware
Discord has announced plans to switch to temporary file links by the end of 2023, a move aimed at reducing the spread of malware on the platform.
The instant messaging platform told Beeping computer that it will do this to “create a more secure experience for users.”
While Discord users will not be affected by the links, which automatically refresh every 24 hours, those who use the links outside the platform will not be able to do so once they expire, a day after they are created.
Discord unveils new plan to defeat malware
Disagreement told Beeping computer that the change “will help our security team limit access to flagged content, and generally reduce the amount of malware distributed through our CDN.”
The platform’s content delivery network is often exploited, with threat actors choosing to host malware. When the change takes effect across the network, Discord will effectively put an end to long-term hosting.
Later this year, links will receive a signature and will only remain valid under the expiration timestamp. Discord will call its temporary link scheme “authentication enforcement.”
A spokesperson for the network added: “To access the CDN link in the attachment after the link has expired, your app will need to retrieve a new CDN URL. The API automatically returns valid, unexpired URLs when you access resources that contain a CDN URL for attachments, such as when retrieving a message.”
The changes are designed to have minimal impact when it comes to using Discord, and it’s unlikely that end users will notice a difference from within the app, with the exception of links shared outside the app that will be deleted within 24 hours expired after creation.
Discord said developers may see “minimal impact” and has therefore committed to working with them to make the transition as smooth as possible.
Through Beeping computer