The Discord SDK used in the shooter was recording an excessive amount of data.
Embark Studios has released an urgent update for its shooter ARC Raiders after discovering an issue that could cause users' private messages from Discord to end up in the game's log files.
The issue was reported by tech blogger and systems engineer Timothy Meadows. In his report, he indicated that the Discord SDK used in the game was recording an excessive amount of data — including private messages between two users and the authentication token. This data could be saved in text form in the game logs.
According to Meadows, the reason lies in how the Discord integration works. When the integration function is enabled, the game uses the full token to access account data. At the same time, the SDK did not filter the content and recorded almost all received content to disk — because of this, personal correspondence could appear in the logs.
The developers quickly responded and released an update that fixes the issue. In a message to players on the official Discord server, the team explained the situation:
The team is also working on a hotfix to address an issue where the Discord SDK was recording an excessive amount of user information. Rest assured that your personal data was not sent outside of your computer, and Embark has not viewed or stored such information. We will disable Discord SDK logging and conduct a deeper audit to ensure that similar issues do not occur again
