Ser Aymeric, the Discord bot, was designed to be spyware.
Some background, for those who aren’t familiar with the situation:
Lethys is the creator of a popular FFXIV-centric Discord bot called Ser Aymeric. It’s admittedly a very useful bot, and is popular because of it’s feature-set.
Lethys is well known in the community as a serial predator of gay men.
Lethys is obsessed with harassing individuals he sees as his enemies.
Lethys has leveraged the popularity of his bot to secretly surveil individuals he has grudges with in the past.
I worked on Ser Aymeric directly and had access to the code. All of my information is first hand knowledge. Lethys brought me on to work on Aymeric’s dashboard administration interface.
I was asked to hold off releasing this information until after Discord did an investigation. I am uncertain whatever came of that investigation, so either it never happened, or Discord doesn’t understand the ramifications of this situation.
Lethys has two spying capabilities built into Ser Aymeric:
The first was built in Version 1 of the bot, specifically to spy on Lethys’ rival Lux and his XIV Male Mods Discord server. It’s known as the ‘secret h’ function (command ?h), and was able to dump the last 1000 lines of chat from any channel Aymeric is present in. He specifically built it to spy on XIV Male Mods’ private admin channel to see what they were saying. He was obsessed with them as a rival server to Lethys’ Gayorzea community. This function could have been used to export the text of any channel on any server that Ser Aymeric was present in, but XIV Male Mods was the only one I’m aware of it being used against.
For Version 2, much of the bot was rewritten, but rather than making things better, he grew the spyware capabilities.
It was during the V2 rewrite that Lethys brought me on to work on the administrative back-end for the rewrite, which is why I had access to the code. Despite his claims in the past, I was listed as a developer on the credits and homepage ever so briefly.
Version 2 logs every message by every user in every channel that Ser Aymeric has read permissions to. It stores them a MongoDB (a type of database software) collection called ‘messages’. These records (referred to as JSON objects) represent message sent. They are plain text, unencrypted and personally identifiable. Lethys could query them on a per-server, per-channel or per-user level.
In his privacy policy he claims this logging is for the ‘quotes’ feature, but it goes far beyond that. This is all messages, whether or not someone has invoked a quote command or not. Everything.
This is a look into the live production database Ser Aymeric is running off of, using MongoDB. You’ll notice a ‘messages’ collection containing a large number of objects.
An example of one of the objects inside the ‘messages’ collection. This represents a message someone shared. Every single message that is shared in a channel that Ser Aymeric has read access to is logged and stored, regardless of if they have been quoted, deleted, or whatever the case may be. Everything. In spite of what the author claims or states in their privacy policy.
Here is another example. This shows how easy it is to query down to a specific user, channel or server level. In this case it’s my own Discord ID. This was posted in a private administrative channel that although Aymeric had read access to, had no reason to be logging whatsoever.
Here is a live shot of that same message, inside a closed admin channel. The message ID is 617875866122190859, channel ID is 480809457056743424, server ID is 179321234046058497 and author ID is, again my own, 62310340079128576. This mirrors exactly what is in the live database on Ser Aymeric.
So, the long and short of it is, a known sexual predator with a history of harassing his victims and those he has grudges against has a wildly popular Discord bot which enables him to see what anyone is saying without their knowledge on any server, to be aware of what servers they are present in, what channels they have permissions to, and more.
Let the scale of that sink in. At the time of this writing it’s on 18,372 servers, and monitoring 1,210,120 users who are completely unaware. It’s gobbling up every message across every Discord server it’s present in, collecting private information without people’s consent or knowledge, readable by him, and no way to delete it. It is not even remotely GDPR compliant, in spite of Lethys’ being a citizen of the United Kingdom. It’s a gross invasion of privacy.
Every server that has Ser Aymeric present in it is unwittingly enabling Lethys to continue to spy and harass his victims. Do not use this bot. Do not trust Lethys with you or your friends information. You will learn, as I did, that he is not someone you should put your trust in.
Also, just to get this out of the way, because people keep declaring I’m full of shit, yes, I did work on the bot:
https://discordapp.com/channels/265561352683126786/265586371178135562/618034546503581698 (although I’m sure he’ll delete it.)
Update: In light of my tweets, new version of Ser Aymeric has recently been released advertising itself as “secure” because it encrypts these messages. This is literally impossible to do from a cryptography standpoint, as I explain here. Message history and quoting is impossible to do with an encrypted database. Aymeric is no more secure from Lethys’ spying than it ever has been, and I’ve nothing to indicate that Lethys has suddenly developed a more ethical persona.
germansingergirl
yousharknotpass
turnnoffyourmind
prguitarman
andulkaphoto
ellievsbear
