I honestly think it's funny to even submit a CVE for this.
But if you are so concerned about privacy to the point where someone knowing you are online on Discord is such an issue, you probably shouldn't be using Discord in the first place, it's not exactly a privacy-focused platform.
Also reading the linked blog post
> Discord moved to a private, invite-only bounty and ghosted my report for over 100 hours, violating the 24h promise on their own page
Their own page never promises to respond in 24h, in their own words: "Vulnerability reports will always be responded to as fast as possible—usually within 24 hours."
"usually" doesn't mean they promise to respond in 24h, not immediately getting a reply doesn't mean you are being ghosted either.
I honestly think it's funny to even submit a CVE for this.
But if you are so concerned about privacy to the point where someone knowing you are online on Discord is such an issue, you probably shouldn't be using Discord in the first place, it's not exactly a privacy-focused platform.
Also reading the linked blog post
> Discord moved to a private, invite-only bounty and ghosted my report for over 100 hours, violating the 24h promise on their own page
Their own page never promises to respond in 24h, in their own words: "Vulnerability reports will always be responded to as fast as possible—usually within 24 hours."
"usually" doesn't mean they promise to respond in 24h, not immediately getting a reply doesn't mean you are being ghosted either.