termux / termux-packages

A package build system for Termux.
https://termux.dev
Other
13.33k stars 3.07k forks source link

Package concerns regards to discord-related packages #11948

Closed ghost closed 2 years ago

ghost commented 2 years ago

I've seen some modified discord clients present in Termux packages such as discordo

The use of modified or custom clients would have the risks of Account Termination and discord terms of service mentions about unofficial/3rd party clients

Someone banned from using discord due to the violation of Terms of Service by using this custom client

it's a bad idea to keep or maintain these packages under the main repository that involves no official way of allowing 3rd party clients as per Terms of Service and not available to install on-demand in major distributions. I think complying with service's Terms of Service regards to third party (proprietary) clients should be required before adding these kinds of packages to reduce risks of account termination.

xtkoba commented 2 years ago

As the initial packager of rdircd, I'm already aware of this issue.

As per packaging policy with respect to hacking tools, I will remove a package if it makes script kiddies possible to spam through the Discord service with the slightest knowledge of programming. I doubt if that is the case though.

T-Dynamos commented 2 years ago

Also then #11938

ghost commented 2 years ago

While custom clients can be a good frosting over plain clients. it wouldn't be appropriate to package in the main repository, custom clients would have extra capabilities exposed to end-users that discord wouldn't normally do. which is good for selfbots that could violate the Terms of Service.

If keeping package to exist rather than asking user to compile something from scratch, a user/3rd party repository for these kinds of packages would be a more appropriate if ever possible. In Arch, 3rd party clients are in AUR while official ones are in the main repo. If discord might officially release a CLI version of the client then I guess it's appropriate to package it here? aligning the package standards from other distros would be a good consistency.

Although the ToS is unclear about legislating these modded clients, the obvious from what you're doing is enough to terminate your account. likely this issue could subject to change but for my opinions, I don't encourage users risking their account being terminated using these utilities unless smart enough to prevent it.

ghost commented 2 years ago

I guess this can be closed if this is objectionable. as technically the main repository do not have official clients yet.

OrdinaryEnder commented 2 years ago

I guess this can be closed if this is objectionable. as technically the main repository do not have official clients yet.

Seem impossible since it closed source, maybe ur can ask to discord support for source and build up for termux

ghost commented 2 years ago

doesn't matter? why would discord prioritize Termux platform if proper clients already existed. anyway pretty much nothing I can do on my side