Marvin Witt @NurM4rvin Twitter profile

Pinned Tweet

Marvin Witt

@NurM4rvin

3 years

bottom

3

0

9

Last Seen Profiles

@kisahdunia_com

@BERGONIE33

@d0td0td0ts

@stw_pdg

@owen_ribel

@franqiec

@_shaardd

@realDrMAZA

@yjunlssgo

@Daftarkhwan

@WilliamsRuto

@CodeMeow777

@gond_jo

@FlakexJ

@asraa11a2

@malikbiebs

@LizaBorgohain

@Libbly_Libby

@jandakembangstw

@SydneyMetals

@ushitake_bull

@hijabjilbab1

@IraStevenBehr

@adabekae

@ImLittleNick

@schnirosaurier

@CdnChildProtect

@KaijuMp4

@asamingosu

@yyesilovax

@kookmarsh

@BANISHED_HAMMER

@BertChintez

@il3472525623305

@JacobMacPhee34

@ChaiKovsky

Marvin Witt

@NurM4rvin

2 months

Discord managed to create a working YouTube view bot in 2024 by playing their loot box announcement trailer on loop in the background of the in-app toast 🙃

186

2K

37K

Marvin Witt

@NurM4rvin

2 months

I should mention they presumably did this accidentally, even one of the high up developers at Discord was confused as to how this was happening

20

224

12K

Marvin Witt

@NurM4rvin

2 months

@stovepip3 This little popup in the bottom right of your Discord app. Not edible I think, though I guess I wouldn't stop you from trying..

7

10

3K

Marvin Witt

@NurM4rvin

2 years

This is false information. The scam works like this: The image doesn't load, so you open it in your browser and get prompted to log in on a fake login page, you enter your account credentials and then the scammer gets your account. Discord is not vulnerable, YOU are.

Letz Smash 🇱🇺

@LetzSmash_SSB

2 years

⚠️New Discord Hack Technique⚠️ If you received a DM with a picture not loading; DO NOT OPEN IT ! It will steal your Discord session Token and let the hacker change your password and use your account freely The A2F does not protect against ! Report suspect activity to admins

126

2K

28

1K

3K

Marvin Witt

@NurM4rvin

2 months

@ArtBackslash No, they are just embedding a normal iframe, but from my own research embedded video views do actually count to the view count. Would figure that YouTube will dedupe the view count later though

8

3

2K

Marvin Witt

@NurM4rvin

2 years

PSA: @streamlabs has a security vulnerability which lets people take over your linked YouTube/Twitch channel. Immediately unlink your YouTube/Twitch channel to avoid being affected.

60

1K

2K

Marvin Witt

@NurM4rvin

2 years

tfw a shitpost you made to post in a memes channel on discord now gets spread as "datamined" information. this is blatant misinformation. it's not real. it's fake. don't claim it's "datamined" when you don't even provide a source.

7

429

852

Marvin Witt

@NurM4rvin

2 months

@Arae__1 It's not an official server run by Discord, they just happen to be in that server and the server staff gave them an employee role which just happens to still have the old logo as the role icon

1

0

593

Marvin Witt

@NurM4rvin

4 years

A MAN HAS BEEN SEEN PROTESTING IN LEGO CITY

6

185

518

Marvin Witt

@NurM4rvin

1 year

@samu_samu_ray @mitchoo_oo Bold assumption

1

3

390

Marvin Witt

@NurM4rvin

2 months

@BTplayzFN I mostly just used that term as a joke but technically it is not wrong to call this a viewbot since it's generating illegitimate traffic

2

0

338

Marvin Witt

@NurM4rvin

1 year

@hawolt Wait until you find out what happens when you try to queue up for jungle...

8

14

307

Marvin Witt

@NurM4rvin

4 years

@YTCreatorsDE Ja lol ey

0

265

Marvin Witt

@NurM4rvin

2 months

@_Octopus0 This thing

3

1

214

Marvin Witt

@NurM4rvin

2 months

@RealBlackout03 @stovepip3 You are correct. Just checked myself. However, the views are coming from idle clients that are likely not going to update the app any time soon so this will go on until the April Fools joke self-destructs in their client at 12am Californian time

2

1

188

Marvin Witt

@NurM4rvin

2 years

@kurobutt Discord is doing their best to deal with this kind of abuse but they can't suddenly make people smarter.

3

5

169

Marvin Witt

@NurM4rvin

1 year

@t3dotgg @honeypotio Seems pretty reasonable for them to do. You added roughly 18 minutes of chit chat to a documentary that's 78 minutes long. You added ~13% of your own content to it. This isn't very transformative and doesn't count as fair use. If they want you to take it down, that's fair game.

2

0

167

Marvin Witt

@NurM4rvin

2 years

@streamlabs To further elaborate on this, there have been several streamers who have been taken over by a certain "Kotik Detektiv" or better known by their old alias Garkolym. All affected streamers had the same thing in common: they used StreamLabs for donations.

2

24

134

Marvin Witt

@NurM4rvin

3 years

@Lylons @discord Super bad for accessibility. Super hard to navigate and probably just annoys people with screen readers that have to listen to "ghost emoji general" instead of a plain old "general".

9

0

109

Marvin Witt

@NurM4rvin

1 year

@BillyApprove @DiscordPreviews This may come as a surprise, but you don't have to use it.

1

0

102

Marvin Witt

@NurM4rvin

2 months

@SkozmaPhotos @ArtBackslash As far as I am aware that tab lags behind like a week or something

1

0

109

Marvin Witt

@NurM4rvin

2 years

Here is a screenshot of the permissions StreamLabs asks for when linking your channel. The permission in the middle is the interesting one here.

6

10

108

Marvin Witt

@NurM4rvin

2 years

Below you can see a video of them doing their little "hack" on the YouTube channel "TimeDeo". All the information displayed in their little dashboard does match the information StreamLabs asks for when linking your account to their dashboard.

4

17

99

Marvin Witt

@NurM4rvin

2 months

@DaGrnYTer @stovepip3 The YouTube video is initially hidden but it's still already there and only gets pulled up if you hover over it

1

0

100

Marvin Witt

@NurM4rvin

5 years

Alter, ich kann nicht mehr @HerrNewstime (bitte mit Humor nehmen, aber das passt so perfekt)

5

15

99

Marvin Witt

@NurM4rvin

3 years

@garrynewman This reminds me of this meme I got sent a few days ago

0

2

97

Marvin Witt

@NurM4rvin

6 months

@bliaml @33YYYYYYY Your friend has no idea what they're talking about. In Discord's case their process is completely automated as is the case for any larger platform

0

89

Marvin Witt

@NurM4rvin

2 months

@jimmylongnoseYT Discord API, an unofficial server that was started before there was an official server to discuss Discord bot development stuff and all that.

Join the Discord API Discord Server!

Check out the Discord API community on Discord - hang out with 52885 other members and enjoy free voice and text chat.

discord.com

2

0

79

Marvin Witt

@NurM4rvin

4 years

@MeguminSama Stolen from me

Marvin Witt

@NurM4rvin

4 years

A MAN HAS BEEN SEEN PROTESTING IN LEGO CITY

6

185

518

2

58

Marvin Witt

@NurM4rvin

1 year

@pauIsack @The_Cheese404 @SteeveTM @ranger_houston @OrdinaryGamers It's perfectly reasonable to assume you both met in high school and then you simply graduated because you're two grades higher than her. Besides you don't have to go to school until you're 18 in Germany, you can already start working at 16

0

66

Marvin Witt

@NurM4rvin

5 years

@TheKasodus @discordapp That was never my intention.

1

0

54

Marvin Witt

@NurM4rvin

2 years

UPDATE: @streamlabs has silently fixed the security vulnerability in the last 2 days whilst publicly claiming it never existed. The exploit worked by grabbing your YouTube/Twitch account oauth2 access tokens that Streamlabs just openly shared on the alert box page you add in OBS.

Marvin Witt

@NurM4rvin

2 years

PSA: @streamlabs has a security vulnerability which lets people take over your linked YouTube/Twitch channel. Immediately unlink your YouTube/Twitch channel to avoid being affected.

60

1K

2K

4

33

56

Marvin Witt

@NurM4rvin

3 years

@GovParsonMO

2

4

56

Marvin Witt

@NurM4rvin

2 years

I love how the second entry when you search for "MEE6" in @discord 's application directory, is a bypass for a premium feature in MEE6. Serves them right.

4

54

Marvin Witt

@NurM4rvin

6 months

I'm so horny but my metamask iptv was hacked

121

0

14

Marvin Witt

@NurM4rvin

2 months

If you like Discord related news be sure to follow @DiscordPreviews and join the Discord Previews Discord Server, we cover everything and all Discord:

Join the Discord Previews Discord Server!

Get an early look at the latest Discord experiments, features and changes as soon as they get added. | 34353 members

discord.com

4

1

48

Marvin Witt

@NurM4rvin

2 years

If you want to know about actually datamined information, feel free to follow @DiscordPreviews where I post about actually datamined stuff as soon as it's been added to Discord's app/client.

0

2

40

Marvin Witt

@NurM4rvin

16 days

@ZjaranyDzem @panley01 One of the NPM packages used in the bot contains the malware and gets automatically executed on your device as soon as you install the bot's dependencies (through a post install script). Still a user fault technically, but it's not something you will immediately think about

8

3

43

Marvin Witt

@NurM4rvin

4 years

LivingBots ist schon ein geiler Hoster. Wenn ihr ne RAT hosten wollt, wisst ihr Bescheid wo.

5

4

38

Marvin Witt

@NurM4rvin

3 years

@Refriedbeans69 @CiscoUmbrella Become the girl

0

39

Marvin Witt

@NurM4rvin

1 year

@theoriolhd @proxyfox @nicolaiy3 That sentence of yours made zero sense.

0

37

Marvin Witt

@NurM4rvin

2 years

Here's a good write-up about how exactly this scam works if you want to dive further into it:

1

11

34

Marvin Witt

@NurM4rvin

3 years

@bruh_incdot @discord @OldPersonOnline amateur

2

1

35

Marvin Witt

@NurM4rvin

3 years

@PornstarZilean is this some kind of new trend? i saw it done with rammus which i think is even more cursed

2

0

37

Marvin Witt

@NurM4rvin

5 months

@supersylvie_

0

4

35

Marvin Witt

@NurM4rvin

3 years

@KADK__ @NeatobyNeato @opus1334 @jasoncitron @packyM @mariogabriele @discord Right up my arse where it belongs

1

0

34

Marvin Witt

@NurM4rvin

11 months

@joshbrrt @elosanta the guy had spotify with real name linked 💀

2

0

33

Marvin Witt

@NurM4rvin

2 years

@RiekeOben @jreichelt @Maurice_Conrad @welt Das ist jetzt auch nicht zu verwunderlich, da man dort nur abstimmen kann, wenn man den Artikel auch lesen kann. Dafür braucht man aber ein WELTplus-Abonnement, was sich natürlich nur Menschen kaufen, die die gleiche Meinung, wie die WELT teilen.

1

0

30

Marvin Witt

@NurM4rvin

2 years

@swagnoiceswag @DiscordPreviews Well, it's to the benefit of bot developers lol

1

0

33

Marvin Witt

@NurM4rvin

1 year

>drops .zip and other domains causing chaos >sells entire business to squarespace >refuses to elaborate

Killed by Google

@killedbygoogle

1 year

I am absolutely shocked. lmao

154

967

5K

0

3

29

Marvin Witt

@NurM4rvin

2 years

@PolarStar64 @kurobutt Would you care to showcase some of those "MANY" vulnerabilities? I'm pretty well informed when it comes to all things Discord and I haven't heard of any vulnerability that hasn't been addressed yet. Regarding Discord's support, here's what Discord's backend infra lead has to say:

3

0

28

Marvin Witt

@NurM4rvin

4 years

@cook1e0 @Son_Of_Elendil @t3rr4dice Hello, I'm the CEO of Twitter and I would like to point out that it's by no means unreasonable to claim you are the CEO of a company. If you need proof of me being the Twitter CEO I'll gladly delete your Twitter account. Cheers, the Twitter CEO.

1

0

28

Marvin Witt

@NurM4rvin

6 months

@33YYYYYYY Discord's infrastructure will just auto scale to keep up with the demand. You will achieve literally nothing

1

0

27

Marvin Witt

@NurM4rvin

2 years

@Lunascaped @PolarStar64 @kurobutt You seem to be misunderstanding how authentication works. There always has to be some kind of token to tell Discord that you're authorized to make a request. If this token doesn't bypass 2FA, you'd have to enter your 2FA code for every little action you do on the platform

3

0

21

Marvin Witt

@NurM4rvin

5 years

@TheKasodus @discordapp Discord hates Roblox players because they were abusing Discord's API, maybe they detected Roblox on your PC and denied you from getting this free gift.

1

0

24

Marvin Witt

@NurM4rvin

6 years

@JFnotKennedy Es war viel zu viel Arbeit, für so etwas simples

1

0

21

Marvin Witt

@NurM4rvin

7 years

@Kuchngeschmack Weil Mann > Frau

1

20

Marvin Witt

@NurM4rvin

1 year

@t3dotgg @honeypotio I'm aware other content creators do reaction videos like these too but when the original content creator asks them to take it down, they do take it down, no questions asked. If they wanted to DMCA you for it, they could. You should be happy they wanted to resolve this privately.

0

21

Marvin Witt

@NurM4rvin

2 years

I've reported a security vulnerability to @teamguilded which allows me to grab the IP of any user on the platform by merely sending a message. This was a month ago. I have yet to hear back from them. At least they didn't delete my account for reporting sec issues in the past 🙂

3

1

21

Marvin Witt

@NurM4rvin

2 months

@eepyeriri @BlueberrySpark2 @brintrevised You should be offended. Opera GX posts utter garbage cringe, so to put their cringe on the same level as "gay shit" is very much offensive.

1

0

21

Marvin Witt

@NurM4rvin

3 years

probably nothing

0

3

19

Marvin Witt

@NurM4rvin

1 year

@lieful2 @420WeabooSlayer name checks out

0

18

Marvin Witt

@NurM4rvin

1 year

born to ":3" forced to ":)".

3

1

18

Marvin Witt

@NurM4rvin

4 years

@jasoncitron @YangCLiu Ye ye, trying to cover up the fact that @discord is just a Guilded clone, I see! Discord is such a total rip-off, it's so blatent obvious (I'm being sarcastic for anyone that can't tell)

1

0

15

Marvin Witt

@NurM4rvin

6 months

@Ludacy_22 @AsycLoL I understand where you're coming from but I sincerely believe that Twitch is not the platform for this kind of content especially considering the majority of their users are minors that get suggested these streams. If they fix the age hating properly, then I wouldn't care. 1/2

2

0

17

Marvin Witt

@NurM4rvin

2 years

@Warchamp7 @TagachiStudio @LetzSmash_SSB @noealz @discord It doesn't. The image doesn't load, you open it in your browser, you get prompted to log in on a fake login page, you enter your details. Successfully scammed.

1

0

17

Marvin Witt

@NurM4rvin

6 years

@janboehm @DHLPaket @neomagazin @ZDF ^Sl war einfach genial

0

16

Marvin Witt

@NurM4rvin

4 years

@MeguminSama u

0

11

Marvin Witt

@NurM4rvin

1 year

@blackhawk2306 @DiscordPreviews It's just another type of attachments. So if you don't want voice messages you will have to deny attachments as a whole.

1

0

17

Marvin Witt

@NurM4rvin

1 year

@exeQtorr @hawolt he already works a far better job

0

14

Marvin Witt

@NurM4rvin

6 years

@JFnotKennedy Hier noch ein simpleres

0

15

Marvin Witt

@NurM4rvin

6 years

@littlelitgina Facebook: sag wann und wo, ich mach video

1

0

14

Marvin Witt

@NurM4rvin

5 years

Lächerlich, dass jemand direkt mein Video kopiert.

2

1

16

Marvin Witt

@NurM4rvin

1 year

@Eevee_Sophie From what I've heard, this was just a bug introduced by an employee who added the "Try Nitro" section. They simply wrapped all the existing Nitro-only fields and didn't have the pronoun experiment enabled, so they didn't realize they were including the pronouns field in there.

1

2

14

Marvin Witt

@NurM4rvin

1 year

@CookieLoLxx

0

15

Marvin Witt

@NurM4rvin

6 years

@snowhazee Statement? Entweder kennt sich dein Websiten Developer echt nicht damit aus, wie man eine Slideshow macht oder ihr mined Cryptocurriences. #BUSTED

2

3

14

Marvin Witt

@NurM4rvin

2 years

@Lunascaped @PolarStar64 @kurobutt to get a new token. However I can tell you that Discord is currently working on reworking the authentication system to a session approach which will allow you to see any suspicious logins to your account.

2

0

13

Marvin Witt

@NurM4rvin

4 years

@gitlost Someone needs to find me the repository for this commit. Need it for educational purposes.

0

16

Marvin Witt

@NurM4rvin

6 years

. @Marco_09MC 🤔

0

2

15

Marvin Witt

@NurM4rvin

4 years

do not under any circumstances post this tweet on discord. you've been warned. <:g1:759140257798160475><:g2:759140257986773081> <:g3:759140257760280607><:g4:759140257986773000> <:g5:759140257941160026><:g6:759140258100281344>

1

4

16

Marvin Witt

@NurM4rvin

3 years

I think @IanMitchel1 joined @discord 's Games team

0

15

Marvin Witt

@NurM4rvin

7 years

Normales 17 Jähriges Mädchen vs. @littlelitgina

1

2

12

Marvin Witt

@NurM4rvin

2 years

@jkbckr @brunomiguel @GossiTheDog That very page gave me an ad for NordVPN when trying to leave it...

0

13

Marvin Witt

@NurM4rvin

6 years

@alextv Wenn ich das hier so öffentlich teilen würde, wäre das FBI schon da. Okay muss los, hat an der Tür geklingelt

1

0

14

Marvin Witt

@NurM4rvin

2 years

@LoicTomatot @DiscordPreviews Most updates we post are only related to the Canary/Alpha version of Discord unless stated else.

0

14

Marvin Witt

@NurM4rvin

2 years

@LucidiesArt @geomijulpod @YoukneeKin @radialasymmetry It's not theirs, it's a shitpost I made a while back and posted in a memes channel and people started taking it seriously. Doesn't matter though, it's not real and most definitely not datamined information, it's misinformation.

0

3

12

Marvin Witt

@NurM4rvin

5 years

@RareLtd

0

13

Marvin Witt

@NurM4rvin

2 years

@LiteMods @discord They're already dealing with servers that call for violence, which includes pro-Russian servers. It's not like you could do much to make them do more because they're already doing something about these servers

1

0

13

Marvin Witt

@NurM4rvin

3 years

I've had respect for every decision Discord made till now, no matter the features they added, no matter how many people had an issue with it because ultimately there was a use for it in the end. However adding NFTs and crypto to a platform for primarily teenagers is not something

Jason Citron

@jasoncitron

3 years

@packyM @mariogabriele @discord probably nothing

4K

3K

11K

1

12

Marvin Witt

@NurM4rvin

3 years

@ArueAri @dankmemerbot They did, they simply fucked up to correctly implement the `allowed_mentions` field which prevents unintended @everyone pings from happening. Also somewhat of a fuck up on Discord's part since they don't tell you that you implemented the field incorrectly.

0

13

Marvin Witt

@NurM4rvin

2 years

@Zuthal1 @DiscordPreviews An input field for it was just added to the client and that input field has a maximum of 40 characters.

1

0

12

Marvin Witt

@NurM4rvin

5 months

What did Rockstar mean by this

0

11

Marvin Witt

@NurM4rvin

2 years

@tweet_crescent @DiscordPreviews From what I know it will use the same permission as reactions which will get renamed to something more fitting

0

10

Marvin Witt

@NurM4rvin

5 months

why is everyone complaining about this? $35 per second makes $126,000 an hour. make that 40 hours a week and you get an annual pay of $241,920,000 without regards of holidays, unpaid vacation, sick days etc. i would be dying to get that

Chai

@SoftFurSunlight

5 months

Green light to send this around has been given, and you'd better believe I'm gonna do just that. Proof, straight from Adam himself, of Spindlehorse paying Hazbin animators $35 per second. That is fucking /slave wages./ This is abuse.

619

7K

38K

1

0

10

Marvin Witt

@NurM4rvin

2 years

@potakuchan_n I managed to accomplish a similar thing, but I'm playing on emulator for better performance so at first I thought it might have been an emulation error but nice to know it also happens on actual hardware

0

2

11

Marvin Witt

@NurM4rvin

2 years

@BlackWolfWoof @DiscordPreviews @thebiggestcrazy The attacker will have a harder time getting you out because you need to enter your 2FA code (or password if you don't have 2FA enabled). This will render token loggers useless unless they can figure out your 2FA codes or password as well.

1

0

11

Marvin Witt

@NurM4rvin

4 years

@RobLove95 @KeithTheGooner @spectatorindex sorry, but it's incredibly hard to differentiate between brain-dead twitter users and normal twitter users

0

11

Marvin Witt

@NurM4rvin

2 years

@FateImperius @DiscordPreviews You can't see it at all right now without tricking your client into showing it. It's only somewhat done hence the missing banner and or small irregularities

0

10

Marvin Witt

@NurM4rvin

2 months

YouTube has just removed all the views that came from Discord's minor coding oversight!

0

11

Marvin Witt

@NurM4rvin

2 years

@slweeb @DiscordPreviews Just the active sessions on devices you are really still logged on. The screenshot in the tweet has dummy data.

0

11