Making DM Start a Privileged Intent

[gamer0mega]

I personally think that bots should not be able to DM users unless the user DMs the bot first, as this is being abused by bots which DM advertise, send fake giveaway DMs and other hacked bots.

Example:
Without intent, starting a DM Channel - POST /channels/@me => Cannot create a DM with a recipient which did not DM the application.
Without intent, GETting a DM Channel, or both of those with the intent - ​POST /channels/@me => (DM Channel)

[LikeLakers2]

I'm not sure this would help. If a spammer/hacker wants to send advertisements or fake giveaway DMs, I would imagine they'd already be using regular user accounts (not tagged as bots), so this intent wouldn't do anything to them.

[gamer0mega]

Bots which have their token leaked are abused for those purposes, I have seen a few

[gamer0mega]

And well, users cannot send arbitrary embeds anymore which makes the giveaway message from a user look much faker

[LikeLakers2]

If the issue is that bot tokens are being leaked, you have far worse issues to worry about than someone using the leaked tokens to send spam.

Also, the inability to send embeds as a non-bot user is unlikely to be a deterrent for spammers, as you can still craft a convincing giveaway message even without embeds. And in any case, they're not looking to swindle everyone they message -- rather, they're just looking to message a lot of people, that they might get a few who don't recognize a scam when they see it.

[timka-123]

Bots which have their token leaked are abused for those purposes, I have seen a few

ok, discord will have dm start as priveleged intent but... if bot approved to dm intent and bot start spam to members in dm. but developers have +1 complexity to have moderation functions.

[gamer0mega]

Bots which have their token leaked are abused for those purposes, I have seen a few

ok, discord will have dm start as priveleged intent but... if bot approved to dm intent and bot start spam to members in dm. but developers have +1 complexity to have moderation functions.

it would reduce the amount of those dms

[timka-123]

I think this is not good idea and I have two reasons for it:

1. Moderation bots cannot send to DM information about moderation actions for them
2. Verification (captcha) bots cannot send to user message with captcha message

[rouven0]

These types of bots could then apply for these intents. Pretty sure the cases you named would count as valid uses.