ID photos of 70,000 users may have been leaked, Discord says

https://www.bbc.com/news/articles/c8jmzd972leo

213 points · 41 comments · view on lemmy.world

41 Comments

floofloof@lemmy.ca · 72 pts · 335d (5 replies)

From Discord's age verification page, under "Privacy and Data Security":

Q: Is my data stored when I use Face Scan or Scan ID verification?

A: Discord and k-ID do not permanently store personal identity documents or your video selfies. The image of your identity document and the ID face match selfie are deleted directly after your age group is confirmed, and the video selfie used for facial age estimation never leaves your device.

https://support.discord.com/hc/en-us/articles/30326565624343-How-to-Complete-Age-Verification-on-Discord

https://archive.is/FBqo5

So is that a lie?

vollkorntomate@infosec.pub · 27 pts · 335d (1 reply)

I wonder if they could face legal consequences for this

devfuuu@lemmy.world · 32 pts · 335d

Companies suffer no consequences and nobody goes to jail for destroying real people's lifes. It's how businesses work. Do it and apologize later motto or something like that. At best some small fine.

JoMiran@lemmy.ml · 14 pts · 335d

So is that a lie?

It always was and it will always be. Data is the real commodity and Discord had no intention of wasting it when they could profit from it. This applies to ALL "free" products offered by corporations. You are and have always been the product.

nixus@anarchist.nexus · 5 pts · 334d

always_has_been_astronaut.jpg

OwlPaste@lemmy.world · 4 pts · 335d

is this not from the stolen support tickets? some of which were related to id verification? 70k users is a very low number for discord.

QueenHawlSera@sh.itjust.works · 27 pts · 335d (21 replies)

They lied then They said they weren't saving the pics, deleting them when verification was done.

I wish there was a Discord alternative

moopet@sh.itjust.works · 8 pts · 334d (3 replies)

** slips a note under your door that reads, "IRC" **

QueenHawlSera@sh.itjust.works · -3 pts · 334d (2 replies)

IRC died, over six years ago

nixus@anarchist.nexus · 7 pts · 334d (1 reply)

/me looks around at his multiple IRC servers...

"Huh, I didn't know you guys had (aparently) died."

QueenHawlSera@sh.itjust.works · 1 pts · 333d

They're ghosts

RiceBowl@discuss.tchncs.de · 7 pts · 335d (9 replies)

Revolt is an option. But it needs people and communities.

prex@aussie.zone · 6 pts · 335d (2 replies)

Is revolt an online platform or a general instruction?

gratux@lemmy.blahaj.zone · 4 pts · 335d

both is good

pineapplelover@lemmy.dbzer0.com · 1 pts · 334d

Yeah it's a good discord clone. Apparently it's renamed to Stoat now

gratux@lemmy.blahaj.zone · 5 pts · 335d (5 replies)
RiceBowl@discuss.tchncs.de · 1 pts · 334d

Oh thanks I didn’t see this about the rebrand.

pineapplelover@lemmy.dbzer0.com · 1 pts · 334d (3 replies)

That's stupid

MotoAsh@piefed.social · 0 pts · 334d (2 replies)

Is it stupid to adopt an innocuous name at a time when governments are cracking down on all sorts of things and trying to be faschie again?

"Revolt" doesn't exactly say, "don't 'investigate' me government, I promise there's nothing suspicious."

pineapplelover@lemmy.dbzer0.com · 0 pts · 334d (1 reply)

And what does Discord say?

MotoAsh@piefed.social · 0 pts · 332d

I'm sorry, was Discord created by non-capitalists at a time when fascism was taking over?

The situations and time of their creation are not the same.

tatann@lemmy.world · 6 pts · 335d (2 replies)

If you want to just text-chat and/or voice-chat with some friends, Element(Matrix) works well

But if you're a gamer looking for bigger communities, I don't know one

QueenHawlSera@sh.itjust.works · 2 pts · 335d (1 reply)

I am trying element, but I can't find the people there... I found Blahaj's thing doe

tatann@lemmy.world · 3 pts · 335d

I didn't try to find people on it, I only managed to convert my (real life) gamer friends

Converting my non-gamer friends will be hard, they're still on SMS/MMS or worse (Whatsapp)

Treczoks@lemmy.world · 3 pts · 334d

Oh, they did that? That's IMHO a thousand times worse than just getting hacked...

May they get beaten to pulp by privacy lawyers in court.

survirtual@lemmy.world · 1 pts · 334d (2 replies)

What features in Discord do you want in an alternative that would allow you to switch?

SpacetimeMachine@lemmy.world · 0 pts · 334d (1 reply)

For me, being able to be in a voice call with people and easily sharing my screen or camera is pretty much #1. And that's going to be hard for smaller services to compete with :/

survirtual@lemmy.world · 1 pts · 334d

It would not be hard. It just takes time and know-how.

djsoren19@lemmy.blahaj.zone · 26 pts · 335d (1 reply)

Wow really? The thing that everyone was warning the dumbass tech-illiterate politicians who pushed this bullshit law through would happen, happened? Wow I am just so incredibly shocked, who could have foreseen this coming, apart from everyone?

MotoAsh@piefed.social · 1 pts · 334d

They're doing it for control and to remove the anonymity of online accounts. The leaks are just the cost of doing business to them. Discord might not be saving every ID and associating it to the account name/etc, but the NSA/etc definitely is.

net00@lemmy.today · 15 pts · 335d
[ removed ]
TheAgeOfSuperboredom@lemmy.ca · 14 pts · 335d (5 replies)

I don't use Discord very much. Why do they have ID photos?

VonReposti@feddit.dk · 35 pts · 335d (1 reply)

Age verification. Why? Because some politicians have a boner for control.

devfuuu@lemmy.world · 3 pts · 335d

The boner is for something else, since they can't stop talking about the "children".

drrodneymckay_@sh.itjust.works · 16 pts · 335d

I think is is related to the new age verification systems. Everyone was saying this is a bad idea but governments are basically making it required for some of these services.

Voroxpete@sh.itjust.works · 6 pts · 335d

The UK - along with several US states - is enforcing a bunch of age verification bullshit to "protect the children." Not that the tech companies have pushed back on this in the slightest; they love that it let's them collect more data on users. But they couldn't get away with it if it wasn't a legal requirement.

kbal@fedia.io · 6 pts · 335d

They bought into the "age verification" scam.

Treczoks@lemmy.world · 13 pts · 334d

How surprising that a predictable (and predicted) thing happened!

Saledovil@sh.itjust.works · 12 pts · 334d

I thought those don't get saved? 🤔 I wonder why I never actually believed that?

redxef@feddit.org · 4 pts · 334d (1 reply)
[ removed ]
SoftestSapphic@lemmy.world · 4 pts · 334d

It's the UK users who didn't find a work around

henfredemars@infosec.pub · 4 pts · 335d

Well that doesn’t seem very secure. It’s almost like this is more about liability and regulation rather than actual security.

hypnicjerk@lemmy.world · 3 pts · 335d

hahahahahahahahahahahahahahahahahahahahahahahahahahahahaha

Marshezezz@lemmy.blahaj.zone · 2 pts · 335d
[ removed ]