Add three to six more zeros and these breaches will be taken seriously.
I take it you didn't read the article. The fine is low in part because discord cooperated and proactively complied with the regulator's orders before the fine was issued.
Discord fined €800k
21–30 of 45 posts
Re: Discord fined €800k
#22Possibly a better resource for those unable to access because of the paywall: https://www.cnil.fr/en/discord-inc-fined-800-000-euros
> At the time of the online investigation, when creating an account on DISCORD, a password of six characters including letters and numbers was accepted. > The restricted committee considered that DISCORD's password management policy was not sufficiently strong and restrictive to ensure the security of users' accounts. Ahh yes, finally, government-enforced password policies. They have lost their mind. > However, in Mi…
I don't think it's that unusual.
> Ahh yes, finally, government-enforced password policies. They have lost their mind.
Sure arguing over the password policy itself is somewhat silly however those shorter/lower complexity passwords are trivial to crack in the event of a data leak even when properly salted and hashed.
> And they have thoughts on UI design too!
This one makes perfect sense. The complaint is that you can close the window while in a call without any prompts. It's not that the UX is bad (IMHO it's very useful) but that it can lead to accidental leaks of information that could be trivially avoided with minor changes.
The solution to this is trivial. Prompt on close (but not minimise) when in a call to warn the user and provide a setting to hide this prompt.
Re: Discord fined €800k
#23Earlier quoted context omitted.
> At the time of the online investigation, when creating an account on DISCORD, a password of six characters including letters and numbers was accepted. > The restricted committee considered that DISCORD's password management policy was not sufficiently strong and restrictive to ensure the security of users' accounts. Ahh yes, finally, government-enforced password policies. They have lost their mind. > However, in Mi…
This is especially daft considering the vast majority of credit and debit card PINs are four or six numerical-only digits. At least the discord password could be alphanumeric plus symbols. Why is a Discord password being held to higher standards than a bank card PIN?
Because the bank card chip is irremediably blocked after three wrong tries, and you need to submit documentation to your bank to get a new PIN. I don't think discord forces users to reset their password via snail mail after three wrong tries.
Re: Discord fined €800k
#24Earlier quoted context omitted.
> At the time of the online investigation, when creating an account on DISCORD, a password of six characters including letters and numbers was accepted. > The restricted committee considered that DISCORD's password management policy was not sufficiently strong and restrictive to ensure the security of users' accounts. Ahh yes, finally, government-enforced password policies. They have lost their mind. > However, in Mi…
Getting fined for the the system tray behavior is a little much, that's how all chat apps have behaved going all the way back to at least AIM (and Trillian, Pidgin, etc) and I'm assuming before then as well, and its good UX that's why it's been copied for so long. I'm actually annoyed that WhatsApp desktop doesn't have this feature.
It's not specifically the close to tray issue:
> When a user logged into a voice room closes the DISCORD application window by clicking on the "X" icon at the top right of the window in Microsoft Windows, they actually just put the application in the background and stay logged into the voice room. However, in Microsoft Windows, clicking on the "X" at the top right of the last visible application window will exit the application for the vast majority of applications. > > DISCORD's behavior is different and may lead to users being heard by other members in the voice room when they thought they had left. The restricted committee considered that DISCORD should specifically inform users by making them aware that their words are still being transmitted and heard by others. > > However, as part of the procedure, DISCORD INC.set up a pop-up window to alert people connected to a voice room, when the window is closed for the first time, that the DISCORD application is still running and that this setting can be changed directly by the user.
Rather the issue was that you could close to tray while in a call without any prompt.
Re: Discord fined €800k
#25[deleted]
Re: Discord fined €800k
#26The complaints boil down to >Discord not deleting inactive accounts I personally don't want my old accounts to be deleted. Just because I don't sign on to a site that doesn't mean I want everything to be deleted. >Closing the Discord window doesn't quit the entire application and just closes the window This is normal behaviour of programs. In fact most macos programs work this way. Windows still shows Discord in the…
> I hate how foreign governments can trample over US products.
As if the US government never trampled over non-US companies. The US runs one of the most protectionist economies out there.
Re: Discord fined €800k
#27The complaints boil down to >Discord not deleting inactive accounts I personally don't want my old accounts to be deleted. Just because I don't sign on to a site that doesn't mean I want everything to be deleted. >Closing the Discord window doesn't quit the entire application and just closes the window This is normal behaviour of programs. In fact most macos programs work this way. Windows still shows Discord in the…
> This is normal behaviour of programs. In fact most macos programs work this way. Windows still shows Discord in the bottom right no people can access it if they need it even if they don't want a window for it.
Excuse me, it's the EU who determines what is normal and what is not. Not some decades old conventions.
Re: Discord fined €800k
#28>Compliance Week Sounds like a fun and entertaining publication.
Compliance Weak might be a good name for the El Reg version
Re: Discord fined €800k
#29The complaints boil down to >Discord not deleting inactive accounts I personally don't want my old accounts to be deleted. Just because I don't sign on to a site that doesn't mean I want everything to be deleted. >Closing the Discord window doesn't quit the entire application and just closes the window This is normal behaviour of programs. In fact most macos programs work this way. Windows still shows Discord in the…
Government going for the win over social media by levying fines. It's a bold move Cotton, let's see how it pays off. Surely government will save us from social media!
Re: Discord fined €800k
#30[deleted]