Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Discord fined €800k

cnil.fr

Post reply on HN
Print view View original

41–45 of 45 posts

Re: Discord fined €800k

#41

Post by YuPro »

CuriousCosmic wrote: post #22
stefan_ wrote: post #8

Earlier quoted context omitted.

> At the time of the online investigation, when creating an account on DISCORD, a password of six characters including letters and numbers was accepted. > The restricted committee considered that DISCORD's password management policy was not sufficiently strong and restrictive to ensure the security of users' accounts. Ahh yes, finally, government-enforced password policies. They have lost their mind. > However, in Mi…

I don't think it's that unusual. > Ahh yes, finally, government-enforced password policies. They have lost their mind. Sure arguing over the password policy itself is somewhat silly however those shorter/lower complexity passwords are trivial to crack in the event of a data leak even when properly salted and hashed. > And they have thoughts on UI design too! This one makes perfect sense. The complaint is that you can…

Prompt on close is very bad solution in terms of UX. For example, I never click minimize in Discord because I hate non-tray apps if I need them in background. I dislike Obsidian for that because I can't even use RBTray without enabling native window frame which is worse than standard.

And because of habit to have minimize-to-tray on [x] I would also dislike moving that option to [_] and reserve [x] to exit. I know I will just press it because of habit and close my active chat with app. And discord is not fast app to load on my PC.

But technically it will be best solution if they want to comply with the requirements of officials. Or maybe already implemented one-time prompt is enough for them.

Re: Discord fined €800k

#42

Post by charcircuit »

ohbtvz wrote: post #26
charcircuit wrote: post #19

The complaints boil down to >Discord not deleting inactive accounts I personally don't want my old accounts to be deleted. Just because I don't sign on to a site that doesn't mean I want everything to be deleted. >Closing the Discord window doesn't quit the entire application and just closes the window This is normal behaviour of programs. In fact most macos programs work this way. Windows still shows Discord in the…

> I hate how foreign governments can trample over US products. As if the US government never trampled over non-US companies. The US runs one of the most protectionist economies out there.

I don't approve of that either.

Re: Discord fined €800k

#43

Post by CuriousCosmic »

YuPro wrote: post #41
CuriousCosmic wrote: post #22

Earlier quoted context omitted.

I don't think it's that unusual. > Ahh yes, finally, government-enforced password policies. They have lost their mind. Sure arguing over the password policy itself is somewhat silly however those shorter/lower complexity passwords are trivial to crack in the event of a data leak even when properly salted and hashed. > And they have thoughts on UI design too! This one makes perfect sense. The complaint is that you can…

Prompt on close is very bad solution in terms of UX. For example, I never click minimize in Discord because I hate non-tray apps if I need them in background. I dislike Obsidian for that because I can't even use RBTray without enabling native window frame which is worse than standard. And because of habit to have minimize-to-tray on [x] I would also dislike moving that option to [_] and reserve [x] to exit. I know I…

It's only a bad solution if it's not disable-able and it happens in all cases (rather than only when the user is still in a call).

Ideally it's a warning that you can disable. With safety/privacy it's generally preferable to have warnings as the default and allow users to take the trainer wheels off rather than risk a new user exposing themself accidentally.

Re: Discord fined €800k

#44

Post by CuriousCosmic »

CuriousCosmic wrote: post #24
devman0 wrote: post #17

Earlier quoted context omitted.

Getting fined for the the system tray behavior is a little much, that's how all chat apps have behaved going all the way back to at least AIM (and Trillian, Pidgin, etc) and I'm assuming before then as well, and its good UX that's why it's been copied for so long. I'm actually annoyed that WhatsApp desktop doesn't have this feature.

It's not specifically the close to tray issue: > When a user logged into a voice room closes the DISCORD application window by clicking on the "X" icon at the top right of the window in Microsoft Windows, they actually just put the application in the background and stay logged into the voice room. However, in Microsoft Windows, clicking on the "X" at the top right of the last visible application window will exit the…

Too late to edit this now but it appears I fumbled the quote so here it is again properly formatted.

When a user logged into a voice room closes the DISCORD application window by clicking on the "X" icon at the top right of the window in Microsoft Windows, they actually just put the application in the background and stay logged into the voice room. However, in Microsoft Windows, clicking on the "X" at the top right of the last visible application window will exit the application for the vast majority of applications.

DISCORD's behavior is different and may lead to users being heard by other members in the voice room when they thought they had left. The restricted committee considered that DISCORD should specifically inform users by making them aware that their words are still being transmitted and heard by others.

However, as part of the procedure, DISCORD INC.set up a pop-up window to alert people connected to a voice room, when the window is closed for the first time, that the DISCORD application is still running and that this setting can be changed directly by the user.

Re: Discord fined €800k

#45

Post by YuPro »

CuriousCosmic wrote: post #43
YuPro wrote: post #41

Earlier quoted context omitted.

Prompt on close is very bad solution in terms of UX. For example, I never click minimize in Discord because I hate non-tray apps if I need them in background. I dislike Obsidian for that because I can't even use RBTray without enabling native window frame which is worse than standard. And because of habit to have minimize-to-tray on [x] I would also dislike moving that option to [_] and reserve [x] to exit. I know I…

It's only a bad solution if it's not disable-able and it happens in all cases (rather than only when the user is still in a call). Ideally it's a warning that you can disable. With safety/privacy it's generally preferable to have warnings as the default and allow users to take the trainer wheels off rather than risk a new user exposing themself accidentally.

Yes, that would work too and quite good practice. But not sure if I like that it's push from officials anyway, especially when I see that's adjacent to other "breaches" in that document.
Post reply on HN