Live data from Hacker News

Discord says 70k users may have had their government IDs leaked in breach

theverge.com

11–20 of 447 posts

Re: Discord says 70k users may have had their government IDs leaked in breach

#12

Asking this out of curiosity: is it a requirement, that such data is being stored once the verification process is completed?

Requirement by who? Discord isn't required to demand your ID, let alone store it.

It's required in the UK to access non-child friendly content: https://support.discord.com/hc/en-us/articles/33362401287959...

Re: Discord says 70k users may have had their government IDs leaked in breach

#15
I didn't feel comfortable giving discord my phone number when they demanded it, so I lost access to the open source communities that insist on collaborating there.

I wish breaches like this would cause people to reconsider their choices but sadly, it's unlikely most users will move.

Re: Discord says 70k users may have had their government IDs leaked in breach

#16

I didn't feel comfortable giving discord my phone number when they demanded it, so I lost access to the open source communities that insist on collaborating there. I wish breaches like this would cause people to reconsider their choices but sadly, it's unlikely most users will move.

The issue is if you don't enforce the phone number requirement on your server you get all the trolls who don't use phone numbered accounts. I wish Discord would allow you to restrict known VPNs instead of requiring phone numbers. It would solve so many issues. I know a LOT of VPNs wont be caught, but if you block MOST non-residential IP blocks, you'll capture a lot of them.

Re: Discord says 70k users may have had their government IDs leaked in breach

#17

You've got to be a complete moron uploading your gov ID to discord

It is specifically because you got banned for "being under 13" it comes from someone asking a question like "How many candles in this photo?" then you reply "7" then they edit the message to say "How old are you" and voila, underage ban.

What you are overlooking is that Discord is the new MSN Messenger, YIM, etc your friends are not backed up in a meaningful way, nor the servers you're in, if you lose your account, you lose contact with basically your entire internet life and friends.

Discord should not keep those IDs longer than a month at a time once the user is unbanned it should be deleted a week later, or removed from that panel altogether.

Re: Discord says 70k users may have had their government IDs leaked in breach

#19
post #5

Asking this out of curiosity: is it a requirement, that such data is being stored once the verification process is completed?

Just a guess, but they may store the original ID card to audit duplicate accounts. If their machine learning models, think that two people are the exact same, having the original image, especially a photo of the same ID card could confirm that.

There are image processing methods for hashing people's faces. They don't have to store the actual photo to do that.
Post reply on HN