When can people start going to jail for this kind of thing
After a revolution
Discord says 70k users may have had their government IDs leaked in breach
61–70 of 447 posts
Re: Discord says 70k users may have had their government IDs leaked in breach
#62I didn't feel comfortable giving discord my phone number when they demanded it, so I lost access to the open source communities that insist on collaborating there. I wish breaches like this would cause people to reconsider their choices but sadly, it's unlikely most users will move.
I also wish open-source communities would move off of Discord for another reason: Users are limited to joining a maximum of 100 servers.
I've hit the cap and it's driving me crazy. It's really easy to hit it since each friend group, hobby group, gaming community, and open-source community often all have their own servers.
Re: Discord says 70k users may have had their government IDs leaked in breach
#63Companies usually promise that the ID would be used only for validation and then immediately deleted. How so many IDs could leak then? They verify millions of IDs per month?
Do they actually say in the TOS that they will delete them? If they do, do they say immediately? How immediately? Right away or, perhaps, 1 month? Unless specified in contractual documentation, words like "immediately" or "soon" do not have any single definition, which allows them to stretch it without technically being in breach of contract. Not to mention that often times, governments mandate data retention for so-and-so amount of time, so the companies are legally required in such cases to keep the data even if they, miraculously, desire not to.
Re: Discord says 70k users may have had their government IDs leaked in breach
#64Earlier quoted context omitted.
> Discord may have leaked sensitive personal information about 70,000 users -- including (but not necessarily limited to) government IDs, names, usernames, email addresses, last 4 digits of SSN, and IP addresses. Credit card numbers are not SSNs, and I can't fathom why Discord would have the latter (I certainly never gave them any government ID either). Not to mention, "last 4 digits" of a credit card number will com…
Age verification is "scan your government ID or give us a detailed video of your face from various angles, open and close your mouth" etc. Not sure which is better to give out in a breach
I think it's less a case of which is better and more of which is less bad...
Re: Discord says 70k users may have had their government IDs leaked in breach
#65Earlier quoted context omitted.
I am in dozens of servers and have not encountered this demand for a phone number. I have been in servers that required it for moderators as part of 2FA, and I just declined to moderate there. It had no effect on my use of any other server.
Just because something hasn't happened to you, doesn't mean it doesn't happen to other people
[dead]
Re: Discord says 70k users may have had their government IDs leaked in breach
#66Asking this out of curiosity: is it a requirement, that such data is being stored once the verification process is completed?
That is the bonkers thing about this story. Why take on the liability? Get what you need and toss the responsibility. If you must store it (which seems unlikely) put that extra-bad-if-leaked information behind a separate append only service for which read is heavily restricted.
Because it's free training data and great for building profiles on users so you can make money showing them targeted ads
Re: Discord says 70k users may have had their government IDs leaked in breach
#67Re: Discord says 70k users may have had their government IDs leaked in breach
#68Wait already? I was hoping to hear about it next year. Maybe it’s a good thing that it happened early so they can fix?
Re: Discord says 70k users may have had their government IDs leaked in breach
#69Earlier quoted context omitted.
That is the bonkers thing about this story. Why take on the liability? Get what you need and toss the responsibility. If you must store it (which seems unlikely) put that extra-bad-if-leaked information behind a separate append only service for which read is heavily restricted.
Because there is no liability. If they were fined $10k per leaked ID, then there is a serious liability there. Right now, they publish a press release, go 'oopsie poopsie', maybe have to pay for some anit-fraud things from equifax if someone asks, and call it day.
> Right now, they publish a press release, go 'oopsie poopsie', maybe have to pay for some anit-fraud things from equifax if someone asks, and call it day.
Don't forget the usual Press Release starting with "At [Company], we take security very seriously..."
Re: Discord says 70k users may have had their government IDs leaked in breach
#70You've got to be a complete moron uploading your gov ID to discord
It is specifically because you got banned for "being under 13" it comes from someone asking a question like "How many candles in this photo?" then you reply "7" then they edit the message to say "How old are you" and voila, underage ban. What you are overlooking is that Discord is the new MSN Messenger, YIM, etc your friends are not backed up in a meaningful way, nor the servers you're in, if you lose your account, y…
You can come up with all kinds of excuses, but Discord is not, and NEVER WAS a trustworthy company.
> You've got to be a complete moron uploading your gov ID to discord
^ Still stands.