Live data from Hacker News

Discord says 70k users may have had their government IDs leaked in breach

theverge.com

71–80 of 447 posts

Re: Discord says 70k users may have had their government IDs leaked in breach

#72
post #9

I don't know if I just became cynical and jaded, but is this really surprising to anyone in any way? Any time I give out my personal information to anyone for any reason, I basically treat it as 'any member of public can now access it'. Even if a service doesn't have it in their TOS that they sell it to 3rd parties, they might do it anyway, or there will, sooner or later, be a breach of their poorly secured system. T…

It’s surprising that it happened to a big name like Discord in this day and age. Huge data breaches of large tech companies are becoming increasingly rare as security in general is getting better.

i mean it's only every other week we see orgs like TCS handing out admin

Re: Discord says 70k users may have had their government IDs leaked in breach

#73

You've got to be a complete moron uploading your gov ID to discord

No need to blame the user for the companies actions. Company enacts policy enforced on them by law, for example requiring proof that a user is above the age of 18 to be able to use a channel where other users may use naughty words (The Horror!!!). User struggles to use the automated age check system (I used the "guess age by letting an AI have a look at a selfie" method and it was a pain in the ass which failed twice…

> User, relying on the published policy that Discord will delete ID directly after being used to to the age check [1] decides they wish to remain to have communication with their online friends uploads their ID.

This is the part where the user has to take at least partial blame. You have to be utterly stupid (or at the very least way too sheltered) to believe a statement like this from a company, especially when there are zero consequences to the company for lying about it or negligently failing to live up to their policy.

Re: Discord says 70k users may have had their government IDs leaked in breach

#74

When can people start going to jail for this kind of thing

Yes, good question: When can we start jailing CEOs and their employees for these blatant violations of the CPRA and GDPR?

Immediately if you move to China.

Re: Discord says 70k users may have had their government IDs leaked in breach

#75

Companies usually promise that the ID would be used only for validation and then immediately deleted. How so many IDs could leak then? They verify millions of IDs per month?

Lying is usually legal.

And even if lying is illegal in a particular context, it's de-facto legal since nobody ever gets punished for it.

Re: Discord says 70k users may have had their government IDs leaked in breach

#78
post #9

I don't know if I just became cynical and jaded, but is this really surprising to anyone in any way? Any time I give out my personal information to anyone for any reason, I basically treat it as 'any member of public can now access it'. Even if a service doesn't have it in their TOS that they sell it to 3rd parties, they might do it anyway, or there will, sooner or later, be a breach of their poorly secured system. T…

Also this is an issue with people willing to send important documents to some company with which they do not even have a written agreement.

I'm not willing, I just don't have a choice. The US should regulate it from the top down like Europe does

Re: Discord says 70k users may have had their government IDs leaked in breach

#79
post #75

Companies usually promise that the ID would be used only for validation and then immediately deleted. How so many IDs could leak then? They verify millions of IDs per month?

Lying is usually legal. And even if lying is illegal in a particular context, it's de-facto legal since nobody ever gets punished for it.

fraud is not legal. There's a difference between lying on the playground and fraud in a business setting.

Re: Discord says 70k users may have had their government IDs leaked in breach

#80
post #9

I don't know if I just became cynical and jaded, but is this really surprising to anyone in any way? Any time I give out my personal information to anyone for any reason, I basically treat it as 'any member of public can now access it'. Even if a service doesn't have it in their TOS that they sell it to 3rd parties, they might do it anyway, or there will, sooner or later, be a breach of their poorly secured system. T…

I told the 2 servers I hang in about a month ago that if I randomly disappear it’s because I can’t login without an ID and I’m simply not doing it/that they should consider the post my preemptive “goodbye.” I included where to contact me for those who want to. Frankly I think anyone on discord should do the same
Post reply on HN