Oh no! Anyway software engineers are not real engineers so nobody will be held accountable.
Discord says 70k users may have had their government IDs leaked in breach
81–90 of 447 posts
Re: Discord says 70k users may have had their government IDs leaked in breach
#82Companies usually promise that the ID would be used only for validation and then immediately deleted. How so many IDs could leak then? They verify millions of IDs per month?
deleted = database column
Re: Discord says 70k users may have had their government IDs leaked in breach
#83I don't know if I just became cynical and jaded, but is this really surprising to anyone in any way? Any time I give out my personal information to anyone for any reason, I basically treat it as 'any member of public can now access it'. Even if a service doesn't have it in their TOS that they sell it to 3rd parties, they might do it anyway, or there will, sooner or later, be a breach of their poorly secured system. T…
For years, I resisted TSA Pre check on principle, even though I was a frequent traveler. I finally relented when I realized there were places like Thailand that force you to give your biometrics, and almost certainly sell them back to shadowy US agencies.
They might not be competent enough
https://www.scmp.com/week-asia/politics/article/3300568/thai...
Re: Discord says 70k users may have had their government IDs leaked in breach
#84Earlier quoted context omitted.
Also this is an issue with people willing to send important documents to some company with which they do not even have a written agreement.
I'm not willing, I just don't have a choice. The US should regulate it from the top down like Europe does
[deleted]
Re: Discord says 70k users may have had their government IDs leaked in breach
#85Bring back IRC.
Re: Discord says 70k users may have had their government IDs leaked in breach
#86Companies usually promise that the ID would be used only for validation and then immediately deleted. How so many IDs could leak then? They verify millions of IDs per month?
The Discord message (in Australia at least) specifically says:
The information you provide is only used to confirm your age group, then it's deleted
Refer screenshot: https://www.reddit.com/r/discordapp/comments/1nkrxcp/discord...
I can still swipe the message away, so I haven't done it yet. I'm going to work out how I can fake the face scan. I ain't sending Government ID to some chat app (no matter how big or small) that's over the top.
As an aside, I would have thought the age groups should be: 13 to 18, and 18+. They're the only ones that materially matter to the reason this check exists, in Australia at least. I don't want to contribute to their demographic analysis.
Re: Discord says 70k users may have had their government IDs leaked in breach
#87Earlier quoted context omitted.
Also this is an issue with people willing to send important documents to some company with which they do not even have a written agreement.
I'm not willing, I just don't have a choice. The US should regulate it from the top down like Europe does
Not sure what you mean by "like europe" because in Europe they are trying to implement `European Digital Identity (EUDI)` for age verification, which will make stuff like this even worse ....
Re: Discord says 70k users may have had their government IDs leaked in breach
#88Asking this out of curiosity: is it a requirement, that such data is being stored once the verification process is completed?
That is the bonkers thing about this story. Why take on the liability? Get what you need and toss the responsibility. If you must store it (which seems unlikely) put that extra-bad-if-leaked information behind a separate append only service for which read is heavily restricted.
The data is valuable to sell or train ai on. You can use that data to train ai hr people or whatever
Re: Discord says 70k users may have had their government IDs leaked in breach
#89Companies usually promise that the ID would be used only for validation and then immediately deleted. How so many IDs could leak then? They verify millions of IDs per month?
From the previous[1] statement:
The unauthorized party also accessed a “small number” of images of government IDs from “users who had appealed an age determination.”
It makes sense they have to hang on to the ID in case of processing an appeal, which probably doesn't have the highest priority and hence stretches out in time.
[1]: https://www.theverge.com/news/792032/discord-customer-servic...
Re: Discord says 70k users may have had their government IDs leaked in breach
#90I didn't feel comfortable giving discord my phone number when they demanded it, so I lost access to the open source communities that insist on collaborating there. I wish breaches like this would cause people to reconsider their choices but sadly, it's unlikely most users will move.
I also wish open-source communities would move off of Discord for another reason: Users are limited to joining a maximum of 100 servers. I've hit the cap and it's driving me crazy. It's really easy to hit it since each friend group, hobby group, gaming community, and open-source community often all have their own servers.
I can barely keep up with 6 semi active discord servers, each with tens of semi active channels... Much less think about doing it with hundreds. More power to you, must have figured out a good notification scheme