Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Discord cuts ties with identity verification software, Persona

fortune.com

Post reply on HN
Print view View original

11–20 of 349 posts

Re: Discord cuts ties with identity verification software, Persona

#11

Post by alphawhisky »

squeefers wrote: post #9
ta9000 wrote: post #5

Too fucking late, eat shit Discord. We’re all moving to E2E encrypted platforms.

where we definitely will not be moaning about the same thing in 18 months time

Joke's on you, once I finish setting up my P2P tin can network I'll be invisible.

Re: Discord cuts ties with identity verification software, Persona

#13

Post by dgxyz »

ta9000 wrote: post #5

Too fucking late, eat shit Discord. We’re all moving to E2E encrypted platforms.

I just nuked it and didn’t replace it. Bloated piece of shit full of misery.

We decided to just meet up in person twice a month and play board games instead.

Re: Discord cuts ties with identity verification software, Persona

#14

Post by AlexandrB »

midtake wrote: post #10

> According to Discord, only a small number of users were part of this test, in which any information submitted could be stored for up to seven days before it would be deleted. Ah yes, we only store it for 7 days. During those 7 days, we pass it to Persona, and who knows how long they keep it!

Discord's previous statement:

> "Identity documents submitted to our vendor partners are deleted quickly— in most cases, immediately after age confirmation"

So now it's not "immediately" but 7 days? I don't know how anyone can trust any statement from these guys.

Re: Discord cuts ties with identity verification software, Persona

#17

Post by Macha »

jyscao wrote: post #4

So does this mean Discord is scrapping its new face verification requirement for users, or imply they’re no longer using this 3rd party service (Persona) to do it? The article wasn’t too clear on that.

K-id is the vendor they were proposing which did on device processing. They were trying to downplay the initiative by saying all the k-id data stayed on device.

This was undermined by the fact they were also trialling a switch to Persona (the vendor in the story), which did not uphold that guarantee. It was horrific optics to be reassuring people that it was ok because you didn’t save data but also be trialling a switch to a vendor which did save data, which I guess is a lot of the reason this vendor switch was cancelled. (Though it does call into question discord’s judgment that they thought this was a good idea).

Anyway, Persona was also breached which is how the government links were discovered and also probably a part of this decision. This is not to be confused with the breach in November of 5CA, _another_ vendor they used in the initial UK and Australia roll outs. The fact that two vendors were breached in four months is a good example of why this is a bad idea

Re: Discord cuts ties with identity verification software, Persona

#18

Post by robtherobber »

embedding-shape wrote: post #2

Ah man, just tried to submit this with the title "Discord cuts ties with Peter Thiel-backed SaaS once code tied to US spying found" which is slightly better I think, and fits exactly within 80 characters :) I think the whole "after its code was found tied to U.S. surveillance efforts" part is new and wasn't known before, so feels important to have in the title too. Although most of us probably assumed it was true bef…

That would have been a better title, I agree.

Re: Discord cuts ties with identity verification software, Persona

#19

Post by dunder_cat »

bri3d wrote: post #15

The referenced write-up based on the Persona front end code is here: https://vmfunc.re/blog/persona I definitely recommend reading this primary source before drawing conclusions about the code as most of the secondary reporting is quite low quality.

Seems to be down for me. https://web.archive.org/web/20260220192124/https://vmfunc.re...
Post reply on HN