Live data from Hacker News

Discord says 70k users may have had their government IDs leaked in breach

theverge.com

401–410 of 447 posts

Re: Discord says 70k users may have had their government IDs leaked in breach

#401
post #266

Earlier quoted context omitted.

Sounds like a great use case for an automated ML cleanup/reporting feature. Maybe as a daemon as a bolt-on fix, or integrated as a feature into the support software itself.

Add in blockchain and we’ll be all set.

Yeah ok. Using a small purpose-built model to see if a picture has an ID in it to protect PII isn’t exactly a hype-driven “check out our brand new product — it’s exactly like our old product but with av useless chat bot” idea. You’re overcorrecting.

Re: Discord says 70k users may have had their government IDs leaked in breach

#402

Earlier quoted context omitted.

Not necessarily. In theory, the attestation that someone is of age can be provided by a central service. The central service does not need the website account information to provide a non-fungible certificate, that you show to your service that has no way of knowing who you are from the certificate. All it needs to ensure is the certificate is used only once per account. You can then prevent certificate forging by fo…

Either the certificate is the same every time and therefore it's an identifier. Or the certificate isn't the same every time and therefore you can generate a whole bunch of them and give them out for $2 apiece. Or the certificate isn't the same every time and also isn't anonymous so they can trace who's doing that. You don't have to reuse the same certificate for several requests. You can get a new one for every requ…

I address all of that in my comment? I'm not sure if you even read it at this point.

Re: Discord says 70k users may have had their government IDs leaked in breach

#403

You've got to be a complete moron uploading your gov ID to discord

It is specifically because you got banned for "being under 13" it comes from someone asking a question like "How many candles in this photo?" then you reply "7" then they edit the message to say "How old are you" and voila, underage ban. What you are overlooking is that Discord is the new MSN Messenger, YIM, etc your friends are not backed up in a meaningful way, nor the servers you're in, if you lose your account, y…

The issue then becomes "well why don't they just go back to a Teamspeak server? they can self host it!"

But we're forgetting there that the average person online is not a dev. The most they usually know is how to point and click on something. Which also means they usually don't know how to spin up a Linux machine/VM somewhere and install their own chat server.

Discord is popular because it lets almost anyone on Earth point and click to create a chat "server". If someone can figure out how to do that (eg cPanel), you can absolutely break their moat.

Re: Discord says 70k users may have had their government IDs leaked in breach

#404

Earlier quoted context omitted.

Whatever stereotypes you've read, about 0.01% of HNer's hold C-level jobs at huge tech companies, to be setting such policies. And even at modest-sized companies, those are decided by Legal Dept's and senior business managers. While you might find it cathartic, to angrily curse at some convenient Post Office employee for (say) the Postmaster General's latest postage stamp price increase - that is really not a classy…

So where do the people making those decision hang out so we can shame them

Shareholder meetings, if you're the right sort of wealthy or clever.

Or, maybe try https://en.wikipedia.org/wiki/World_Economic_Forum

BUT - the "shame them" is only from your PoV. They really don't share that. Nor care what you think.

Re: Discord says 70k users may have had their government IDs leaked in breach

#405

Earlier quoted context omitted.

It is specifically because you got banned for "being under 13" it comes from someone asking a question like "How many candles in this photo?" then you reply "7" then they edit the message to say "How old are you" and voila, underage ban. What you are overlooking is that Discord is the new MSN Messenger, YIM, etc your friends are not backed up in a meaningful way, nor the servers you're in, if you lose your account, y…

The issue then becomes "well why don't they just go back to a Teamspeak server? they can self host it!" But we're forgetting there that the average person online is not a dev. The most they usually know is how to point and click on something. Which also means they usually don't know how to spin up a Linux machine/VM somewhere and install their own chat server. Discord is popular because it lets almost anyone on Earth…

Which is kinda sad. Way back in the mid-2000s, I was playing World of Warcraft with a few people I had met in the game itself. Later on, we chipped in to rent a TeamSpeak server from a company that offered ready-made servers and we had a lot of fun. You didn’t even have to do much admin work. :(

Re: Discord says 70k users may have had their government IDs leaked in breach

#406

Earlier quoted context omitted.

Either the certificate is the same every time and therefore it's an identifier. Or the certificate isn't the same every time and therefore you can generate a whole bunch of them and give them out for $2 apiece. Or the certificate isn't the same every time and also isn't anonymous so they can trace who's doing that. You don't have to reuse the same certificate for several requests. You can get a new one for every requ…

I address all of that in my comment? I'm not sure if you even read it at this point.

No, you didn't?

Re: Discord says 70k users may have had their government IDs leaked in breach

#407
post #263
post #210

Earlier quoted context omitted.

> And the fact that the companies have to implement the system themselves is just crazy. Isn’t this how most industry regulations work? It’s not like the government provides designs to car companies to reduce emissions or improve crash safety.

Government does issue passports for identiftying their citizens when traveling. It is the one who made/enforces the law that requires that so it is the one who has to provide the means to do that. Or are you suggesting that anyone should be able to make their own passport? Or a bit closer example. If there was no official id cards/passports/etc (there currently is no official way of proving your age online) and the g…

I think you’re purposefully ignoring my point and misunderstanding the analogy.

Yes, there are things that the directly issues and provides. But the vast majority of regulations are like this one where it basically says “I don’t care how you do it, but you need to check the age of your customers.”

As another example, the government doesn’t make soap but it does mandate that restaurants have hand washing stations.

Re: Discord says 70k users may have had their government IDs leaked in breach

#408

Earlier quoted context omitted.

So where do the people making those decision hang out so we can shame them

Shareholder meetings, if you're the right sort of wealthy or clever. Or, maybe try https://en.wikipedia.org/wiki/World_Economic_Forum BUT - the "shame them" is only from your PoV. They really don't share that. Nor care what you think.

So let us just vent here

Re: Discord says 70k users may have had their government IDs leaked in breach

#409

The one approach that has never failed is to use a fake identity when signing up for online services. It is a violation of TOS but not a crime to do so. Only give your real information to the government. If companyX requires hard information but cannot protect this PII, then they don't deserve real data.

Relevant name.

How would you get around this verification though? Afaik this is nearly akin to KYC which is effective impossible to get around

Re: Discord says 70k users may have had their government IDs leaked in breach

#410
post #100

Earlier quoted context omitted.

Again: fraud is de facto legal. It is ubiquitous in every part of the business world, both internal and consumer-facing.

A more useful construct is that civil offenses are only a problem if someone is aware of, motivated, and able to afford to sue you over it. Businesses do a lot of arguably illegal things that are not likely to lead to an actual lawsuit.

They also require articulable and legally legible damages, and if you want to make it worth your time they have to be significant compared to the legal cost and in no significant way attributable to yourself.

A lot of things a laypersons would agree were damages just won't fly in civil court and even when there is damage it's limited by factors like what actions you could have taken to mitigate (but may not have).

Post reply on HN