Live data from Hacker News

Discord will require a face scan or ID for full access next month

theverge.com

551–560 of 1001 posts

Re: Discord will require a face scan or ID for full access next month

#551

I'm biased, as I lead the Zulip project. But I think this is a reasonable place for me to post some thoughts. Given current events in the USA, I can't emphasize enough how worried one should be about the fact that a few companies like Discord, Google (Gmail), and Meta have databases with access to the private conversations of hundreds of millions of people with their closest friends and family members, linked up with…

How does Zulip compare to Campfire and Stoat (and other FOSS) efforts? How is onboarding for non-tech people?

Onboarding has a thread going here: https://news.ycombinator.com/item?id=46951401.

My understanding is that Campfire hasn't been actively developed for ~10 years (https://once.com/campfire/changelog shows some minor fixes after the OSS launch; their GitHub has no 2026 commits). There are no mobile apps. It is not an actively maintained Discord alternative.

Stoat is early in development. For example, https://github.com/stoatchat/stoatchat has 1421 commits, compared with 68K for https://github.com/zulip/zulip/. I wish them luck! It's really important that we have multiple independent efforts.

https://www.rocket.chat/ and https://mattermost.com/ are open-core military contractors these days. You'll see what I mean if you visit their websites. But like Zulip, they are full-featured team chat systems, and if the parts of their system that are OSS work for your organization, they're certainly valid options.

Finally there is Matrix/Element. They have an inspiring vision and similar values to mine, and I'd recommend checking it out. Element/Matrix is built on an ambitious distributed consensus protocol with an E2EE option, which provides capabilities Zulip don't have but also adds complexity. Zulip is focused on just doing team chat really well, and does not support more than ~100K users in an instance. Hopefully will have a lot more resources now, thanks to Current Events. I wish the Element team the very best of luck!

----------------------------------------

Overall, Zulip's focus has always been on making a delightful chat experience, especially when you have multiple conversations happening at the same time. We aren't trying to build a clone, but instead the best possible experience for having lots of possibly complex conversations. So there will be some differences from what you're used to.

But critically, we spend a very large amount of our time relentlessly fixing micro-interactions that annoy us or are reported to us. If you read #design, #issues, and #feedback in https://zulip.com/development-community/, you'll get an idea of how we work.

So while there's some features we don't have that are present in other products, and we don't have dozens of designers on staff to do cool end-of-year animated reports like Discord does, you can expect few bugs and a lot of interaction design polish.

-----------------------------------------

The one mistake that I think a lot of folks make in evaluating options is focusing on buzzwords like E2EE without thinking through their threat model. E2EE doesn't add much practical security over self-hosting for many threat models, and it comes with significant usability trade-offs. And some current E2EE systems don't actually protect against a malicious server, say because they only protect message content, not metadata like who has access to what... just against raiding the server's disk.

(For example, WhatsApp has E2EE for message content, but I expect Meta's databases know everyone who's had a conversation with me on WhatsApp and the precise timestamps and approximate lengths of every message I've sent or received on the platform. And apparently some keyboard apps send what you're typing to remote servers!).

Re: Discord will require a face scan or ID for full access next month

#552

When will it be normalized to be able to say "Parents should just be doing their job" before we decide to ruin everything online for everyone else. Although I know it's not really about protecting the kids. I wonder if the politicians are exempt from this too as they were chat control. > The scanning would apply to all EU citizens, except EU politicians. They might exempt themselves from the law under “professional s…

> When will it be normalized to be able to say "Parents should just be doing their job" you can say this, but it is not enforced, so this part of discussion is not really productive.

The UK/US haven't even spent widely on internet addiction education or built widescale programs like they did for drugs or even speech therapy. Jumping immediately to banning and gatekeeping everything on the internet is silly and naive. The world won't be a better place because we fear other kids parenting skills, it will be highly locked down and these ID checks/bans will hit every part of the internet.

Re: Discord will require a face scan or ID for full access next month

#553
This won't stop at Discord. Banning websites/apps and ID gating is going to be everywhere in a decade.

Protect the kids puritanism is on max level right now, throw in some future terrorist attack or political issues that scare people enough like they fear TikTok and the internet will be fully controlled.

Re: Discord will require a face scan or ID for full access next month

#554
I'll hardly miss using Discord, but if this isn't going to be a wake-up call to ALL (mainly) open-source projects using it, then we're all doomed.

We should seriously go back to mailing lists and IRC as a standard for OSS. Everything else should be viewed as disposable.

Re: Discord will require a face scan or ID for full access next month

#555

I'm biased, as I lead the Zulip project. But I think this is a reasonable place for me to post some thoughts. Given current events in the USA, I can't emphasize enough how worried one should be about the fact that a few companies like Discord, Google (Gmail), and Meta have databases with access to the private conversations of hundreds of millions of people with their closest friends and family members, linked up with…

This is great to hear and ironically we (Pidgin) just decided that Zulip was going to be the next protocol we were going to add support for just barely 24 hours ago before all this Discord nonsense! https://discourse.imfreedom.org/t/protocols-to-support/234/1...

Awesome, feel free to start a thread in #integrations in chat.zulip.org! We'd be happy to chat about some of the things that will make your life easier to do carefully when writing a new client.

The main thing regards our double-entry API changelog system. Basically, the API documentation for individual endpoints, say https://zulip.com/api/get-user, natively cover for each endpoint all the changes relevant for that endpoint from https://zulip.com/api/changelog... and how to write nice code using feature level checks to support all server versions.

Re: Discord will require a face scan or ID for full access next month

#556
Really really surprised there isn't more discussion about the background inference service that's mentioned in passing here. If you thought Electron/wrapped web apps were a performance problem, I can't imagine the weight of _also_ running a local AI model that's constantly playing Guess My Age.

Re: Discord will require a face scan or ID for full access next month

#557

I'm biased, as I lead the Zulip project. But I think this is a reasonable place for me to post some thoughts. Given current events in the USA, I can't emphasize enough how worried one should be about the fact that a few companies like Discord, Google (Gmail), and Meta have databases with access to the private conversations of hundreds of millions of people with their closest friends and family members, linked up with…

I'm asking because I hate Matrix and actually want you to convince me: why should I accept the risk of migrating my friend group from Discord to Zulip, which has already "broken the seal" of restricting features behind a monthly fee even for self-hosted users, when I could migrate us to Matrix instead? Matrix seems like the much less risky option. I see that you have a "community" tier that's free and doesn't restric…

Mobile push notifications are a special case because it's literally not technically possible to self-host them. Or rather, it's possible if you build the iOS and Android apps from source and distribute them through TestFlight or an analogous Android channel, but it's not possible for the developer of an App Store or Play Store app to allow its users to point it at a different push-notification server, because the public key has to be hardcoded in the app binary. So if you want your self-hosted Zulip server to work with the Zulip client apps in the App Store and Play Store, you have to use Zulip's push server, and there's nothing Zulip can do to fix that.

Matrix works analogously; if you use the Element app from the App Store or Play Store, then you're using Element's push notification server, even if your Matrix homeserver is self-hosted. It's possible that Element allows their server to be used gratis in situations where Zulip charges a fee, I don't know their policies or anything, but in principle Matrix still leaves you exactly as dependent on a third party's goodwill unless you make your friends install a privately distributed mobile app.

Zulip IIUC does not restrict self-hosting of any feature that's technically possible to self-host.

Re: Discord will require a face scan or ID for full access next month

#558
Please do not fall of the deceptive language that is used here. They're calling this "teen experience".

This is not about "i see gentila we ban". They're very vague about what is obscene, sticking to that level of a consistent definition, and they're very heavy handed in punishing.

They're introducing a highly restricted experience unless you hand over your details to either a "technology" (which that's very unclear about how honest they're being) or a company that has been caught for leaking sensitive details.

Re: Discord will require a face scan or ID for full access next month

#559
As an ethical conundrum, this one is clear. The safety of women and children online (human trafficking, r*pe and child abuse networks openly coordinate at industrial scale on Discord, Roblox and Telegram) trumps the concerns of a relatively small group of Richard Stallman-level purity obsessives. Good move on Discord's part; hopefully Roblox and Telegram shape up and follow suit. If you don't understand the severity of the current situation in 2026, Google the group "764."

Re: Discord will require a face scan or ID for full access next month

#560
post #528

I'm biased, as I lead the Zulip project. But I think this is a reasonable place for me to post some thoughts. Given current events in the USA, I can't emphasize enough how worried one should be about the fact that a few companies like Discord, Google (Gmail), and Meta have databases with access to the private conversations of hundreds of millions of people with their closest friends and family members, linked up with…

Hey, just wanted to say that I am a happy Zulip customer. I used it at my previous employer and after a month of hangringing from people- many did not desire to go back to what we had before. (though some people did say they wanted Slack for the emojis and “prettiness”). Now I started in a new position and I’ve positioned Zulip (on prem) as the only viable solution since we’re shirking SaaS as a strategic move. The p…

Thanks so much for sharing the story!
Post reply on HN