Lol I thought they were supposed to delete the ID images once confirmed
Official statement from Discord: “Oopse woopse we did a fucky wucky. Sue us hahaha you won’t”
No, that can’t be right. Forced use of photo ID for age verification couldn’t possibly lead to leakage of said IDs. The purity police assured us!
Sigh
I knew this was gonna happen
Candidly, I did not expect it so soon.
I am honestly surprised it took this long for a company to get hacked(surprised it was discord though).
I really wish there was a good competitor to Discord. I have not found one that has the same screen sharing feature. Revolt (now Stoat) gets close but lacks the screen sharing - something me and my friends use a lot. They are adding this soon so hopefully it is good
Revolt (Stoat?) is alright, but good luck getting people to join there lol, Discord is the only thing people are willing to join
Matrix, XMPP, GNU-Jami & SimpleX
Now more than ever people will have to choose between privacy and comfort. And not to be a dick, but now more than ever, people choosing comfort are fucking over people who choose privacy.
Matrix or Jitsi with Lemmy or any popular forum software would be my suggestion. More secure and private but require some technical knowledge.
Matrix is an absolutely pale imitation of Discord.
Yes it is very upsetting that the most popular chat platform in the Western world is in league with Sauron, but Matrix as a replacement is a glorified ICQ client that regularly yells at you that your device is untrusted now and there’s no hope of fixing it, you loser.
Yeah Matrix is horrible, I don’t think it will ever catch on
Do people really have to scan an ID to us Discord?
When I use the linux or web client it asks for a selfie with my ID card when I try to enter a server.
Works fine on Android.
Contacted support, they say my account is not flagged as underage but I have to submit the photo anyway. I told them i won’t.
No. According to an article the IDs were from people who were challenging an age determination. Still bullshit, but you don’t need ID to use Discord as a general rule.
The unauthorized party also accessed a “small number” of images of government IDs from “users who had appealed an age determination.”
Small is, of course, a relative term. I would consider a small number to be 2 or 3. They may feel that 10,000 users is a small number. Who can say?
as a very minimum, it would make sense to demand safe-deleting the photo immediately after the verification process, with fucking prison time to someone if it is found they did not comply with that.
but that is clearly not the direction the society is going 🤷♂️
Apparently if they get flagged as underage when they aren’t.
Yet another example of how requiring ID is a shit idea.
It’s used by some Discord communities to prevent spam/bots. This would be inconjunction with other measures like how some communities require a verified email or to have a phone number associated with your account.
While those exist, those wouldn’t have been affected by this breach (or if they were it was only incidentally) - those communities are not using Discord’s age verification but are doing it through DMs (or a 3rd party service). Discord communities do not have access to age or ID verification tools, nor do they have the ability to impose restrictions based off age or ID verification (yet, there is rumored to be an age-verification access restriction beta going out, but it apparently doesnt use ID)
Called it.
More people need to use matrix and xmpp instead!
