The Bard's Lemmy
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Nemeski@mander.xyz to Cybersecurity@sh.itjust.worksEnglish · 3 months ago

ID photos of 70,000 users may have been leaked, Discord says

www.bbc.com

external-link
message-square
27
link
fedilink
161
external-link

ID photos of 70,000 users may have been leaked, Discord says

www.bbc.com

Nemeski@mander.xyz to Cybersecurity@sh.itjust.worksEnglish · 3 months ago
message-square
27
link
fedilink
The platform says hackers targeted a firm that helped to verify the ages of its users.
alert-triangle
You must log in or # to comment.
  • floofloof@lemmy.ca
    link
    fedilink
    English
    arrow-up
    49
    ·
    3 months ago

    From Discord’s age verification page, under “Privacy and Data Security”:

    Q: Is my data stored when I use Face Scan or Scan ID verification?

    A: Discord and k-ID do not permanently store personal identity documents or your video selfies. The image of your identity document and the ID face match selfie are deleted directly after your age group is confirmed, and the video selfie used for facial age estimation never leaves your device.

    https://support.discord.com/hc/en-us/articles/30326565624343-How-to-Complete-Age-Verification-on-Discord

    https://archive.is/FBqo5

    So is that a lie?

    • vollkorntomate@infosec.pub
      link
      fedilink
      English
      arrow-up
      21
      ·
      3 months ago

      I wonder if they could face legal consequences for this

      • devfuuu@lemmy.world
        link
        fedilink
        English
        arrow-up
        23
        ·
        3 months ago

        Companies suffer no consequences and nobody goes to jail for destroying real people’s lifes. It’s how businesses work. Do it and apologize later motto or something like that. At best some small fine.

    • Jo Miran@lemmy.ml
      link
      fedilink
      English
      arrow-up
      11
      ·
      3 months ago

      So is that a lie?

      It always was and it will always be. Data is the real commodity and Discord had no intention of wasting it when they could profit from it. This applies to ALL “free” products offered by corporations. You are and have always been the product.

    • OwlPaste@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 months ago

      is this not from the stolen support tickets? some of which were related to id verification? 70k users is a very low number for discord.

  • QueenHawlSera@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    23
    ·
    3 months ago

    They lied then They said they weren’t saving the pics, deleting them when verification was done.

    I wish there was a Discord alternative

    • RiceBowl@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      6
      ·
      3 months ago

      Revolt is an option. But it needs people and communities.

      • Victoria@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        4
        ·
        3 months ago

        it’s now named Stoat https://stoat.chat/updates/long-live-stoat

        • RiceBowl@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 months ago

          Oh thanks I didn’t see this about the rebrand.

        • /home/pineapplelover@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 months ago

          That’s stupid

    • moopet@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      5
      ·
      3 months ago

      ** slips a note under your door that reads, “IRC” **

      • QueenHawlSera@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        3
        ·
        3 months ago

        IRC died, over six years ago

    • tatann@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      3 months ago

      If you want to just text-chat and/or voice-chat with some friends, Element(Matrix) works well

      But if you’re a gamer looking for bigger communities, I don’t know one

      • QueenHawlSera@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 months ago

        I am trying element, but I can’t find the people there… I found Blahaj’s thing doe

        • tatann@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          3 months ago

          I didn’t try to find people on it, I only managed to convert my (real life) gamer friends

          Converting my non-gamer friends will be hard, they’re still on SMS/MMS or worse (Whatsapp)

    • Treczoks@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 months ago

      Oh, they did that? That’s IMHO a thousand times worse than just getting hacked…

      May they get beaten to pulp by privacy lawyers in court.

  • djsoren19@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    17
    ·
    3 months ago

    Wow really? The thing that everyone was warning the dumbass tech-illiterate politicians who pushed this bullshit law through would happen, happened? Wow I am just so incredibly shocked, who could have foreseen this coming, apart from everyone?

  • Treczoks@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    3 months ago

    How surprising that a predictable (and predicted) thing happened!

  • TheAgeOfSuperboredom@lemmy.ca
    link
    fedilink
    English
    arrow-up
    7
    ·
    3 months ago

    I don’t use Discord very much. Why do they have ID photos?

    • drrodneymckay_@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      8
      ·
      3 months ago

      I think is is related to the new age verification systems. Everyone was saying this is a bad idea but governments are basically making it required for some of these services.

    • Voroxpete@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 months ago

      The UK - along with several US states - is enforcing a bunch of age verification bullshit to “protect the children.” Not that the tech companies have pushed back on this in the slightest; they love that it let’s them collect more data on users. But they couldn’t get away with it if it wasn’t a legal requirement.

  • Saledovil@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    6
    ·
    3 months ago

    I thought those don’t get saved? 🤔 I wonder why I never actually believed that?

  • hypnicjerk@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    3 months ago

    hahahahahahahahahahahahahahahahahahahahahahahahahahahahaha

  • henfredemars@infosec.pub
    link
    fedilink
    English
    arrow-up
    3
    ·
    3 months ago

    Well that doesn’t seem very secure. It’s almost like this is more about liability and regulation rather than actual security.

  • Marshezezz@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    2
    ·
    3 months ago

    lol didn’t take long

Cybersecurity@sh.itjust.works

cybersecurity@sh.itjust.works

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersecurity@sh.itjust.works

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

  • Be respectful. Everyone should feel welcome here.
  • No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
  • No Ads / Spamming.
  • No pornography.

Community Rules

  • Idk, keep it semi-professional?
  • Nothing illegal. We’re all ethical here.
  • Rules will be added/redefined as necessary.

If you ask someone to hack your “friends” socials you’re just going to get banned so don’t do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 23 users / day
  • 226 users / week
  • 753 users / month
  • 2.22K users / 6 months
  • 1 local subscriber
  • 8.96K subscribers
  • 3.74K Posts
  • 3.11K Comments
  • Modlog
  • mods:
  • Kid@sh.itjust.works
  • Lanky_Pomegranate530@midwest.social
  • BE: 0.19.14
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org