5 ms·

You've got to be a complete moron uploading your gov ID to discord

giancarlostoro 1y ago
It is specifically because you got banned for "being under 13" it comes from someone asking a question like "How many candles in this photo?" then you reply "7" then they edit the message to say "How old are you" and voila, underage ban. What you are overlooking is that Discord is the new MSN Messenger, YIM, etc your friends are not backed up in a meaningful way, nor the servers you're in, if you lose your account, you lose contact with basically your entire internet life and friends. Discord should not keep those IDs longer than a month at a time once the user is unbanned it should be deleted a week later, or removed from that panel altogether.
- ternera 1y ago
  This hits the nail on the head. The big issue here is that the submitted photos were not deleted and that is quite concerning to me.
  - giancarlostoro 1y ago
    This should be a warning to anyone providing function in any way similar to what Discord is doing. Do not keep PII longer than you legally have to. Don't have to keep it at all? Delete it. Leave a redacted record such as "Image verified by x, removed on x after unban" or something simple if you must. Remove PII from ticketing systems especially on a platform like Discord where users want to be private by design.
- Culonavirus 1y ago
  You can come up with all kinds of excuses, but Discord is not, and NEVER WAS a trustworthy company. > You've got to be a complete moron uploading your gov ID to discord ^ Still stands.
  - giancarlostoro 1y ago
    I'm not making excuses for companies retaining PII longer than they should. I'm simply stating why someone might give their ID. Another reason is to verify yourself as a bot developer, though supposedly that is usually done via an entirely different third party.
  - BriggyDwiggs42 1y ago
    People’s priorities don’t match yours man. It doesn’t make them stupid.
    - x3n0ph3n3 1y ago
      Sometimes it does.
      - beefnugs 1y ago
        nah they would only be classified stupid, if there was real consequences
- BeFlatXIII 1y ago
  Ah, the classic shoe size prank.
- dabockster 1y ago
  The issue then becomes "well why don't they just go back to a Teamspeak server? they can self host it!" But we're forgetting there that the average person online is not a dev. The most they usually know is how to point and click on something. Which also means they usually don't know how to spin up a Linux machine/VM somewhere and install their own chat server. Discord is popular because it lets almost anyone on Earth point and click to create a chat "server". If someone can figure out how to do that (eg cPanel), you can absolutely break their moat.
  - SunlitCat 1y ago
    Which is kinda sad. Way back in the mid-2000s, I was playing World of Warcraft with a few people I had met in the game itself. Later on, we chipped in to rent a TeamSpeak server from a company that offered ready-made servers and we had a lot of fun. You didn’t even have to do much admin work. :(
    - giancarlostoro 1y ago
      You still don't have to do much these services still exist, even for Mumble. Their limitation is scaling. So if you want way more than just a handful of people, you either start charging everyone an entrance fee, or you cap the server.
      - dabockster 1y ago
        Discord's limitation is scaling as well, to be honest. It's incredibly hard to follow a server full of tens of thousands of people. Just because something can scale in a technical sense doesn't mean it will scale in a human one.
        giancarlostoro 1y ago
        I'm in such servers, people pick channels, and also slowmode is a key factor to stop people spamming too quickly. VC is also drastically quieter on average, but can be fun too.
Nathanba 1y ago
At this point a whole bunch of crypto exchanges including chinese ones have my driver's license, passport and more. It is what it is, any real KYC process will require video identification anyway.
Crosseye_Jack 1y ago
No need to blame the user for the companies actions. Company enacts policy enforced on them by law, for example requiring proof that a user is above the age of 18 to be able to use a channel where other users may use naughty words (The Horror!!!). User struggles to use the automated age check system (I used the "guess age by letting an AI have a look at a selfie" method and it was a pain in the ass which failed twice before it finally worked) so does what is recommended and make a support ticket. [0] User, relying on the published policy that Discord will delete ID directly after being used to to the age check [1] decides they wish to remain to have communication with their online friends uploads their ID. Discord then fail to honour their end of the deal by deleting their users documents after use, and then get breached. Full blame is on Discord for poorly handling their users data by their 3rd parties, and on the Governments forcing such practices. Discord should have their asses handed to them by the UK's ICO. Sure, us geeks can and will use self hosted systems and find ways to avoid doing ID checks, but your avg joe isn't going to do that. Hopefully cases like this will help with the push back on governments mandating these kind of checks, but I see the UK government just falling back to "think of the children" and laying all the blame on Discord, (who are not without fault in this case). [0] https://support.discord.com/hc/en-us/articles/30326565624343-How-to-Complete-Age-Verification-on-Discord#h_01K0FV5XA6N17WJ23RRMFJMCNX https://support.discord.com/hc/en-us/articles/30326565624343... [1] https://support.discord.com/hc/en-us/articles/30326565624343-How-to-Complete-Age-Verification-on-Discord#h_01K0FVFWCZ5VY3BDA2FK9HKAMX https://support.discord.com/hc/en-us/articles/30326565624343...
- ryandrake 1y ago
  > User, relying on the published policy that Discord will delete ID directly after being used to to the age check [1] decides they wish to remain to have communication with their online friends uploads their ID. This is the part where the user has to take at least partial blame. You have to be utterly stupid (or at the very least way too sheltered) to believe a statement like this from a company, especially when there are zero consequences to the company for lying about it or negligently failing to live up to their policy.
  - Crosseye_Jack 1y ago
axus 1y ago
A bunch of UK users are blocked from the more "free speech" (over 13) channels unless they prove their identity to Discord, to comply with the Online Safety Act.
- Podrod 1y ago
  It's channels marked NSFW that you need verification for and it's also incredibly easy to bypass with a VPN.
  - BeFlatXIII 1y ago
    I know of a bunch of small servers that unmarked all their porn channels from the NSFW flag so their British members could access them freely.
- drawfloat 1y ago
  This applies to all users and isn’t related to OSA (though that will probably make leaks like this more likely).
crossroadsguy 1y ago
What would you say of a lot of FOSS companies/orgs who love to stay on places like Discord? Hell, some entities that pride themselves on "privacy" and "E2EE" shit are specifically on Discord. I think that must go beyond moronity.
sph 1y ago
Are you seriously blaming kids and teenagers (who spend their free time on Discord) because they are not smart enough to know better and form communities elsewhere? You can do better than victim blame, and instead point the finger at Discord and whoever told the British government that delegating ID control to third-parties was a good idea.
- deleted 1y ago
  [deleted]
- jMyles 1y ago
  ...or point the finger at ourselves, for not creating a more decentralized and secure place for our kids to hang out online.

It is specifically because you got banned for "being under 13" it comes from someone asking a question like "How many candles in this photo?" then you reply "7" then they edit the message to say "How old are you" and voila, underage ban. What you are overlooking is that Discord is the new MSN Messenger, YIM, etc your friends are not backed up in a meaningful way, nor the servers you're in, if you lose your account, you lose contact with basically your entire internet life and friends. Discord should not keep those IDs longer than a month at a time once the user is unbanned it should be deleted a week later, or removed from that panel altogether.

ternera 1y ago
This hits the nail on the head. The big issue here is that the submitted photos were not deleted and that is quite concerning to me.
- giancarlostoro 1y ago
  This should be a warning to anyone providing function in any way similar to what Discord is doing. Do not keep PII longer than you legally have to. Don't have to keep it at all? Delete it. Leave a redacted record such as "Image verified by x, removed on x after unban" or something simple if you must. Remove PII from ticketing systems especially on a platform like Discord where users want to be private by design.
Culonavirus 1y ago
You can come up with all kinds of excuses, but Discord is not, and NEVER WAS a trustworthy company. > You've got to be a complete moron uploading your gov ID to discord ^ Still stands.
- giancarlostoro 1y ago
  I'm not making excuses for companies retaining PII longer than they should. I'm simply stating why someone might give their ID. Another reason is to verify yourself as a bot developer, though supposedly that is usually done via an entirely different third party.
- BriggyDwiggs42 1y ago
  People’s priorities don’t match yours man. It doesn’t make them stupid.
  - x3n0ph3n3 1y ago
    Sometimes it does.
    - beefnugs 1y ago
      nah they would only be classified stupid, if there was real consequences
BeFlatXIII 1y ago
Ah, the classic shoe size prank.
dabockster 1y ago
The issue then becomes "well why don't they just go back to a Teamspeak server? they can self host it!" But we're forgetting there that the average person online is not a dev. The most they usually know is how to point and click on something. Which also means they usually don't know how to spin up a Linux machine/VM somewhere and install their own chat server. Discord is popular because it lets almost anyone on Earth point and click to create a chat "server". If someone can figure out how to do that (eg cPanel), you can absolutely break their moat.
- SunlitCat 1y ago
  Which is kinda sad. Way back in the mid-2000s, I was playing World of Warcraft with a few people I had met in the game itself. Later on, we chipped in to rent a TeamSpeak server from a company that offered ready-made servers and we had a lot of fun. You didn’t even have to do much admin work. :(
  - giancarlostoro 1y ago
    You still don't have to do much these services still exist, even for Mumble. Their limitation is scaling. So if you want way more than just a handful of people, you either start charging everyone an entrance fee, or you cap the server.
    - dabockster 1y ago
      Discord's limitation is scaling as well, to be honest. It's incredibly hard to follow a server full of tens of thousands of people. Just because something can scale in a technical sense doesn't mean it will scale in a human one.
      - giancarlostoro 1y ago
        I'm in such servers, people pick channels, and also slowmode is a key factor to stop people spamming too quickly. VC is also drastically quieter on average, but can be fun too.

Nathanba 1y ago

At this point a whole bunch of crypto exchanges including chinese ones have my driver's license, passport and more. It is what it is, any real KYC process will require video identification anyway.

Crosseye_Jack 1y ago

No need to blame the user for the companies actions. Company enacts policy enforced on them by law, for example requiring proof that a user is above the age of 18 to be able to use a channel where other users may use naughty words (The Horror!!!). User struggles to use the automated age check system (I used the "guess age by letting an AI have a look at a selfie" method and it was a pain in the ass which failed twice before it finally worked) so does what is recommended and make a support ticket. [0] User, relying on the published policy that Discord will delete ID directly after being used to to the age check [1] decides they wish to remain to have communication with their online friends uploads their ID. Discord then fail to honour their end of the deal by deleting their users documents after use, and then get breached. Full blame is on Discord for poorly handling their users data by their 3rd parties, and on the Governments forcing such practices. Discord should have their asses handed to them by the UK's ICO. Sure, us geeks can and will use self hosted systems and find ways to avoid doing ID checks, but your avg joe isn't going to do that. Hopefully cases like this will help with the push back on governments mandating these kind of checks, but I see the UK government just falling back to "think of the children" and laying all the blame on Discord, (who are not without fault in this case). [0] https://support.discord.com/hc/en-us/articles/30326565624343-How-to-Complete-Age-Verification-on-Discord#h_01K0FV5XA6N17WJ23RRMFJMCNX https://support.discord.com/hc/en-us/articles/30326565624343... [1] https://support.discord.com/hc/en-us/articles/30326565624343-How-to-Complete-Age-Verification-on-Discord#h_01K0FVFWCZ5VY3BDA2FK9HKAMX https://support.discord.com/hc/en-us/articles/30326565624343...

ryandrake 1y ago
> User, relying on the published policy that Discord will delete ID directly after being used to to the age check [1] decides they wish to remain to have communication with their online friends uploads their ID. This is the part where the user has to take at least partial blame. You have to be utterly stupid (or at the very least way too sheltered) to believe a statement like this from a company, especially when there are zero consequences to the company for lying about it or negligently failing to live up to their policy.
- Crosseye_Jack 1y ago

axus 1y ago

A bunch of UK users are blocked from the more "free speech" (over 13) channels unless they prove their identity to Discord, to comply with the Online Safety Act.

Podrod 1y ago
It's channels marked NSFW that you need verification for and it's also incredibly easy to bypass with a VPN.
- BeFlatXIII 1y ago
  I know of a bunch of small servers that unmarked all their porn channels from the NSFW flag so their British members could access them freely.
drawfloat 1y ago
This applies to all users and isn’t related to OSA (though that will probably make leaks like this more likely).

crossroadsguy 1y ago

What would you say of a lot of FOSS companies/orgs who love to stay on places like Discord? Hell, some entities that pride themselves on "privacy" and "E2EE" shit are specifically on Discord. I think that must go beyond moronity.

sph 1y ago

Are you seriously blaming kids and teenagers (who spend their free time on Discord) because they are not smart enough to know better and form communities elsewhere? You can do better than victim blame, and instead point the finger at Discord and whoever told the British government that delegating ID control to third-parties was a good idea.

deleted 1y ago
[deleted]
jMyles 1y ago
...or point the finger at ourselves, for not creating a more decentralized and secure place for our kids to hang out online.