27 ms·

Also this is an issue with people willing to send important documents to some company with which they do not even have a written agreement.

fourside 1y ago
A big problem is that the Silicon Valley playbook drives companies like Discord to be winner take all. It’s hard to avoid using them, but then they require that give up sensitive documents. I shouldn’t have to choose between keeping sensitive documents private and being able to participate in most gaming communities. Some open source projects have also starting adopting Discord to manage their communities.
- robinsonb5 1y ago
  > Some open source projects have also starting adopting Discord to manage their communities. And I've chosen not to engage with more than one such community because I'm not perpared even to give Discord my phone number, let alone any kind of ID document. Luckily there's nothing on Discord I care about that much, so I'm not having to make too difficult a choice. I totally get why most people won't take such a stand.
01HNNWZ0MV43FF 1y ago
I'm not willing, I just don't have a choice. The US should regulate it from the top down like Europe does
- deleted 1y ago
  [deleted]
- SamDc73 1y ago
  Not sure what you mean by "like europe" because in Europe they are trying to implement `European Digital Identity (EUDI)` for age verification, which will make stuff like this even worse ....
  - throwaway473825 1y ago
    On the contrary, third parties will only get to know the age of the users, not their identities.
    - SamDc73 1y ago
      “Linkability is especially problematic because untrusted entities, such as attribute providers and relying parties acting together, can correlate and link auxiliary information to the same user, thereby breaching privacy and enabling tracking, profiling, or de-anonymisation.” [1] That’s assuming EUDI never gets breached — but if Google and every major tech company has been, it’s only a matter of time, but this will have way more personal info .... I've been using discord for 5 years and never upload my ID … And I don't want discord (or any other company) to know my age, or any other identification ... [1] https://www.wi.uni-muenster.de/news/5104-new-publication-privacy-aspects-european-digital-identity-wallets-internet-policy-review https://www.wi.uni-muenster.de/news/5104-new-publication-pri...
      - gambiting 1y ago
        For sure, but with the EU system you'd just give discord an expiring certificate that proves you're over 18. They can leak that all they want, it's worthless otherwise. Right now you have to upload your actual ID which is obviously extremely dangerous if leaked. So yes, even though there are obvious problems that you mentioned, the EU implementation is better.
        SamDc73 1y ago
        I mean leaked from the EUDI side. > the EU implementation is better. It's better than the current implementation, sure, but you can never beat zero identifiers
        gambiting 1y ago
        Again, for sure and I agree with you - but we're talking about institutions that already have our IDs in some form or another, so just asking them to issue a certificate that says "yeah this user is actually over 18" seems like a no brainer functionality on top of an existing system. Like obviously our government office has a copy of my passport and ID card, but if those leak then we have a much bigger problem as a country.

fourside 1y ago

A big problem is that the Silicon Valley playbook drives companies like Discord to be winner take all. It’s hard to avoid using them, but then they require that give up sensitive documents. I shouldn’t have to choose between keeping sensitive documents private and being able to participate in most gaming communities. Some open source projects have also starting adopting Discord to manage their communities.

robinsonb5 1y ago
> Some open source projects have also starting adopting Discord to manage their communities. And I've chosen not to engage with more than one such community because I'm not perpared even to give Discord my phone number, let alone any kind of ID document. Luckily there's nothing on Discord I care about that much, so I'm not having to make too difficult a choice. I totally get why most people won't take such a stand.

01HNNWZ0MV43FF 1y ago

I'm not willing, I just don't have a choice. The US should regulate it from the top down like Europe does

deleted 1y ago
[deleted]
SamDc73 1y ago
Not sure what you mean by "like europe" because in Europe they are trying to implement `European Digital Identity (EUDI)` for age verification, which will make stuff like this even worse ....
- throwaway473825 1y ago
  On the contrary, third parties will only get to know the age of the users, not their identities.
  - SamDc73 1y ago
    “Linkability is especially problematic because untrusted entities, such as attribute providers and relying parties acting together, can correlate and link auxiliary information to the same user, thereby breaching privacy and enabling tracking, profiling, or de-anonymisation.” [1] That’s assuming EUDI never gets breached — but if Google and every major tech company has been, it’s only a matter of time, but this will have way more personal info .... I've been using discord for 5 years and never upload my ID … And I don't want discord (or any other company) to know my age, or any other identification ... [1] https://www.wi.uni-muenster.de/news/5104-new-publication-privacy-aspects-european-digital-identity-wallets-internet-policy-review https://www.wi.uni-muenster.de/news/5104-new-publication-pri...
    - gambiting 1y ago
      For sure, but with the EU system you'd just give discord an expiring certificate that proves you're over 18. They can leak that all they want, it's worthless otherwise. Right now you have to upload your actual ID which is obviously extremely dangerous if leaked. So yes, even though there are obvious problems that you mentioned, the EU implementation is better.
      - SamDc73 1y ago
        I mean leaked from the EUDI side. > the EU implementation is better. It's better than the current implementation, sure, but you can never beat zero identifiers
        gambiting 1y ago
        Again, for sure and I agree with you - but we're talking about institutions that already have our IDs in some form or another, so just asking them to issue a certificate that says "yeah this user is actually over 18" seems like a no brainer functionality on top of an existing system. Like obviously our government office has a copy of my passport and ID card, but if those leak then we have a much bigger problem as a country.