599
top 50 comments
sorted by: hot top controversial new old
[-] drspawndisaster@sh.itjust.works 13 points 18 hours ago

That fast, huh?

[-] daggermoon@lemmy.world 29 points 1 day ago

Crazy, that thing I said would happen finally happened.

[-] WhyJiffie@sh.itjust.works 2 points 23 hours ago

didn't take too long either

[-] echo@lemmy.tf 29 points 1 day ago

Ah yes, another reason not to give me ID to these tech companies. Anyone that demands my ID online can go fuck themselves while I find a replacement service.

[-] fmstrat@lemmy.nowsci.com 22 points 1 day ago

Best part:

The unauthorized party gained access to “information from a limited number of users who had contacted Discord through our Customer Support and/or Trust & Safety teams”

[-] Die4Ever@retrolemmy.com 123 points 1 day ago

Lol I thought they were supposed to delete the ID images once confirmed

[-] Tollana1234567@lemmy.today 70 points 1 day ago

"Haha, and you believed us" -Discord

[-] Brewchin@lemmy.world 27 points 1 day ago

FTA: The IDs leaked were from people appealing age verification.

That's different from the age verification process, which goes through a third party provider.

In short, the leaked IDs were from a standard shitty support platform (Zendesk, Salesforce, etc), not the much-advertised "safe and private" age verification system.

[-] jasoman@lemmy.world 38 points 1 day ago

But the ai training lol

[-] kbobabob@lemmy.dbzer0.com 17 points 1 day ago

Very first question in FAQ:

Q: Does Discord or k-ID keep my selfie data?

A: Discord only logs the k-ID age verification results used to unlock your account—it doesn’t save your selfie image. For questions about k-ID’s processes, please contact k-ID.

So they are going to blame someone else.

[-] redwattlebird@lemmings.world 6 points 1 day ago

I tried getting my friends to move to any other chat client but the thing that keeps them on discord is the screen share. Like it or not, this feature is what's locking people in as a one stop shop game streaming chat.

[-] notgold@aussie.zone 1 points 2 hours ago

Signal app on pc can screen share. I share with mates all the time through it

[-] WhyJiffie@sh.itjust.works 3 points 23 hours ago* (last edited 23 hours ago)

did you ever use jitsi? its not a chat platform, but one for video calls. it supports screen sharing and its very good. it works standalone, there are public instances

matrix used to use jitsi for group calls. I don't know what does it use now as a transition to an in house service has been in the works for a few years now, and element call just now starts to get mature enough, but I'm almost sure you can do screen sharing right now too. but try to check how usable it is before you try to get your friends to use it. if it doesn't work well, they may not accept your advice (as easily) in the future to switch chat providers

[-] redwattlebird@lemmings.world 4 points 23 hours ago

Absolutely! I brought it into another group for corporate stuff and it was great. We also used it over COVID lockdown for games with another group of friends.

I'll do more research on Matrix and see if i can set something up for a truly seamless transition. Thanks for the suggestion!

[-] frustrated_phagocytosis@fedia.io 309 points 1 day ago

No, that can't be right. Forced use of photo ID for age verification couldn't possibly lead to leakage of said IDs. The purity police assured us!

[-] KelvarCherry 45 points 1 day ago

think of the children!!!!!! :< :< :< :< :<

[-] cley_faye@lemmy.world 30 points 1 day ago

Coincidentally an alarming lot of people that impose pure bullshit on us seems to think of the children a tad too much.

[-] WhyJiffie@sh.itjust.works 2 points 23 hours ago

stop thinking about anything else but the children!!

[-] WhyJiffie@sh.itjust.works 2 points 23 hours ago

stop thinking about anything else but the children!!

[-] FatTony@lemmy.world 11 points 1 day ago

I know right! Now we got their IDs too! :D

/s

load more comments (1 replies)
[-] Broken@lemmy.ml 16 points 1 day ago

My take on this is a little more fundamental than the whole ID/age thing. We all knew this would happen, and why? Because nobody has addressed the first problem. Security is only as strong as the weakest link, and companies are not transparent with customers.

Companies spell out in their Terms and Privacy statements that they have Affiliates that data gets shared with. And they want you to accept them all blindly, without clarifying who they are and what they do.

Even here, with a reported breach, they are not naming them and just calling them "third party". So they screwed up and many people have their information and IDs out in the wild because if them, but we don't even get to know who they are?

His are we to trust a company of we don't know who they're in bed with? How are we to rate their security and assess our risk of using their service without all the information?

As far as I can tell Discord handled it pretty well as far as breaches go. But maybe if I know they are using a shit company as one of their vendors I might think twice about using them.

Its the same logic as the next article in my feed, where crunchyroll is getting pushback from the subtitle service they are using. And that's not even their own security in mind. People make choices based on what companies do, so be transparent with it all and we will have the warm fuzzies if things match up. If they don't then the company gets customer feedback so they can adjust.

[-] sol6_vi@lemmy.makearmy.io 32 points 1 day ago

I wish I could convince my giant discord community to go anywhere else. It's so fucking hard. I've built IRC networks and a matrix server. I host every fediverse app imaginable. I hate being attached to this company and my income being reliant on it.

[-] njordomir@lemmy.world 2 points 20 hours ago

I hear you. I used to teach classes in a particular field and most people followed our updates and events on Facebook. I tried for years to change that and pry people loose from the Zuck. Mostly unsuccessfully. I agree with the other user who suggested bridging protocols. Bridge them then incentivise use of the good one and/or disincentivise use of the evil one to naturally encourage people to migrate.

[-] sol6_vi@lemmy.makearmy.io 1 points 18 hours ago

Indeed, seems the only path forward. Thansk for sharing.

[-] Dran_Arcana@lemmy.world 18 points 1 day ago

Back in the day when our community was switching from xmpp to discord, our solution was to write a bot on either end that relayed messages from one to the other. The xmpp bot got more and more naggy over time until eventually we put the xmpp side in read-only for everyone except the relay bot. It did a good enough job at building momentum to switch that the final holdouts came over when we went r/o.

You might consider building something similar if you want to make a genuine effort to switch to matrix or IRC. A relay bot solves the problem of the first people being punished by virtue of being first.

load more comments (1 replies)
[-] fluffykittycat@slrpnk.net 127 points 1 day ago

I knew this was gonna happen

[-] FatTony@lemmy.world 13 points 1 day ago* (last edited 1 day ago)

And you didn't tell Discord??

load more comments (2 replies)
[-] psx_crab@lemmy.zip 19 points 1 day ago

One of Discord’s third-party customer service providers was compromised by an “unauthorized party,” the company says.

So, not Discord but a 3rd party company that handle Discord's customer service, and if you didn't use their customer service then you're not affected.

[-] masterofn001@lemmy.ca 9 points 23 hours ago

So, Discord - by forcing your acceptance of their tos which renders them immune from damages done by "third parties*

By offloading a term of service that Discord requires you to provide.

If they force you to give the info, they are responsible for handling and storing it properly, no matter what some evil lawyer or exec says.

If laws make bad things legal because rich people can use words, then there needs to be some form of redress to return the spirit of the laws to the people.

Maybe we all make usernames with a legally binding personal ToS that is deemed agreed upon by the corporation accepting the username.

This is just a shell game and they are conmen.

[-] HertzDentalBar 3 points 1 day ago

Moral of the story, never ask for help.

load more comments (1 replies)
load more comments (1 replies)
[-] Somecall_metim@lemmy.dbzer0.com 21 points 1 day ago

I am jack's complete lack of surprise

[-] prex@aussie.zone 32 points 1 day ago
[-] abbiistabbii 16 points 1 day ago

Can someone please send this to Keir Starmer with the subject like "Look what you did".

[-] MonkderVierte@lemmy.zip 19 points 1 day ago

So they kept the images illegally, hm?

[-] CheesyFox@lemmy.sdf.org 18 points 1 day ago

*gasp*

surprisedpikachu.jpeg

[-] HexesofVexes@lemmy.world 26 points 1 day ago

This was kind of breach so predictable even surprisedpikachu.txt isn't enough, but it must be done.

⢀⣠⣾⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀⠀⠀⠀⣠⣤⣶⣶ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀⠀⠀⢰⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣧⣀⣀⣾⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⡏⠉⠛⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⣿ ⣿⣿⣿⣿⣿⣿⠀⠀⠀⠈⠛⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠿⠛⠉⠁⠀⣿ ⣿⣿⣿⣿⣿⣿⣧⡀⠀⠀⠀⠀⠙⠿⠿⠿⠻⠿⠿⠟⠿⠛⠉⠀⠀⠀⠀⠀⣸⣿ ⣿⣿⣿⣿⣿⣿⣿⣷⣄⠀⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⠏⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠠⣴⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⡟⠀⠀⢰⣹⡆⠀⠀⠀⠀⠀⠀⣭⣷⠀⠀⠀⠸⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⠃⠀⠀⠈⠉⠀⠀⠤⠄⠀⠀⠀⠉⠁⠀⠀⠀⠀⢿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⢾⣿⣷⠀⠀⠀⠀⡠⠤⢄⠀⠀⠀⠠⣿⣿⣷⠀⢸⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⡀⠉⠀⠀⠀⠀⠀⢄⠀⢀⠀⠀⠀⠀⠉⠉⠁⠀⠀⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣧⠀⠀⠀⠀⠀⠀⠀⠈⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢹⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢸⣿⣿

load more comments (2 replies)
[-] Blackmist@feddit.uk 17 points 1 day ago

Update photos set deleted=1 where id=553468863

[-] AfricanExpansionist@lemmy.ml 50 points 1 day ago

Do people really have to scan an ID to us Discord?

[-] Manjushri@piefed.social 60 points 1 day ago

No. According to an article the IDs were from people who were challenging an age determination. Still bullshit, but you don't need ID to use Discord as a general rule.

The unauthorized party also accessed a “small number” of images of government IDs from “users who had appealed an age determination.”

Small is, of course, a relative term. I would consider a small number to be 2 or 3. They may feel that 10,000 users is a small number. Who can say?

[-] 14th_cylon@lemmy.zip 41 points 1 day ago

as a very minimum, it would make sense to demand safe-deleting the photo immediately after the verification process, with fucking prison time to someone if it is found they did not comply with that.

but that is clearly not the direction the society is going 🤷‍♂️

load more comments (1 replies)
[-] pathief@lemmy.world 19 points 1 day ago* (last edited 1 day ago)

When I use the linux or web client it asks for a selfie with my ID card when I try to enter a server.

Works fine on Android.

Contacted support, they say my account is not flagged as underage but I have to submit the photo anyway. I told them i won't.

[-] beejjorgensen@lemmy.sdf.org 41 points 1 day ago

Apparently if they get flagged as underage when they aren't.

Yet another example of how requiring ID is a shit idea.

load more comments (4 replies)
[-] rando@sh.itjust.works 29 points 1 day ago

I really wish there was a good competitor to Discord. I have not found one that has the same screen sharing feature. Revolt (now Stoat) gets close but lacks the screen sharing - something me and my friends use a lot. They are adding this soon so hopefully it is good

[-] ISOmorph@feddit.org 27 points 1 day ago* (last edited 1 day ago)

Now more than ever people will have to choose between privacy and comfort. And not to be a dick, but now more than ever, people choosing comfort are fucking over people who choose privacy.

load more comments (1 replies)
load more comments (17 replies)
[-] SoupBrick@pawb.social 36 points 1 day ago
[-] KelvarCherry 11 points 1 day ago

And the "Tea" app leak happened right before these age-verification rules started popping up everywhere. It's obvious cause and effect, but it was also demonstrated RIGHT before.

Don't put your hand on a hot stove, especially after watching someone burn their hand on that hot stove.

load more comments (1 replies)
load more comments
view more: next ›
this post was submitted on 04 Oct 2025
599 points (100.0% liked)

Technology

75792 readers
1740 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS