> The hacker claims an outsourced worker was compromised through a $500 bribe
Also interesting:
> The hacker claims government IDs were just sitting there for months or even years... I have spoken to people familiar with Discord's Age Verification system, and they said after some period of time Discord will delete (the copies of IDs), but they should be deleting them the second they're done
Source (pinned comment, and 7m20s respectively): https://www.youtube.com/watch?v=NnuyT8FgSpA
Like this would actually stop any politician from pushing actively malicious legislation just because their kid doesn't love them and it's all the damn phone's fault.
Related : https://www.youtube.com/watch?v=NnuyT8FgSpA
The hacker contacted some well known youtuber that talks about discord, they provided contents of support tickets of the YouTuber to prove they were really the hacker
It's only the beginning, right ?
I already bought a vps in turkey and installed a vpn on it, cost 10€ a year but it's a small price to pay to not have his ID stolen.
I don't understand. Weren't we told that these age checks are "privacy-preserving"? So why was there anything for hackers to steal? Or do they mean "privacy-preserving" only against other random users of a service, but not against the service itself, the corporation running it, it's subsidiaries and parent conglomerate, their "trusted partners", the process of legal discovery if that corporation ever gets sued, legal subpoena by the police and intelligence agencies of every jurisdiction that conglomerate conducts business in, local councils [1], every government agency you can think of including ambulance service providers [2], and of course data breaches?
"Privacy."
[1] https://www.ibtimes.co.uk/british-councils-used-ripa-conduct...
[2] https://en.wikipedia.org/wiki/Investigatory_Powers_Act_2016#...
I'm grateful for the timing.
Anyone with insight into this kind of thing know if it’s reasonable to doubt Discord’s claims about what the hackers have? I can see motives for both parties to stretch the truth in opposite directions. But maybe there’s some legal risk for Discord to lie about what was compromised, in the event they get found out?
I don’t understand why we need age verification in Discord. Why should people who play games have to prove they’re old enough to talk to others? It’s not like anyone ever forced anybody else to join your Discord community, it’s all opt in!
If parents don’t want their kids playing certain games, or if a community is more adult in nature, then don’t buy those games for them. If they don’t want their kids exposed to bad influences, they can move the computer into a shared space or—better yet—just engage with their kids on a human level. That’s called parenting.
Politicians shouldn’t be meddling in this kind of personal interaction. It didn’t work when Nancy Reagan or Tipper Gore tried to police music, and it’s not working now. Modern authoritarians are just running the same tired playbook.
Age verification doesn’t make kids safer. It adds bureaucracy, harvests private data, and pretends to solve a problem that only families can actually fix. The result is more surveillance, less trust, and the illusion of protection.
[dead]
The thing that everybody expected to happen, happened. At least the kids are safe.
Why were these images not encrypted, and why were they retained for longer than was necessary?