discussion If discord requires you to prove your age will you stop using it?

[Marodot]

That's what they say. I'm sure the verification works, but whether it's as anonymous as advertised...

The sentence "anonymous ID verification" is a logical fallacy. How do you verify someone's ID without knowing their ID? That's right, you don't. Someone or something needs to crossreference to a known source of truth. So, at best, it's a method that "forgets" it has done the ID verification after it's done. But even if it is AI, it is still possible to lift recent "deleted" results of its drives...if it isn't just stored anyway and they are lying.

Yes, that service would need to store your identity. And yes you'd need to put some trust in that service. Don't get me wrong, I'd rather not have to do any of that but at least Discord itself wouldn't get to know my identity.

 

[EggHeadedMan]

It fully depends on how they go about it. If its invasive or if its secure. I may not agree with the company and decide not to use it. to much nuance and questions no one can answer for me to answer in the definitive for now.

 

[Paradigminant]

Already deleted the account when they announced it. And they seem to have folded to that pressure.... for now. Gotta teach the bastards when you get the chance.

 

[plebpig7843]

This isn't unique to discord. I'm not uploading my ID for any fucking service. Only a matter of time before that shit leaks.

 

[exlurker]

I'm not doing any id on anything I don't want everyone to know.

 

[CubbyBuddy]

That's what they say. I'm sure the verification works, but whether it's as anonymous as advertised...

The sentence "anonymous ID verification" is a logical fallacy. How do you verify someone's ID without knowing their ID? That's right, you don't. Someone or something needs to crossreference to a known source of truth. So, at best, it's a method that "forgets" it has done the ID verification after it's done. But even if it is AI, it is still possible to lift recent "deleted" results of its drives...if it isn't just stored anyway and they are lying.

The idea is that services themselves cannot access the ID, it can only query an API that returns a binary "yes/no" and possibly a cryptographic hash that confirms that the ID belongs to a real person and contains accurate information (I haven't looked at the implementation). An example is my terrible case of baby face caused me to get carded at a casino during my Vegas trip last weekend. All they do is eye the DoB and the photo to make sure I'm over 21 and who I claim I am, nothing is scanned and stored in a database. This is the idea of the API, just seeing if the person is who they claim to be (which can be done in plenty of ways that don't involve PII when it comes to digital ID) and that they are of age. The problem isn't other websites, just the ID service itself getting compromised, which is already being proven possible.

 

[kamikazejihad]

If it require my id yeah no thanks

 

[Barmaley]

Maybe I should show them the numbers on the back of the credit card?

 

[slide4accsff]

The idea is that services themselves cannot access the ID, it can only query an API that returns a binary "yes/no" and possibly a cryptographic hash that confirms that the ID belongs to a real person and contains accurate information (I haven't looked at the implementation). An example is my terrible case of baby face caused me to get carded at a casino during my Vegas trip last weekend. All they do is eye the DoB and the photo to make sure I'm over 21 and who I claim I am, nothing is scanned and stored in a database. This is the idea of the API, just seeing if the person is who they claim to be (which can be done in plenty of ways that don't involve PII when it comes to digital ID) and that they are of age. The problem isn't other websites, just the ID service itself getting compromised, which is already being proven possible.

I'm trying to understand you, hence my question. Would this mean that if Discord would implement this system of anonymous identification, that when they eventually get hacked, it would not be such an issue since they would have no personal information of their users that is needed for ID?

 

[CubbyBuddy]

I'm trying to understand you, hence my question. Would this mean that if Discord would implement this system of anonymous identification, that when they eventually get hacked, it would not be such an issue since they would have no personal information of their users that is needed for ID?

In this scheme, if Discord is compromised, there's no data to be found. Whether or not a person is an adult is just a binary yes or no on their end. However, the data might still be stored on the identity provider's end, so that's who ends up being the new target. In other words, correct, it's not Discord housing the sensitive information.

 

[PliminJET]

The people pushing for age verification have absolutely no idea how it works. I'm already past being frustrated and now it's comical seeing them so adamant about it just for there to be large ID database leaks months later and then radio silence. Repeat. They're also starting to target VPNs, good luck with that.

To answer your question, if something prompts me for ID, I'll throw them a middle-finger, turn 360 degrees, and walk away.

 

[CaBing]

The people pushing for age verification have absolutely no idea how it works. I'm already past being frustrated and now it's comical seeing them so adamant about it just for there to be large ID database leaks months later and then radio silence. Repeat. They're also starting to target VPNs, good luck with that.

To answer your question, if something prompts me for ID, I'll throw them a middle-finger, turn 360 degrees, and walk away.

Yeah, it's always the least technologically literate people pushing for these reforms. And, at least for me, Discord doesn't offer a service that can't be replicated by someone else anyway.

 

[slide4accsff]

In this scheme, if Discord is compromised, there's no data to be found. Whether or not a person is an adult is just a binary yes or no on their end. However, the data might still be stored on the identity provider's end, so that's who ends up being the new target. In other words, correct, it's not Discord housing the sensitive information.

Thanks for clarifying it for me. It makes sense to remove as much vulnerabilities, such as Discord, to limit data leaks and leave it to a central agency. It would seem easier to protect one location with sensitive information than multiple locations with questionable practices.

 

[freenow133]

I already stopped using it. Discord was always a piss poor replacement for forums anyway. I miss the old days

 

[Someguy69]

100%, I hate the very idea of adding my ID to any social media service

 

[Cratosstratos]

Obviously, when you see the people behind discord. And then think to yourself. Do you really want to hand them you ID documents?

 

[edgat]

Yes, giving your data and identity to discord is stupid.

 

[kkkkkkkkkkk6r5]

I also don't trust Discord enough to give them my ID.It mat cause some trouble

 

[darklurker]

if it wants my ID to prove i an adult i prefer to not do it and have restrictions

 

[Shiroe]

Depends how they go about it, it may move me to use element more instead.
I however don't want to share my ID with Discord, the idea is absurd.