Discord is testing AI-powered age verification using a selfie and driver's license, partnering with Yoti, a digital identity company. This system aims to verify user age without storing government ID information on Discord's servers. While initially focused on ensuring compliance with age-restricted content, like servers designated 18+, this move signifies a potential broader shift in online age verification moving away from traditional methods and towards AI-powered solutions for a more streamlined and potentially privacy-preserving approach.
Revolt is a free and open-source alternative to Discord, offering a similar feature set with a focus on user privacy and community control. It features text and voice channels, direct messaging, file sharing, rich text editing, and voice chat, all hosted on its own servers. Revolt aims to provide a transparent and extensible platform, allowing users to self-host or contribute to its development. Its client is available on desktop and web, with mobile apps planned for the future. The project prioritizes community involvement and customization, giving users more control over their communication experience.
Hacker News users discussed Revolt's potential as a Discord alternative, praising its open-source nature and commitment to user privacy. Several commenters expressed interest in self-hosting, viewing it as a significant advantage. Some questioned Revolt's long-term viability and ability to compete with Discord's network effects and feature set, while others pointed to Matrix as a more established alternative. Concerns were also raised about moderation challenges and potential abuse on a decentralized platform. A few users shared their positive experiences using Revolt, highlighting its performance and clean interface, though acknowledging it's still under development. Overall, the comments reflect cautious optimism about Revolt, with many hoping it succeeds but recognizing the hurdles it faces.
DM is a lightweight, unofficial Discord client designed to run on older Windows operating systems like Windows 95, 98, ME, and newer versions. Built using the Delphi programming language, it leverages Discord's web API to provide basic chat functionality, including sending and receiving messages, joining and leaving servers, and displaying user lists. While not offering the full feature set of the official Discord client, DM prioritizes minimal resource usage and compatibility with older hardware.
Hacker News users discuss the Discord client for older Windows systems, primarily focusing on its novelty and technical ingenuity. Several express admiration for the developer's skill in making Discord, a complex modern application, function on such outdated operating systems. Some question the practical use cases, while others highlight the potential value for preserving access to communities on older hardware or for specific niche applications like retro gaming setups. There's also discussion around the technical challenges involved, including handling dependencies and the limitations of older APIs. Some users express concern about security implications, given the lack of updates for these older OSes. Finally, the unconventional choice of Pascal/Delphi for the project sparks some interest and debate about the suitability of the language.
A security vulnerability, dubbed "0-click," allowed remote attackers to deanonymize users of various communication platforms, including Signal, Discord, and others, by simply sending them a message. Exploiting flaws in how these applications handled media files, specifically embedded video previews, the attacker could execute arbitrary code on the target's device without any interaction from the user. This code could then access sensitive information like the user's IP address, potentially revealing their identity. While the vulnerability affected the Electron framework underlying these apps, rather than the platforms themselves, the impact was significant as it bypassed typical security measures and allowed complete deanonymization with no user interaction. This vulnerability has since been patched.
Hacker News commenters discuss the practicality and impact of the described 0-click deanonymization attack. Several express skepticism about its real-world applicability, noting the attacker needs to be on the same local network, which significantly limits its usefulness compared to other attack vectors. Some highlight the importance of the disclosure despite these limitations, as it raises awareness of potential vulnerabilities. The discussion also touches on the technical details of the exploit, with some questioning the "0-click" designation given the requirement for the target to join a group call. Others point out the responsibility of Electron, the framework used by the affected apps, for not sandboxing UDP sockets effectively, and debate the trade-offs between security and performance. A few commenters discuss potential mitigations and the broader implications for user privacy in online communication platforms.
Summary of Comments ( 356 )
https://news.ycombinator.com/item?id=43715884
Hacker News users discussed the privacy implications of Discord's new age verification system using Yoti's face scanning technology. Several commenters expressed concerns about the potential for misuse and abuse of the collected biometric data, questioning Yoti's claims of data minimization and security. Some suggested alternative methods like credit card verification or government IDs, while others debated the efficacy and necessity of age verification online. The discussion also touched upon the broader trend of increased online surveillance and the potential for this technology to be adopted by other platforms. Some commenters highlighted the "slippery slope" argument, fearing this is just the beginning of widespread biometric data collection. Several users criticized Discord's lack of transparency and communication with its users regarding this change.
The Hacker News post "Discord's face scanning age checks 'start of a bigger shift'" has generated several comments discussing the implications of Discord's new age verification system, which uses Yoti's facial analysis technology. Users express a range of concerns and opinions.
A prominent sentiment is skepticism and apprehension regarding privacy. Several commenters question the security and potential misuse of biometric data collected through the system. They worry about the creation of large datasets of facial scans vulnerable to breaches or exploitation by governments or corporations. The lack of transparency about how Yoti handles and stores this data fuels these concerns. Some also express discomfort with the idea of a third-party company, Yoti, having access to such sensitive information.
Several users discuss the accuracy and potential biases of facial recognition technology. They point out that such systems have historically exhibited biases based on factors like race and gender, raising concerns about unfair or discriminatory outcomes for certain user groups. Commenters also speculate on the potential for circumvention by minors using fake IDs or manipulating the system.
The discussion also touches on the broader implications of age verification and content moderation online. Some commenters argue that age verification measures, while potentially well-intentioned, could erode online privacy and freedom of expression. Others raise concerns about the slippery slope, fearing that such technologies could be used for more intrusive forms of surveillance or control in the future.
Some commenters offer alternative approaches to age verification, suggesting methods that don't rely on facial recognition, such as credit card verification or government-issued IDs. However, these alternatives are also met with counterarguments regarding their own limitations and privacy implications.
Finally, a few comments specifically criticize Discord for implementing this system, accusing the platform of succumbing to pressure from regulators or prioritizing perceived safety over user privacy. There is a general feeling among some commenters that this move represents a worrying trend towards increased surveillance and control in online spaces.