• Frenchfryenjoyer (she/her)@lemmings.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        42 minutes ago

        my friend who also lives in the uk was unable to view a Reddit post that had a picture of dental decay because it was marked as nsfw and Reddit requires you to verify age using ID/selfie to be in compliance with the uk’s Online Safety Act to see anything marked as nsfw.

        my comment was a play on the people who think this is all worth it because it might prevent kids from seeing porn

  • Billegh@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    49 minutes ago

    That’s why I used a picture of my anus for my age verification photo. The wrinkles are what sold it, I think.

  • TankovayaDiviziya@lemmy.world
    link
    fedilink
    English
    arrow-up
    17
    ·
    6 hours ago

    Politicians: That’s the point.

    Joking aside, now that I think about it, what difference does does it make if companies are stealing infos and spying on you with government mandated age verification checks, and hackers stealing your government mandated age verification info? This just reinforces my view that governments (and companies) are nothing but glorified gangsters.

    • dogs0n@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 hours ago

      A hacker stealing your id can do way more malicious stuff like more expertly crafted phishing and identity fraud just to name two.

      No one involved in this from the government to the companies is innocent in this chain though in my opinion. A breach is always bound to happen.

    • Brkdncr@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      5 hours ago

      Option 3: companies that you pay to provide authentication service. Regulated so that they clearly tell you if they are subsidizing service outside of your payments.

      We nearly already do this with certificate services and they would probably be in a good position to offer an id service.

  • nutsack@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    10
    ·
    6 hours ago

    the only person who’s allowed to verify my age is my cat because he won’t stop being a dick about it

  • aliser@lemmy.world
    link
    fedilink
    English
    arrow-up
    16
    ·
    7 hours ago

    so instead of creating some kind of authorization system that would not require sending your private information to everyone the govt did nothing and instead put that responsibility on EVERY company. begs the question why rushing so much?

    • Spice Hoarder@lemmy.zip
      link
      fedilink
      English
      arrow-up
      6
      ·
      4 hours ago

      The department of Social security could have created some sort of public/private key pair to very age and DOB. But that’s too much to ask for isn’t it?

      • KelvarCherry@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        3
        ·
        49 minutes ago

        Have you seen the USA? UK? Russia? China? I really don’t want the government making any system to tie internet to any identity. I really don’t want any government having any role in the internet.

  • Mwa@thelemmy.club
    link
    fedilink
    English
    arrow-up
    16
    ·
    7 hours ago

    this is why i dont give my ID to any service(obv including Discord) anymore.

  • kylian0087@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    52
    arrow-down
    2
    ·
    11 hours ago

    Proofs the UK is a shithole as well funnily enough.

    Nothing against the Brits but their government oh damn that’s bad.

      • Fraction9170@infosec.pub
        link
        fedilink
        English
        arrow-up
        13
        ·
        8 hours ago

        Yep. This is just the first. As long as individuals submit to these ID verifications, services which provide them will be highly targeted. I find it ridiculous that 1.5 million people actually submitted their info to access discord instead of finding a workaround or alternative. I can only imagine how many are gullible enough to verify on porn sites.

        • KelvarCherry@lemmy.blahaj.zone
          link
          fedilink
          English
          arrow-up
          2
          ·
          47 minutes ago

          Well before the UK online ID laws, I saw some memes about people getting asked for ID as proof of age for NSFW servers, just to send to server admins. I figured it was a ID fraud scheme of some sort, but now I’d chalk it up to manic “protect the children” believers.

      • Reginald_T_Biter@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        ·
        edit-2
        8 hours ago

        We’ll be reminiscing about good old boring Starmer once Lord Gobshite inevitably gets voted in by a load of gammons

    • TankovayaDiviziya@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      6 hours ago

      The Labour under Starmer is closet Tory. I wish that the popular Manchester Labour mayor (whose name I forgot) takes his place as PM, which actual leftist politicians try to make him to be. Although this will be a Sysiphean task under the ruthless politicking in British politics and Labour Party’s own strict rule on who could become PM.

  • Octagon9561@lemmy.ml
    link
    fedilink
    English
    arrow-up
    47
    ·
    14 hours ago

    And this is why this provide xyz private information for verification bs should be illegal

    • ILikeBoobies@lemmy.ca
      link
      fedilink
      English
      arrow-up
      15
      ·
      8 hours ago

      And why any service asking it should be moved on from.

      Pretty sure these people could have found a teamspeak, matrix, or mumble server without the requirement.

      • Garbagio@lemmy.zip
        link
        fedilink
        English
        arrow-up
        7
        ·
        7 hours ago

        100%. Honestly for me it’s to the point that it’s hard to feel bad; people have been shouting from the rooftops that this will happen, this is how it will happen, and this is exactly the outcome of it happening. Like sure, 99% of discord users are computer illiterate gamers, but come on, you can’t say you weren’t warned.

  • TheObviousSolution@lemmy.ca
    link
    fedilink
    English
    arrow-up
    14
    ·
    13 hours ago

    I’ve criticized the sort of personal information that is allowed to be managed by banking entities in the cases of Accidental Americans, where people who have nothing to do with America except that they were born in the US have their data handled by private entities to be passed onto governments they’ve never been in. Public entities that should handle and be responsible for it in their actual home countries want to wash their hands off from them and there’s too much money against too small of a minority for anyone to care about their rights. It doesn’t matter how banks have consistently proven that they or their staff can act criminally, either.

    At least here, it affects a lot more people so it will likely bring in the change and reform it needs, even if the sensitivity of this data is significantly less.

    Gonna have to say, this guy is definitely gonna be screwed by this:

  • chatokun@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    51
    ·
    19 hours ago

    Hmm, I don’t recall ever doing age verification for Discord. Were older accounts grandfather’d in, or is it currently limited by region or something?

    • Holytimes@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      10
      ·
      13 hours ago

      Any time your account gets locked for age reason it requires it. So if you have never had an age lock it’s unlikely you had to do it.

      It’s as easy as someone reporting you for being underage with no proof or even just saying “I’m 14 and what is this” as a meme to get locked tho.

      Hell the auto flag system can hit you if you just talk like a kid sometimes.

    • SoftestSapphic@lemmy.world
      link
      fedilink
      English
      arrow-up
      69
      arrow-down
      1
      ·
      19 hours ago

      I think it’s a UK thing

      They have been passing legislation to basically dox their citizens for them to gain access to the internet

        • Echo Dot@feddit.uk
          link
          fedilink
          English
          arrow-up
          9
          ·
          17 hours ago

          Yeah it’s like the government want to get sued. They are better than the previous administration but that’s a pretty low bar

      • themachinestops@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        15
        ·
        16 hours ago

        It was obvious things like this will happen, unlike banks and government sites social media sites don’t have strict cyber security requirements and they want these sites to have a government ID. It was a bad idea from the start.

    • newcool1230@lemmy.ml
      link
      fedilink
      English
      arrow-up
      12
      ·
      edit-2
      4 hours ago

      I believe people from EU UK and people who say they were under 13 and got reported. They needed to send in a pic of them holding their ID to get unbanned.

      edit: UK people not EU

  • plz1@lemmy.world
    link
    fedilink
    English
    arrow-up
    114
    ·
    22 hours ago

    The fact that these photos and PII (personally identifiable information) were not destroyed after the verification process was certified is absolutely atrocious OpSec. I don’t even care which of the two companies is ultimately responsible, because they are both responsible.

    1. Zendesk for their bad OpSec
    2. Discord for both outsourcing this AND not having contractual requirements to properly secure and destroy PII when it was no longer required.

    I work in IT, and treat PII like it’s dangerously radioactive, because in the digital world, it really is.

    • luciferofastora@feddit.org
      link
      fedilink
      English
      arrow-up
      6
      ·
      15 hours ago

      Me when I get a request for PII pertaining to a suspected corruption case: Have one of our corporate lawyers give me a written and explicit statement of what data I’m supposed to send to whom or get bent. I’m not touching that with a ten foot pole and gloves unless I have a legally solid affirmation that what I’m doing won’t come back to bite me, and that our workers’ council knows about it and will back me up.

      I’m reluctant to even confirm that I can get that information in the first place. I mean, I’m the one with full access to the audit tool, so I probably do, but I’d have to access that data in the first place to check. I don’t think that anyone would notice or care so long as I don’t share that information, but as you said: dangerously radioactive; don’t touch if I can help it.

    • TomArrr@lemmy.world
      link
      fedilink
      English
      arrow-up
      14
      ·
      18 hours ago

      “Apparently” only those who were challenging the verification results and uploaded awaiting reverification are affected.

      Not that that isn’t bad enough

      • Kissaki@feddit.org
        link
        fedilink
        English
        arrow-up
        10
        ·
        17 hours ago

        That’s even worse, in my eyes. Maybe not in scale, but when appeal process is more vulnerable, that seems very questionable.

    • Zen_Shinobi@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      20 hours ago

      Right. It blows me away the required training we have to do for physical files more secured than Fort Knox! Tech world? Eh just throw it in the recycle bin