Notably, by doing this Discord lied in their initial announcement. They originally said [1] that all processing would be on-device, but that's not true for users subject to this "experiment".
> "By immediately I mean we send it to k-ID who said that's what they do."
People have already validated this fyi. When k-ID was first added you could send a bogus age result to discord from your local device, which probably still works. There's no evidence your facial scans leave the device.
> "By that I mean they partnered with Persona to do the actual verification."
Which isn't true, it was a UK-only experiment being run for a small subset of users, which has now been discontinued.
I get people are outraged, but this is sensationalism at best.
I don't want to defend Discord, but that's just not true. That announcement did not say all processing would be on-device, only when you use the face scan.
> Video selfies for facial age estimation never leave a user’s device
> Facial scans never leave your device. Discord and our vendor partners never receive it.
Meanwhile they're also clear that uploaded IDs do get sent to "partners":
> Quick deletion: Identity documents submitted to our vendor partners are deleted quickly— in most cases, immediately after age confirmation.
Ah, I assumed that Persona is being used for face scans too. I haven't been able to find a screenshot of the actual flow, but based on this article [1] with a screenshot of the message UK users are receiving, I suspect they are:
>The information you submit will be temporarily stored for up to 7 days, then deleted. For ID document verification, all details are blurred except your photo and date of birth... [emphasis mine]
To me, that implies that Persona is/was doing more than just IDs.
Morromist|15 days ago
"Face scanning is used to do ID verification on your device and then deleted immediately."
"By immediately I mean we send it to k-ID who said that's what they do."
"By that I mean they partnered with Persona to do the actual verification."
"Persona clarified that by 'immediately' they mean 'after seven days.'"
"And given their ties to Palantir, it's probably fine. You trust us, right?"
eterm|15 days ago
unknown|15 days ago
[deleted]
Hawxy|15 days ago
People have already validated this fyi. When k-ID was first added you could send a bogus age result to discord from your local device, which probably still works. There's no evidence your facial scans leave the device.
> "By that I mean they partnered with Persona to do the actual verification."
Which isn't true, it was a UK-only experiment being run for a small subset of users, which has now been discontinued.
I get people are outraged, but this is sensationalism at best.
delecti|15 days ago
> Video selfies for facial age estimation never leave a user’s device
> Facial scans never leave your device. Discord and our vendor partners never receive it.
Meanwhile they're also clear that uploaded IDs do get sent to "partners":
> Quick deletion: Identity documents submitted to our vendor partners are deleted quickly— in most cases, immediately after age confirmation.
anonymous_user9|15 days ago
>The information you submit will be temporarily stored for up to 7 days, then deleted. For ID document verification, all details are blurred except your photo and date of birth... [emphasis mine]
To me, that implies that Persona is/was doing more than just IDs.
[1] https://www.eurogamer.net/discord-advises-uk-users-that-they...