One major controversy I recall with VRchat's implementation of age assurance (via Persona) is that they retained identity of who you were after completing the process. Not who exactly, but your identity was hashed so that if the same person attempted to verify again they could tell who it is. This effectively meant one individual can have one validated account per lifetime. If the flakey AI moderation banned you for an emoji combination freshly deemed racist/etc, you effectively lost your only shot at a validated VRchat account forever.
This is an issue with age assurance that goes well beyond just verifying age, and is undoubtedly viewed as a fringe benefit of age assurance for those wishing to deanonymise the internet. There's obvious problems with this beyond just "can't ban evade anymore". Authorities or intelligence can run bulk hashes against sets of IDs to effectively deanonymise all accounts.
The question here is, does Discord do the same thing for any or all of the selected options? Or is identity data full well and truly purged once the outcome is determined - no hashing, nothing retained other than the result?
>The question here is, does Discord do the same thing for any or all of the selected options? Or is identity data full well and truly purged once the outcome is determined - no hashing, nothing retained other than the result?
What they actually do is irrelevant since none of these companies should ever be trusted to do what they claim they will do.
Discord offers age verification via AgeKey [1]. Reading their privacy policy, one can create multiple AgeKeys based on the same identification or face scan. Each AgeKey is stored as a passkey and not persisted anywhere else. The privacy policy indicates that the identification information is submitted to 3rd party providers, and also appears to be used for general internet company marketing and promotions, similarly invasive to buying a pair of shoes online. That is, your identity will be propagated to ad networks by AgeKey as it similarly does for ecommerce.
Discord cannot determine identity from the AgeKey.
Given Persona is involved (and thus also Thiel and Palantir) expect everything to be store for ever, sold for profit and misused agains you in the worst way possible.
ashleyn · · focus · HN ↗
This is an issue with age assurance that goes well beyond just verifying age, and is undoubtedly viewed as a fringe benefit of age assurance for those wishing to deanonymise the internet. There's obvious problems with this beyond just "can't ban evade anymore". Authorities or intelligence can run bulk hashes against sets of IDs to effectively deanonymise all accounts.
The question here is, does Discord do the same thing for any or all of the selected options? Or is identity data full well and truly purged once the outcome is determined - no hashing, nothing retained other than the result?
StanislavPetrov · · focus · HN ↗
What they actually do is irrelevant since none of these companies should ever be trusted to do what they claim they will do.
linkregister · · focus · HN ↗
Discord cannot determine identity from the AgeKey.
1. <a href="https://agekey.org/" rel="nofollow">https://agekey.org/
m4rtink · · focus · HN ↗