Source: Trust me bro.
Comment on Discord will restrict your account next month unless you scan ID or face
blazeknave@lemmy.world 5 days agoMy friend is an exec there. After reading this thread bugged him to buy my software that would protect this vulnerability. They confirmed data/file never leaves the user’s device. Sounds pretty safe.
Anarki_@lemmy.blahaj.zone 5 days ago
Goodeye8@piefed.social 5 days ago
You do know that it’s bullshit? Unless they’re incredibly incompetent they’re lying to you. If the data never leaves the client then all the checks are client-side, which means it’s relatively easy (compared to a server side check) to bypass those checks.
vithigar@lemmy.ca 4 days ago
For a while (maybe even still, I haven’t kept up with it) you could unlock paid features with a modded client, so they absolutely have a history of client-side verification.
Orygin@sh.itjust.works 4 days ago
Afaik the files exfiltrated were photos that the on device detection could not identify and were uploaded to verify server side. That would mean not all pictures are sent to the backend, and that corroborates why “only” 70k photos were stolen when discord has millions of users verified.
Of course you have to put your trust in a closed source system so best not to upload, but if true it’s still a far cry from openly lying about it. It’s probably explicitly stated in their ToS that they may upload the file if the verification fails client side.