Post AzAAQBDfpb41FivBlQ by ivesen@miniwa.moe
 (DIR) More posts by ivesen@miniwa.moe
 (DIR) Post #AzA1XvXF87aTKzh5mK by hellpie@raru.re
       2025-10-13T08:24:11Z
       
       1 likes, 1 repeats
       
       I find it expected that everyone is talking about how many IDs are in the Discord leaks but nobody is questioning why Discord needed to keep any one of those IDs around after they had already verified the age of the users they belonged to.
       
 (DIR) Post #AzA1XweixnAKoUCa4u by ivesen@miniwa.moe
       2025-10-13T08:25:17.453899Z
       
       0 likes, 0 repeats
       
       @hellpie isn't it the case that discord never even saves them? iirc it's a third party service right? (I could be wrong)
       
 (DIR) Post #AzA3z8ppzNvEJVUoq0 by hellpie@raru.re
       2025-10-13T08:40:11Z
       
       0 likes, 0 repeats
       
       @ivesen that's like saying it's the bullet that killed someone and not the person that shot it. Adding a layer of indirection does not work when the indirection is blaming something that was the result of exclusively deliberate and explicit choices, like signing a contract with a third party for the management of ID verification, which would have listed how the process worked, the privacy implications, the security procedures and that would have happened after vetting. That's why the GDPR puts the full blame on the first party before the third party is even questioned, even if the third party deceived them the first party is still fully liable for having subsequently deceived its users, who are the only other party whose safety the GDPR cares about paramount to all else.
       
 (DIR) Post #AzA3zA7xBW0WJyyniK by ivesen@miniwa.moe
       2025-10-13T08:52:39.764940Z
       
       0 likes, 0 repeats
       
       @hellpie I mean, you can say that surebut you questioned why *discord* saves them, and if what you're saying is true that just means the third party has more of an incentive to save the images compared to discord itselflike really, if discord doesn't want to deal with ID verification but is forced to by the government, then the logical answer is to outsource it to a local company (local to the users in question), and if the GDPR hits discord first anyway then the third party is less liable than discord and is essentially encouraged to just lie to discord in order to get the contract, and then proceed to use the ID's for datafarming laterlike yeah I get your point kinda, but ID verification isn't something discord wanted to do in the first place, if you're gonna blame someone blame the fucking ass backwards governments that wanted this orwellian helltech in the first place
       
 (DIR) Post #AzAAQBDfpb41FivBlQ by ivesen@miniwa.moe
       2025-10-13T10:04:46.878095Z
       
       0 likes, 0 repeats
       
       @s8n @hellpie we can do both