Hacktivists tried to find a workaround to Discord’s age-verification software, Persona.

[evacide@hachyderm.io]

Hacktivists tried to find a workaround to Discord’s age-verification software, Persona. Instead, they found its frontend exposed to the open internet, and that was just the beginning.

https://www.therage.co/persona-age-verification/

[misusecase@twit.social]

@evacide Discord is carrying on like their previous age verification vendor didn’t leak a bunch of users’ sensitive data (because they were retaining said data which Discord claimed they weren’t going to do).

[davep@infosec.exchange]

@evacide Why am I not surprised by the links with federal agencies? It's relentless 🫩

[gimulnautti@mastodon.green]

@evacide If it has corporate police state, you can be sure it has Peter Thiel’s fingers on it!

[aktbar@mastodon.social]

@evacide Persona is now non grata?

[salty@mastodon.nz]

@aktbar @evacide I see what ya did there 🤜🤛

[celeste_42bit@infosec.exchange]

@evacide There is a security researcher called Celeste, just like meee! Weirdly enough, that makes me happy

[alice@lgbtqia.space]

@evacide

"""
Persona’s exposed code compares your selfie to watchlist photos using facial recognition, screens you against 14 categories of adverse media from mentions of terrorism to espionage, and tags reports with codenames from active intelligence programs consisting of public-private partnerships to combat online child exploitative material, cannabis trafficking, fentanyl trafficking, romance fraud, money laundering, and illegal wildlife trade.

Once a user verifies their identity with Persona, the software performs 269 distinct verification checks and scours the internet and government sources for potential matches...
"""

So to keep kids safe from online predators, we're willing to *horribly* invade their privacy and sell all their data to predators? I see the system is working as intended 😮‍💨

[evacide@hachyderm.io]

@aktbar I am extremely disappointed this was not the title.

[chrisholladay@mastodon.social]

@evacide
Ooos
Page gone !!

[wuzzy@cyberplace.social]

@evacide Ah yes, "let us protect children by scanning their faces". What could possibly be wrong??? 🤡

“the software ‘flags you as a “suspicious entity” based on your face alone’ …”

Yay! Phrenology 2.0!

[abdulzefir@social.vivaldi.net]

@evacide serves them right!

[nonya_bidniss@infosec.exchange]

@evacide Jesus christ

[tootbrute@fedi.arkadi.one]

@alice @evacide American 3 letter agencies are the biggest predators on the internet. scary shit.

[tankgrrl@hachyderm.io]

@evacide
We won't surveill you
And if we do it won't be that bad
And if it was, at least it's secure
And if it' not we didn't mean it
And if we did you deserved it

[vwbusguy@mastodon.online]

@evacide AI is becoming the new infamous punch card system.

[ollicle@mastodon.social]

@evacide and meanwhile the Australian government is claiming credit for protecting children by standing up to social media companies to force them to use this kind of tech.

I’m sure the pressure is in the opposite direction.