If Discord cared about this, they’d use the same identity platforms governments use. For example, in the US, id.me is a requirement for many federal services. While it does deanonymize me and there are privacy concerns expanding this tech beyond government services, I trust id.me to take my data security seriously. It has to have federal security requirements. If their data is breached, there will be repercussions and reparations.
Discord, on the other hand, uses random vendors. There were no repercussions or reparations for the previous leak. Discord said moving forward they’d require SOC2 Type II or ISO 27001 for vendors. Crucially, neither of these certifications matter a fucking iota for personally identifiable information and Discord itself will not be completely them so even if the vendors were PII secure Discord will not hold itself to the same standards. Discord does not care about its users; Discord only cares about the ad revenue this will open up.
Nope I don’t trust them to use a US-based service. Also I don’t think they’re even allowed to as under EU law as all data held on users must be held on EU servers, so that solution wouldn’t be a one size fits all.
If Discord cared about this, they’d use the same identity platforms governments use. For example, in the US
I don’t think there is a one-size solution which is why I said Discord should use the same platforms plural that govts use. A solution for France isn’t going to be the same solution for the US. Because Discord is not actively attempting to use solutions (again plural) that have repercussions and reparations attached, like the ones governments use that require healthy standards, it’s very clear Discord does not actually care about this problem.
Oh absolutely. More importantly Discord needs to also follow the standard, not just require it of their vendors. Granted this source is the only place I can find they’re requiring that so that might not actually be true. It kinda reads like an AI summary.
If Discord cared about this, they’d use the same identity platforms governments use. For example, in the US, id.me is a requirement for many federal services. While it does deanonymize me and there are privacy concerns expanding this tech beyond government services, I trust id.me to take my data security seriously. It has to have federal security requirements. If their data is breached, there will be repercussions and reparations.
Discord, on the other hand, uses random vendors. There were no repercussions or reparations for the previous leak. Discord said moving forward they’d require SOC2 Type II or ISO 27001 for vendors. Crucially, neither of these certifications matter a fucking iota for personally identifiable information and Discord itself will not be completely them so even if the vendors were PII secure Discord will not hold itself to the same standards. Discord does not care about its users; Discord only cares about the ad revenue this will open up.
Nope I don’t trust them to use a US-based service. Also I don’t think they’re even allowed to as under EU law as all data held on users must be held on EU servers, so that solution wouldn’t be a one size fits all.
I don’t think there is a one-size solution which is why I said Discord should use the same platforms plural that govts use. A solution for France isn’t going to be the same solution for the US. Because Discord is not actively attempting to use solutions (again plural) that have repercussions and reparations attached, like the ones governments use that require healthy standards, it’s very clear Discord does not actually care about this problem.
If they cared about handling of PII they should require ISO 27701
Oh absolutely. More importantly Discord needs to also follow the standard, not just require it of their vendors. Granted this source is the only place I can find they’re requiring that so that might not actually be true. It kinda reads like an AI summary.