Readit News logoReadit News
Hawxy commented on Discord distances from age verification firm after ties to Peter Thiel surface   kotaku.com/discord-palant... · Posted by u/thisislife2
Morromist · a day ago
As Argento Dragone said in the Kotaku comments:

"Face scanning is used to do ID verification on your device and then deleted immediately."

"By immediately I mean we send it to k-ID who said that's what they do."

"By that I mean they partnered with Persona to do the actual verification."

"Persona clarified that by 'immediately' they mean 'after seven days.'"

"And given their ties to Palantir, it's probably fine. You trust us, right?"

Hawxy · a day ago
> "By immediately I mean we send it to k-ID who said that's what they do."

People have already validated this fyi. When k-ID was first added you could send a bogus age result to discord from your local device, which probably still works. There's no evidence your facial scans leave the device.

> "By that I mean they partnered with Persona to do the actual verification."

Which isn't true, it was a UK-only experiment being run for a small subset of users, which has now been discontinued.

I get people are outraged, but this is sensationalism at best.

Hawxy commented on Reinventing how .NET builds and ships (again)   devblogs.microsoft.com/do... · Posted by u/IcyWindows
Surac · 3 months ago
I use c# also to earn my money. Sadly the new custom to hyperinflation in language sugar and framework makes following new things quite hard. Even today starting a new project I choose .net framework 3.5 and syntax. I know this sounds extreme but 3.5 has anything I need to build great software. It also offers a very tested environment. Setting up the software stack is a very easy process. Programmed following v2 runtime also work on v4 runtime so only a simple config file side by side to exe makes it run on any windows machine without any framework deployment.
Hawxy · 3 months ago
3.5 is approaching end of life in the next few years, you definitely should not building anything new with it. There's a lot of QoL changes in modern .NET that makes your life as a developer significantly nicer. Even for building windows services, the modern Generic Host model is orders of magnitude better than anything in .NET Framework.
Hawxy commented on .NET 10   devblogs.microsoft.com/do... · Posted by u/runesoerensen
kurokawad · 3 months ago
Uh okay! I was not aware of this. Thanks for pointing that out. Why is there so much difference in the NuGet downloads between both libraries tho?
Hawxy · 3 months ago
> Why is there so much difference in the NuGet downloads between both libraries tho?

Because there's a boatload of older .NET apps that have been using Newtonsoft for over a decade already and aren't in a rush to switch. Anything built on .NET Framework is likely to still use Newtonsoft.

Hawxy commented on ASP.NET Security Feature Bypass Vulnerability   nvd.nist.gov/vuln/detail/... · Posted by u/zeraye
ninjaoxygen · 4 months ago
Yes, you are right, if you are on 5.0+, however the 4.x stuff is definitely out of support.

Sorry, I did not know they had actually brought non-Core ASP.NET forward into 5.0+, but it makes sense given how much of .NET Framework they continued support for and how much ASP.NET and Forms stuff is still around in enterprise with no budget for bringing it forward.

Totally agree with breaking the chain though, we moved to Core around 2.0 and never looked back, as an ecosystem it is so much better.

Hawxy · 4 months ago
> however the 4.x stuff is definitely out of support [...] Sorry, I did not know they had actually brought non-Core ASP.NET forward into 5.0+

None of this is true, you've gotten yourself very confused. The only real change with .NET 5 was the "Core" name being dropped and the Mono runtime being merged in. .NET Framework 4.x is still around and is still fully supported for legacy applications.

Hawxy commented on Discord says 70k users may have had their government IDs leaked in breach   theverge.com/news/797051/... · Posted by u/PaulKeeble
Crosseye_Jack · 4 months ago
No need to blame the user for the companies actions.

Company enacts policy enforced on them by law, for example requiring proof that a user is above the age of 18 to be able to use a channel where other users may use naughty words (The Horror!!!).

User struggles to use the automated age check system (I used the "guess age by letting an AI have a look at a selfie" method and it was a pain in the ass which failed twice before it finally worked) so does what is recommended and make a support ticket. [0]

User, relying on the published policy that Discord will delete ID directly after being used to to the age check [1] decides they wish to remain to have communication with their online friends uploads their ID.

Discord then fail to honour their end of the deal by deleting their users documents after use, and then get breached.

Full blame is on Discord for poorly handling their users data by their 3rd parties, and on the Governments forcing such practices. Discord should have their asses handed to them by the UK's ICO.

Sure, us geeks can and will use self hosted systems and find ways to avoid doing ID checks, but your avg joe isn't going to do that.

Hopefully cases like this will help with the push back on governments mandating these kind of checks, but I see the UK government just falling back to "think of the children" and laying all the blame on Discord, (who are not without fault in this case).

[0] https://support.discord.com/hc/en-us/articles/30326565624343...

[1] https://support.discord.com/hc/en-us/articles/30326565624343...

Hawxy · 4 months ago
> Discord then fail to honour their end of the deal by deleting their users documents after use, and then get breached.

This wasn't documents uploaded via the automated ID checker, it was users manually sending ID documents to support in order to appeal an automated age decision.

Hawxy commented on 1Password CLI Vulnerability   codeberg.org/manchicken/1... · Posted by u/manchicken
woadwarrior01 · 4 months ago
1Password used to be good 10 years ago, but not anymore. A couple of days ago, there was a post about Electron based apps that slow down macOS Tahoe (due to older versions of Electron using an undocumented API). When I ran the script on my laptop, 1Password was on the top of the list.

> 1Password.app: Electron 37.3.1 (Contents/Frameworks/Electron Framework.framework/Versions/A/Electron Framework)

[1]: https://news.ycombinator.com/item?id=45437112

Edit: Judging by the downvotes, it looks like there are a lot of electron lovers here. Why the hate for more efficient native apps? Are bloated binaries, janky UI and lower battery life, features? :)

Hawxy · 4 months ago
That's a 47 day old release and the fix for the macOS issue only came out 7 days ago. Not critically out of date by any means.
Hawxy commented on Next month, saved passwords will no longer be in Microsoft’s Authenticator app   cnet.com/tech/microsoft-w... · Posted by u/ColinWright
thayne · 7 months ago
But companies like Google, Microsoft, and Apple have a vested interest in making third party tools like bitwarden not work as well, or not at all on their platforms.
Hawxy · 7 months ago
Microsoft has been actively working on a new API to make third-party password managers natively integrate with Windows:

https://learn.microsoft.com/en-us/windows/apps/develop/secur...https://blogs.windows.com/windows-insider/2025/06/27/announc...

Hawxy commented on U.S. Chemical Safety Board could be eliminated   ishn.com/articles/114776-... · Posted by u/z991
vpribish · 8 months ago
You have to check out their incredible safety investigation videos on youtube. I don't know how well-organized or efficient they are but clearly their role needs to be played by someone - and as a taxpayer I appreciate that they are doing it in a way that educates and informs.
Hawxy · 8 months ago
> I don't know how well-organized or efficient they are

They're 50 employees with an annual budget of $14.4 million. The cost/benefit ratio here is very good.

Hawxy commented on Databricks acquires Neon   databricks.com/blog/datab... · Posted by u/davidgomes
tudorg · 9 months ago
[Disclaimer: I work for Xata]

As it happens, we've just launched our new Xata platform (https://xata.io/) which has some of the key Neon features: instant copy-on-write branching and separation of storage and compute. As an extra twist, we also can do anonymization (PII masking) between your production database and developer branches.

The way we do copy-on-write branches is a bit different. We haven't done any modifications to Postgres but do it completely at the storage layer, which is a distributed system in itself. This also brings some I/O performance opportunities.

While Xata has been around for a while, we're just launching this new platform, and it is in Private Beta. But we are happy to work with you if you are interested.

Btw, congrats to the Neon team!

Hawxy · 9 months ago
The PII masking aspect is very interesting and something we couldn't get when we decided on DBLab a month ago. What does the deployment model within AWS look like?

u/Hawxy

KarmaCake day708December 2, 2018View Original