Age verification vendor Persona left front end exposed, researchers say
6 hours ago
- #Data Privacy
- #Surveillance Technology
- #Age Verification
- An exposed testing environment of Persona, Discord's identity verification vendor, was found but isolated from production with no personal data exposed.
- Persona's software can perform 269 verification checks, including facial recognition, watchlist screening, and adverse media screening across 14 categories.
- Persona collects and retains data such as IP addresses, government IDs, phone numbers, and faces for up to three years, though the company states data is deleted as soon as possible.
- Discord will not continue using Persona for age verification, but other platforms like Roblox, OpenAI/ChatGPT, and Lime reportedly use Persona's services.
- Age verification effectiveness is questioned, with Australia's under-16 social media ban showing many children bypass restrictions via simple workarounds.