Discord cuts ties with Peter Thiel-backed verification software
13 hours ago
- #Privacy
- #Discord
- #Persona
- Discord's identity verification software, Persona Identities, had frontend code accessible on the open internet and government servers.
- Researchers found nearly 2,500 accessible files on a U.S. government-authorized endpoint, revealing facial recognition checks and screening against politically exposed persons lists.
- Persona performs 269 distinct verification checks, including screening for adverse media, and assigns risk and similarity scores to user information.
- Discord announced it is cutting ties with Persona, which continues to provide age verification services for OpenAI, Lime, and Roblox.
- Discord's partnership with Persona lasted less than a month, with user information stored for up to seven days before deletion.
- Discord faced backlash for defaulting accounts to teen-safety settings and requiring age verification via Persona, later clarifying it remains optional for most users.
- Persona CEO Rick Song stated the exposed files were publicly accessible frontend information, not a major vulnerability.
- Song denied ties to Palantir, ICE, or the government, but confirmed Persona is undergoing FedRAMP authorization for workforce security.
- Persona offers KYC and AML solutions but does not link facial biometrics to financial records or law enforcement databases.
- Song faced criticism for lacking personally identifiable information online, defending the importance of privacy.