Discord is calling it “teen-by-default settings” and will be rolling it out GLOBALLY for all users beginning in March (Discord confirmed it will be in phases).
All new and existing users worldwide will have a teen-appropriate experience by default, with updated communication settings, restricted access to age-gated spaces, and content filtering that preserves the privacy and meaningful connections that define Discord.
This is all under the guise of protecting younger users (which I have no problems with — but that should be in the realm of PARENTING). What these companies are doing is using that as an excuse to harvest our personal information. I know, I know… some folks will say this won’t affect most users who do not use servers that have restrictive/sensitive content (aka 18+ adult). But that is missing the point (I will touch on this later). The following are the account restrictions that will be put in place for non-age verified accounts.
- Content Filters: Discord users will need to be age-assured as adults in order to unblur sensitive content or turn off the setting.
- Age-gated Spaces: Only users who are age-assured as adults will be able to access age-restricted channels, servers, and app commands.
- Message Request Inbox: Direct messages from others that a user may not know are directed to a separate inbox by default, and access to modify this setting is limited to age-assured adult users.
- Friend Request Alerts: Users will receive warning prompts for friend requests from those they may not know.
- Stage Restrictions (Community Server): Only age-assured adults may speak on stage in servers.
Discord says there will also be an “age inference” system running in the background to determine if the user account might already be an adult where it doesn’t require the age verification process. This system uses account information such as account age, device and activity data (what?), and aggregated high-level patterns across Discord communities. Discord also assures that it does not use private messages or any message content in this process. Again, take all of this with a grain of salt unless you naively believe what these companies say (while they freeely skirt around the legal boundaries).
In simpler english, that system (likely AI based) will monitor your usage pattern (similar to what YouTube is doing) on Discord (though it remains to be seen if it will be broach those boundaries like how many anti-cheat systems work with games where it literally is malware/spyware level processes; I say this because of how Discord itself worded it as “device and activity data”). I no longer trust these companies to tell the truth or expect them to follow their own rules.
If that inference system fails (I already know how hit/miss Google’s AI age verification system is), regaining full access will require age verification via either a face scan (they say it will utilize on-device facial age estimation from a video selfie), or submitting a form of ID to one of Discord’s “vendor partners.” How about NOPE to the latter. And the first one; Discord says they aren’t doing any facial biometrics (it’s AI is using facial age estimation which means there will be a lot of misses). And if it were actual biometrics, I would be HELL NO. But then again, do I trust what they say? NOPE.
In other words, the chances of age verification failing via that method is going to be on the higher side. However, this will also be ripe for using AI deep fake tech against the entire system so if anything, that is somewhat of a win by being able to fight fire with fire. The point of this on device guestimation system is just meant to look like they are giving users an option of not having to submit anything online, when the reality is that users should expect additional forms of verification that does in fact require submitting an ID or other forms of validation that leaves the device.
They even then go on to mention that some users “may be asked to use multiple methods if more information is needed to assign an age group”. Let’s just cut through the PR bullshit speak and say this is how they’ll socially engineer users in order to gather more granular details whenever they see fit.
For the submitted documentation verification, they also assure that any info submitted will be immediately deleted in most cases. Right… fool me once, shame on you, fool me twice, shame on me. There is good reason NOT to trust what these companies say given how they LIE when it comes to data privacy/security.
Remember that Discord recently suffered a data breach of ID’s and tried to downplay the numbers like it was an actual win when just one government ID being leaked online is more than should be allowed. All it highlights is how they (and their business partners that handles online age verification) have proven themselves incompetent with their security protocols. They say they are using a different vendor partner now as if it were a grea thing, but I don’t have any trust with these mostly nameless companies to begin with.
Do I expect users to finally begin ditching this platform? Nope. People stick to Meta and Google like glue regardless of how terrible their executives are with all of their privacy infringing issues while folks like myself (if any of this impedes my existing usage requiring verification) will be in that minority who will simply leave.
I wrote a much longer rant about this in regards to the UK’s Online Safety Act last summer. I personally feel that this is something that the parents should be responsible for. Parental controls is a thing with many desktop and mobile platforms (at the operating system level). Similarly, such controls can be set at the router level. But I unfortunately know that some parents are irresponsible to begin with (and should’ve never procreated if they find it too difficult to properly raise and protect their own children with the tools that are available).
Allowing these private companies to roll out these hodgepodge systems where they’ve proven themselves less than up to the task when it comes to IT security is why I do not subscribe to this as a solution (and especially not Discord). No one should get used to this and should be loudly pushing back against this movement by both governments and businesses (when again, it should be taken care of at home by the parents first).
