Afaik the files exfiltrated were photos that the on device detection could not identify and were uploaded to verify server side. That would mean not all pictures are sent to the backend, and that corroborates why “only” 70k photos were stolen when discord has millions of users verified.
Of course you have to put your trust in a closed source system so best not to upload, but if true it’s still a far cry from openly lying about it. It’s probably explicitly stated in their ToS that they may upload the file if the verification fails client side.
Comment on Discord will restrict your account next month unless you scan ID or face
Goodeye8@piefed.social 6 days agoYou do know that it’s bullshit? Unless they’re incredibly incompetent they’re lying to you. If the data never leaves the client then all the checks are client-side, which means it’s relatively easy (compared to a server side check) to bypass those checks.
Orygin@sh.itjust.works 6 days ago
vithigar@lemmy.ca 5 days ago
For a while (maybe even still, I haven’t kept up with it) you could unlock paid features with a modded client, so they absolutely have a history of client-side verification.