| ▲ | nottorp 4 hours ago | |||||||||||||
Who cares where they outsource the age verification to? They have no business keeping my ID scan or face in any case. Because there's an 120% chance they'll end up on a public S3 bucket. | ||||||||||||||
| ▲ | Neywiny 3 hours ago | parent | next [-] | |||||||||||||
That's what gets me too. It feels so easy. Just don't store the source data. They usually say they don't, they claim it's deleted quickly or never saved to disk at all or other stuff and its always lies. Just don't save it and there's no attack vector. Same thing with plaintext passwords. The amount of password leak attacks I've seen in recent years is 0 (though I'm sure they're still around). Stored IDs and PII for verification is uncountable | ||||||||||||||
| ||||||||||||||
| ▲ | troupo 3 hours ago | parent | prev [-] | |||||||||||||
> Because there's an 120% chance they'll end up on a public S3 bucket. They already ended up there: https://www.bbc.com/news/articles/c8jmzd972leo | ||||||||||||||
| ||||||||||||||