Discord has been criticized over its decision to introduce AI-based age verification for viewing adult content that requires the submission of video selfies and government IDs following an October third-party breach that compromised 70,000 Discord users' government IDs, reports Ars Technica.
The new Aadhaar app allows users to share limited personal information, such as age verification, with various services including hotels, workplaces, and payment platforms.
The breaches occurred due to misconfigured Firebase instances within the apps, which lacked proper authentication and access controls, leaving databases exposed, Cybernews researchers found.
The compromised data includes transaction records for various tracking and monitoring apps, such as Geofinder, uMobix, Peekviewer, and Xnspy, all supplied by a Ukrainian company identified as Struktura, which also operates under the name Ersten Group.
CyberScoop reports that the Department of Homeland Security's alleged abuse of facial recognition tools and other biometric technologies has prompted the DHS Office of the Inspector General to launch an audit into the privacy practices of the agency, with the probe confirmed to initially focus on the department's Immigration and Customs Enforcement and the Office of Biometric Identity Management sub-components.
