News for hackers. Stuff that matters.
Re:Discord says 70k users may have had their government IDs ... by elevation on Wednesday October 08, 2025 @09:25PM (#45522455)
I didn't feel comfortable giving discord my phone number when they demanded it, so I lost access to the open source communities that insist on collaborating there.

I wish breaches like this would cause people to reconsider their choices but sadly, it's unlikely most users will move.

Re:Discord says 70k users may have had their government IDs ... by giancarlostoro on Wednesday October 08, 2025 @09:28PM (#45522468)
The issue is if you don't enforce the phone number requirement on your server you get all the trolls who don't use phone numbered accounts. I wish Discord would allow you to restrict known VPNs instead of requiring phone numbers. It would solve so many issues. I know a LOT of VPNs wont be caught, but if you block MOST non-residential IP blocks, you'll capture a lot of them.
Re:Discord says 70k users may have had their government IDs ... by csmantle on Wednesday October 08, 2025 @09:48PM (#45522596)
Trolls likely have access to phone number farms though. And in some parts of the world it's extra cheap to mass-register phone numbers. Trolls wouldn't be harmed in a data leak, only normal users get hurt.
Re:Discord says 70k users may have had their government IDs ... by noitpmeder on Wednesday October 08, 2025 @11:27PM (#45523177)
Most trolls aren't the kind of trolls that run large scale networks, they're the 12 year olds you triggered by saying BLM
Re:Discord says 70k users may have had their government IDs ... by giancarlostoro on Thursday October 09, 2025 @09:18PM (#45534633)
Once a phone is banned though, it's unusable again at least in a given server. Discord will treat it like an IP ban (which they also do).
Re:Discord says 70k users may have had their government IDs ... by elevation on Wednesday October 08, 2025 @09:42PM (#45522568)
Phone numbers may be required to bring order to a vast international user base, but a few dozen devs and a small user community can function without invasive moderation tactics.
Re:Discord says 70k users may have had their government IDs ... by fishgoesblub on Wednesday October 08, 2025 @09:37PM (#45522534)
The communities I'm in don't require a phone number and very rarely gets trolls. Proper moderation is the most important part. Occasionally there's a spambot, but they're just hacked accounts from pre-existing real users, and as someone that uses a VPN with Discord, I'd prefer to not be treated as an evil-doer please.
Re:Discord says 70k users may have had their government IDs ... by giancarlostoro on Wednesday October 08, 2025 @09:42PM (#45522564)
Sure, are the communities you're in tens of thousands of users or more? Because things change really quickly depending on how many users are active, if it's a community server, and the subject matter. Even a programming Discord is a hell hole. You cannot have enough mods ever. Things fall through the cracks and people get hurt. You can't moderate DMs or know the wellbeing of tens of thousands of your users who are being harassed in DMs and have no idea how to get help. Discords full of a lot of youth.

Theres users who rotate community servers on a VPN / new spun up alts. They are relentless. I noticed the communities that are massive and do not have this problem to this extend all require phone number.

Re:Discord says 70k users may have had their government IDs ... by Gigachad on Wednesday October 08, 2025 @09:35PM (#45522517)
Discord doesn’t require a phone number. It’s individual community owners who opt to require it. You can create a server that doesn’t require one but it effectively means you can’t ban people since they can just sign up again on a new account.
Re:Discord says 70k users may have had their government IDs ... by ikkun on Wednesday October 08, 2025 @11:33PM (#45523212)
I tried making an account once, technically my account was created but trying to log in only gets me a screen that requires I verify a phone number. I was never even able to attempt to join a server. I assume it's my browser's privacy settings and ad blocker but I'm not sure.
Re:Discord says 70k users may have had their government IDs ... by LoganDark on Wednesday October 08, 2025 @09:48PM (#45522600)
Discord has an account flag that triggers a mandatory phone number verification. It happens if you do things like send messages too quickly over the span of about a minute, or send multiple friend requests, or join too many servers, or start too many DMs, or indeed, join any server that is set to require phone number verification.
Re:Discord says 70k users may have had their government IDs ... by zahlman on Wednesday October 08, 2025 @10:00PM (#45522678)
I am in dozens of servers and have not encountered this demand for a phone number. I have been in servers that required it for moderators as part of 2FA, and I just declined to moderate there. It had no effect on my use of any other server.
Re:Discord says 70k users may have had their government IDs ... by malfist on Wednesday October 08, 2025 @10:04PM (#45522705)
Just because something hasn't happened to you, doesn't mean it doesn't happen to other people
Re:Discord says 70k users may have had their government IDs ... by zahlman on Wednesday October 08, 2025 @10:40PM (#45522936)
When other people say that something happens to them, why should I simply take them at their word when it contradicts the evidence actually available to me?

I would think that the appropriate response is to show more concrete evidence; in this case that could be the related policy, for example.

More to the point, the post I responded to says "It happens if...". I think that can reasonably be understood as logical implication. If it was meant to mean "it can happen if..." then I genuinely don't understand why or how I was supposed to come to that interpretation.

Especially with the bit about servers that require it. It read to me like the claim was that entering such a server would automatically flag your entire account. I know that not to be the case from my own experience.

Re:Discord says 70k users may have had their government IDs ... by Aachen on Thursday October 09, 2025 @01:18AM (#45523803)
If it doesn't rain one day, that's not evidence there exists no rain

That's about the level of evidence that your specific user account offers to you about whether phone verification is a thing their anti-spam algorithms can trigger...

Re:Discord says 70k users may have had their government IDs ... by jjulius on Thursday October 09, 2025 @08:34AM (#45526721)
The funny thing about evidence is that Discord even has a page stating exactly what LoganDark said...

https://support.discord.com/hc/en-us/articles/6181726888215-...

Re:Discord says 70k users may have had their government IDs ... by LoganDark on Thursday October 09, 2025 @08:34AM (#45526734)
A simple Google search turns up results from years ago that are still valid today: https://old.reddit.com/r/discordapp/comments/ircyh1/locked_o...

> You'll be required to register a phone number to your Discord account in order to continue the use of it.

Re:Discord says 70k users may have had their government IDs ... by zahlman on Thursday October 09, 2025 @09:57AM (#45527784)
I didn't claim that it didn't happen to you, or that it never happens. You seemed to be implying that it will always happen, or commonly happen; my experience is proof that it doesn't always happen, and at least as strong evidence for it rarely happening as your experience is of it frequently happening.
Re:Discord says 70k users may have had their government IDs ... by jjulius on Thursday October 09, 2025 @11:58AM (#45529501)
>I didn't claim that it didn't happen to you, or that it never happens.

The following is worded in such a way that it very much reads that you're saying it doesn't happen...

>When other people say that something happens to them, why should I simply take them at their word when it contradicts the evidence actually available to me?

You've very clearly said that if something hasn't happened to you, you're not likely to believe someone when they tell you it's happened to them. Further...

>You seemed to be implying that it will always happen, or commonly happen...

... there was no implication. The comment you initially responded to clearly stated specific instances that will trigger the phone number requirement, the same instances that are very clearly stated by Discord[1] itself.

[1]https://news.ycombinator.com/item?id=45526721

Re:Discord says 70k users may have had their government IDs ... by zahlman on Thursday October 09, 2025 @12:40PM (#45530059)
> The comment you initially responded to clearly stated specific instances that will trigger the phone number requirement

And I'm saying that I've personally been (as far as I can tell) in some of the situations described without encountering such requirement, therefore "will" is hyperbolic.

It especially doesn't make sense to me that there would be a flag for "joining too many servers" because they put a hard cap on that anyway. And indeed, the support article says that this triggers for joining too many servers in a short period of time.

Re:Discord says 70k users may have had their government IDs ... by xorbax on Wednesday October 08, 2025 @10:24PM (#45522831)
It never happened to him, so it's never happened

Makes this huge data leak a real head scratcher

Re:Discord says 70k users may have had their government IDs ... by jjulius on Wednesday October 08, 2025 @10:28PM (#45522866)
It has happened to me on two accounts. OP is also not the only other person I've seen who has dealt with it.

Bully for you that you haven't encountered it, but it's certainly a thing.

Re:Discord says 70k users may have had their government IDs ... by BoorishBears on Wednesday October 08, 2025 @10:24PM (#45522838)
Anyone on HN should know the fickle nature of fraud detection, especially when the cost of getting it wrong is 0.
Re:Discord says 70k users may have had their government IDs ... by frumplestlatz on Wednesday October 08, 2025 @10:05PM (#45522721)
I refuse to use their “create a server” language. It is not a server by any definition of the word server.

You can set up a community on their servers.

I’m not sure why they chose to use misleading language, but it is misleading.

Re:Discord says 70k users may have had their government IDs ... by Gigachad on Wednesday October 08, 2025 @11:27PM (#45523178)
It’s wrong in terms of the technical implementation and right in terms of user experience.

Gamers are well familiar with different communities actually hosting servers and instances for games or voice chat pre discord. Discord offers the same experience but without physically being different servers. Keeping the name guides users in the same way OSs call it a recycling bin despite not actually being a bin.

Re:Discord says 70k users may have had their government IDs ... by noitpmeder on Wednesday October 08, 2025 @11:26PM (#45523169)
I'm not sure it matters in this situation ...? Server/instance/VM/shard/... when used in this context is pure corporate naming BS. They'd have called it "setting up a new circle jerk" if they thought it would increase metrics
Re:Discord says 70k users may have had their government IDs ... by Aachen on Thursday October 09, 2025 @01:05AM (#45523730)
Fun fact: Discord called them guilds before realising that they could compete with paid services that set up actual (e.g. Mumble) servers for you by pretending this is equivalent and free

I also have trouble going along with the doublespeak. If a supermarket called their beer apple juice, I'd also not be offering my friends "apple juice", I'd call it what it is

Guild is innocuous enough and since the API docs still call their communities that, that can be a term to use among those in the know to have common and clear terminology

'Guilds in Discord represent an isolated collection of users and channels, and are often referred to as "servers" in the UI.' —https://discord.com/developers/docs/resources/guild

Re:Discord says 70k users may have had their government IDs ... by monerozcash on Thursday October 09, 2025 @04:25AM (#45524993)
This seems like a distinction without a difference. If you used a paid service offering Mumble servers that used some custom software that allowed them to offer multiple ... "servers" on different ports/IP addresses from a single daemon, would you really care?

Focusing on the fact that it's not really a "server" because they aren't running as separate processes seems like utterly silly pedantry, and we probably don't even know if that's actually true regarding Discord or not.

Re:Discord says 70k users may have had their government IDs ... by wizzwizz4 on Thursday October 09, 2025 @11:52AM (#45529411)
The distinction matters. The cost (to my users) of switching from one Mumble server to another is the same, regardless of who hosts the server. The cost of switching from one "Discord server" to another is much lower than the cost of switching between Discord and any Discord clone, keeping people on Discord.
Re:Discord says 70k users may have had their government IDs ... by monerozcash on Thursday October 09, 2025 @08:27PM (#45534390)
That's not some inherent feature of it being a server or not, that's a feature of Discord offering much more features than Mumble.
Re:Discord says 70k users may have had their government IDs ... by wizzwizz4 on Saturday October 11, 2025 @09:16AM (#45548908)
No, it's a feature of Discord putting all the "Discord servers" into one program, but not allowing third-party servers to be listed in the same program. A rival system offering exactly the same featureset as Discord is nonetheless not interoperable with Discord, whereas a Mumble rival could easily be interoperable with Mumble clients.
Re:Discord says 70k users may have had their government IDs ... by Aachen on Friday October 10, 2025 @04:12AM (#45536447)
A server, to me, you have control over if that's the product name of what you rent. Discord servers are as much yours as Hacker News is yours

It's like pretending a taxi is the same as owning a vehicle, even if the taxi company was your neighbor and there's always someone available. The result is the same but the distinction couldn't be clearer. To me it's similarly misrepresentative to say you own a car when you live next to a big taxi station, as to say the SaaS web front-end you get on Discord is a rented server

Re:Discord says 70k users may have had their government IDs ... by monerozcash on Friday October 10, 2025 @07:10AM (#45537505)
That definition sounds a lot like it would exclude services renting Mumble servers. It's difficult to reconcile this with your previous comment.
Re:Discord says 70k users may have had their government IDs ... by nulld3v on Wednesday October 08, 2025 @10:38PM (#45522925)
I also wish open-source communities would move off of Discord for another reason: Users are limited to joining a maximum of 100 servers.

I've hit the cap and it's driving me crazy. It's really easy to hit it since each friend group, hobby group, gaming community, and open-source community often all have their own servers.

Re:Discord says 70k users may have had their government IDs ... by noitpmeder on Wednesday October 08, 2025 @11:23PM (#45523161)
I can barely keep up with 6 semi active discord servers, each with tens of semi active channels... Much less think about doing it with hundreds. More power to you, must have figured out a good notification scheme
Re:Discord says 70k users may have had their government IDs ... by jamwil on Thursday October 09, 2025 @05:03AM (#45525238)
I am super curious how other people use discord. I’m like you—trying and basically failing to keep up with 6 servers. I just want to watch a power user out of morbid curiosity. I suspect they are also browser tab hoarders, which I’m also curious about.
Re:Discord says 70k users may have had their government IDs ... by nulld3v on Thursday October 09, 2025 @03:39PM (#45532136)
I don't really care about the notifications. I just want to read what's in the servers. Lots of communities post their announcements/links/resources in their Discord servers.

It is sometimes possible to view a Discord server without joining it, but it is painful compared to just joining the server.

Re:Discord says 70k users may have had their government IDs ... by Aachen on Thursday October 09, 2025 @12:59AM (#45523690)
That limit is per account, right?