this post was submitted on 16 Jan 2024

-5 points (14.3% liked)

Technology

59331 readers

4840 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

[email protected]

-5

Discord Servers asking for Phone Numbers and 'Verification Levels' (lemmy.world)

submitted 10 months ago* (last edited 9 months ago) by [email protected] to c/[email protected]

49 comments fedilink hide all child comments

cross-posted from: https://lemmy.world/post/10799766

(Edit: Cross-posted OP (link above) was mod removed by the Discord forum 'admin' on 2024-01-19 as being "False claim, false interpreted", so the above link will no longer work.)

Recently read this on a Steam game's reviews section ...

User Comment...

The game's Discord REQUIRES your personal phone number to get access at all. This is a very intrusive, and 100% unnecessary requirement, in order to just be able to interact with others about the game, it's content, player experiences, and many other things. It's also intrusive in regards to being able to contribute any input to help other players in any way at all.

Dev Response...

It's Discord that's asking you for verification of the account. We're not getting your phone number. This is standard practice on bigger servers that allows for a better user experience, filtering bots/ spam accounts, trolls, etc.

Could companies please STOP lying about it being Discord's choice, its not, is the Discord server's choice to ask for it.

Its a "Verification Levels" setting that the server op sets, and they have multiple options that they can choose from, its not an on/off switch. They can dial it back one notch and still have spam/bot protections.

The only difference between "High" and "Highest" verification levels is the addition of asking for a phone number, all other features of "High" is in "Highest", and "Highest" has no other extra features besides asking for the phone number.

Makes it really hard to have an pseudonym account on the Internet, for gaming purposes, and then be asked for your real phone number. I don't need to be tracked 24/7.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] -1 points 10 months ago (1 children)

I mean, I sort of get why the developers say it’s Discord’s policy even if it’s a bit misleading.

“It’s Discord that’s asking you for verification”

The language on that is very plain, and a lie, as it is the server admins, and not the Discord corporation, who are asking for it, by having the ‘Highest’ verification level setting, vs. just the ‘High’ setting.

Game developers don’t really want to moderate their own discord server and simply want to use the strictest automated filtering system available and this just happens to include phone number linking.

The only difference between the 'High' and 'Highest' verification level setting is the asking of the phone number. All other verification features (email validation/verification, time on the server before approval, etc.) are the same.

The operators of the servers themselves do not have access to these phone numbers and they are only stored by discord directly to prevent spam.

How exactly does that prevent spam, vs just using other existing established verification methods like email validation? If the only goal is preventing spam, its overkill, and other web sites who also have to contend with spam don't use it.

Finally, I'd feel allot better about it if a trusted third party verified that its not used for marketing reasons, and that we all just didn't take Discord's word for it. I don't know this as fact, but I can't help thinking that we are being lied to, and that the number is used to link our Internet pseudomnames to real-life persons (via agregate gathering/purchasing of data via third-party brokers).

Having said all that, my post wasn't about what is done with the number (that's a whole other topic), just the fallacy of stating who is requesting the number (Discord vs server admins).

[–] [email protected] 0 points 10 months ago (1 children)

How exactly does that prevent spam, vs just using other existing established verification methods like email validation? If the only goal is preventing spam, its overkill, and other web sites who also have to contend with spam don’t use it.

It's trivial to create new accounts and emails to verify those accounts. It is not trivial to get a new phone number since virtual numbers are blocked by the verification process.

[–] [email protected] -1 points 10 months ago (2 children)

It’s trivial to create new accounts and emails to verify those accounts.

Is it really that trivial, especially while having to spend your own money to do so?

And can't that be detected in the same way that virtual phone numbers are detected by Discord currently?

You get your ISPs email address, and you could have your Google address, what else?

Granted, a phone number is better than email for verification, but plenty of websites work off email verification today successfully.

[–] [email protected] 1 points 10 months ago

You get your ISPs email address, and you could have your Google address, what else?

I host my own email. I have literally billions of email addresses available if I want them and getting billions more only costs however much I can get a new domain registration for, which isn't often more than $10. I already own a dozen domains or more and I can have any username I want at any of those domains for any email at no additional cost.

Now I'm not some dickhead harassing people online or spamming discord servers, but I will admit that Wendy's once had a deal where you could get a free frosty for creating a new account and I had free frosty coupons for weeks before they realized that email only verification for unique users was a losing proposition and they switched to requiring that new accounts attach a phone number.

Email verification only works if you've got nothing to lose. As soon as there's anything on the line, you'd better look for something more concrete like a phone number, a credit card, or a government ID. Personally I'm more comfortable with Discord having one of those pieces of info before the other two, but that's just me, you do you.

[–] [email protected] 0 points 10 months ago (1 children)

What are you talking about? There are endless services where you can get a free email address without spending a cent. Verifying that an email is genuine is a much harder ask than you might think.

[–] [email protected] -1 points 10 months ago (1 children)

Verifying that an email is genuine is a much harder ask than you might think.

Fair enough, but then how is it used today successfully by websites?

[–] [email protected] 0 points 10 months ago (1 children)

That's the thing, it's not. Lots, and I mean lots of sites are plagued by bot activity. The ones hardest hit are the ones that only have email validation.

I could go to Google and create a new account right now, absolutely free.

Hell, I could write a script that creates a million for me for barely any money, just paying a CAPTCHA farm a nominal sum to solve the robot tests for me. This is why sites like discord are plagued with advertisement bots, the bar to entry is literally nothing.

Phone numbers cost money to create, and are in finite supply. Even PAYG (pre paid numbers for you Americans) numbers require you to go outside and purchase a SIM card from a store. They aren't foolproof, but they stop the vast majority of fake accounts.

[–] [email protected] -1 points 10 months ago

That’s the thing, it’s not. Lots, and I mean lots of sites are plagued by bot activity. The ones hardest hit are the ones that only have email validation.

But those other websites that suffer the same kind of issues work successfully without asking for a phone number, just via email verification. I don't see why Discord should be any different.

Phone numbers cost money to create, and are in finite supply. Even PAYG (pre paid numbers for you Americans) numbers require you to go outside and purchase a SIM card from a store. They aren’t foolproof, but they stop the vast majority of fake accounts.

I understand all of those ramifications, and not arguing against it.

However, it's moving the onus of dealing with the issue from the website owners to the users who use the website. It causes the users to lose their anonymity, and allows their website usage to be tracked and sold. That's a step too far.