this post was submitted on 12 Feb 2026
68 points (93.6% liked)
Technology
81374 readers
4945 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
This is like 20 lines of code, so shouldnt take long to verify for someone that knows what they are doing.
Looks to me like they're essentially redirecting the request from the normal api to do age checks to their own api, and just saying "Sure, they're an adult" to discord (since that is all the "proper" api tells them). There are easy ways for Discord to fix this. So do not expect it to work for long.
What could be risky? Well it seems to be loading some libraries. What are they doing? Don't know, didn't check. Probably just keeping the line count of the actual code down. But, who knows?
The other thing (and they of course do need to do this). They pass the full URL that would be sent to the "proper" api to their own. So if there is some private info about you/your account they usually send on, these guys would have that data too.
Just a quick 5 minute look though. I didn't look too much into it because, I'm not going to use it :P
EDIT: Looks like they actually detail what they do and it seems to involve actually tricking the age verification api too. Interesting stuff. Still not going to do it.
Wait... Those amateurs [at discord and the age check company] didn't even think of signing the check in any way and then verifying the data they get send back? That's not even hard to implement?!
Well, as I added in the edit. I think they do a bit more and actually fool the verification site since they don't send the whole image, they do the work locally (which is good, for privacy). So they fake valid looking metadata and then presumably get a signed result back which they dutifully pass on to discord.