Feed aggregator

Zero-cost delegates in .NET 10

Hacker News - Fri, 02/20/2026 - 9:21am
Categories: Hacker News

Age verification vendor Persona left frontend exposed

Malware Bytes Security - Fri, 02/20/2026 - 9:08am

Three researchers investigating Discord’s age-verification checks say they discovered an exposed frontend belonging to Persona, the identity-verification vendor used by Discord. It revealed a far more expansive surveillance and financial intelligence stack than a simple “teen safety” tool.

A short while ago we reported that Discord will limit profiles to teen-appropriate mode until you verify your age. That means anyone would wants to continue using Discord as before would have to let it scan their face—and the internet was far from happy.

To analyze these scans, Discord uses biometric identity verification start-up Persona Identities, Inc. a venture that offers Know Your Customer (KYC) and Anti-Money Laundering (AML) solutions that rely on biometric identity checks to estimate a user’s age.

To demonstrate the privacy implications, researchers took a closer look and found a publicly exposed Persona frontend on a US government–authorized server, with 2,456 accessible files.

You read that right. According to the researchers, the exposed code, which has now been removed, sat at a US government-authorized endpoint that appears to have been isolated from its regular work environment.

In those files, the researchers found details about the extensive surveillance Persona software performs on its users. Beyond checking their age, the software performs 269 distinct verification checks, runs facial recognition against watchlists and politically exposed persons, screens “adverse media” across 14 categories (including terrorism and espionage), and assigns risk and similarity scores.

Persona collects—and can retain for up to three years—IP addresses, browser and device fingerprints, government ID numbers, phone numbers, names, faces, plus a battery of “selfie” analytics like suspicious-entity detection, pose repeat detection, and age inconsistency checks.

At a time when age verification is very much a hot topic, this is not the kind of news to persuade privacy advocates that age verification is in our best interest. Sending data obtained during age verification checks to data brokers and foreign governments—reportedly Persona was tested by Discord in the UK—will not install the level of trust needed for users to feel comfortable submitting to this kind of scrutiny.

This comes amid broader questions about whether age verification is actually doing what it’s supposed to do. Euronews looked at the effect of Australia’s world-leading ban on social media for under-16s. Australia’s new rules have only been in force for six weeks, but while the country’s internet regulator says it has shut down about 4.7 million accounts held by under‑16s on platforms like TikTok, Instagram, Snapchat, YouTube, X, Twitch, Reddit, and Threads, children and parents describe a very different reality. Interviews with teenagers, parents and researchers indicate that many children are still accessing banned apps through simple workarounds.

According to The Rage,  Discord has stated it will not continue to use Persona for age verification. However, other platforms reported to use Persona include:

  • Roblox: Uses Persona’s facial age estimation and ID verification as the core of its “age checks to chat” system.
  • OpenAI / ChatGPT: OpenAI’s help center explains that if you need to verify being 18+, “Persona is a trusted third-party company we use to help verify age,” and that Persona may ask for a live selfie and/or government ID.
  • Lime: The ride-sharing service deploys custom age verification flows with Persona to meet each region’s unique requirements.

We don’t just report on threats – we help protect your social media

Cybersecurity risks should never spread beyond a headline. Protect your social media accounts by using Malwarebytes Identity Theft Protection.

Categories: Malware Bytes

I built an SEO API with 100M+ keywords

Hacker News - Fri, 02/20/2026 - 8:32am

Article URL: https://vebapi.com

Comments URL: https://news.ycombinator.com/item?id=47087834

Points: 1

# Comments: 1

Categories: Hacker News

How to get qualiy traffic to my side project?

Hacker News - Fri, 02/20/2026 - 8:30am

Article URL: https://pickedvids.com

Comments URL: https://news.ycombinator.com/item?id=47087808

Points: 1

# Comments: 1

Categories: Hacker News

The Car Wash Problem: A variable isolation study on prompt architecture

Hacker News - Fri, 02/20/2026 - 8:23am

Most AI products inject facts and hope reasoning follows. But intelligence is not measured by how much a model holds in its context window. It is measured by knowing to pick up the keys before leaving the house.

Last week, the "Car Wash problem" (50m away, walk or drive?) went viral here on HN. Every major LLM failed because they missed the implicit physical constraint: the car must be there. While testing InterviewMate's prompt architecture, I posed the same question. It answered drive immediately. Every other LLM had failed. But I didn't actually know why it worked — so I ran a variable isolation study to find out. 100 API calls, Claude Sonnet 4.5, 5 conditions:

Baseline (no prompt): 0% Role only: 0% Context injection (user profile, car location): 30% Structured reasoning (STAR framework): 85% Full stack (both combined): 100%

Throwing facts at the model doesn't work unless the architecture forces it to explicitly evaluate the task goal first. Without structure, the model jumps straight to the distance heuristic: "100m is short, walk." I'm writing a paper on this. Wanted to share the raw data with HN first. Code and raw eval data: https://github.com/JO-HEEJIN/interview_mate/tree/main/car_wash

Comments URL: https://news.ycombinator.com/item?id=47087746

Points: 1

# Comments: 0

Categories: Hacker News

Show HN: InkSight – An open-source, LLM-powered e-ink display for "slow info"

Hacker News - Fri, 02/20/2026 - 8:23am

Generate personalized content based on the current environment (weather, time, date, and solar terms) via backend LLMs (DeepSeek / Qwen / Kimi) for display on a 4.2-inch E-ink screen.

Comments URL: https://news.ycombinator.com/item?id=47087739

Points: 1

# Comments: 1

Categories: Hacker News

Show HN: AccessiGuard – Free WCAG Scanner with CLI and GitHub Action

Hacker News - Fri, 02/20/2026 - 8:23am

Hey HN. I built a free accessibility scanner that checks 33 WCAG 2.1 criteria against any URL.

CLI: npx accessiguard scan your-site.com GitHub Action: github.com/PrimeStark/accessiguard-action (posts a11y report on every PR)

I was an engineering manager who got frustrated watching teams skip accessibility because audits cost $500+ and took weeks. So I built something you can run in 30 seconds from your terminal.

Free tier, no signup for single scans. Would love feedback on what checks to add next.

https://accessiguard.appa

Comments URL: https://news.ycombinator.com/item?id=47087734

Points: 1

# Comments: 0

Categories: Hacker News

Pages