A newly released tool claims it can bypass Discord\u2019s age verification system by allowing users to control a 3D model of a computer-generated man in their browser instead of scanning their real face.On Monday, Discord announced it was launching teen-by-default settings globally, meaning that more users may be required to verify their age by uploading an identity document or taking a selfie. Users responded with widespread criticism, with Discord then publishing an update saying, \u201cYou need to be an adult to access age-restricted experiences such as age-restricted servers and channels or to modify certain safety settings.\u201dThe tool, however, shows those age verification checks may be bypassed. 404 Media previously reported kids said they were using photos of Trump and G-Man from Half Life to bypass the age verification software in the popular VR game Gorilla Tag. That game uses the service k\u2013ID, which is the same as what Discord is using.\u00a0Discord\u2019s announcement also comes after a recent catastrophic data breach impacted Discord user data, including selfies and identity documents uploaded as part of the app\u2019s verification process.\ud83d\udca1Do you know anything else about how people are bypassing Discord’s age verification system? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.The tool, simply called Discord ID Bypass Tool, runs in a user\u2019s browser. After downloading and opening it, the tool displays a 3D model of a man. Users can then control the man\u2019s head and mouth movements with their keyboard or a controller.\u00a0When verifying someone\u2019s age, Discord asks them to turn on their camera, position their face in a circle on screen, and follow a series of commands. This is to ensure the person is real and not some static image.\u201cTilt your head up,\u201d \u201cClose your mouth,\u201d and \u201cTurn your face right\u201d are some examples.The new tool appears to allow a user to do all of those things, but with the computer-generated persona instead. Github user and tool creator Promptpirate-x uploaded a demonstration video claiming to bypass the age verification check.\u00a0<\/p>\n
0:00<\/p>\n
\/0:05<\/p>\n
1\u00d7<\/p>\n
Image: 404 Media’s test of the software.
\n k-ID is an Andreessen Horowitz funded company that on its website says it is \u201cfounded by internationally renowned experts in online safety, privacy, and gaming.\u201d It adds that the company\u2019s technology \u201cenables businesses to provide age-appropriate experiences that respect young users, satisfy regulatory requirements, and reduce the need for children to misrepresent themselves online.\u201dA k-ID spokesperson told 404 Media in an email \u201cAt present all of our monitoring shows systems are working as expected. We are watching very closely for any impact from bypass attempts.\u201dThey said in another email \u201cThese are not ID checks and they are not identity verification of any kind. They are age estimations that run locally on a user’s device, as a proportionate way to balance privacy vs age-appropriate access. Reporting of these bypass attempts is helpful as it allows us to defend against them, which is a continuous process.\u201dDiscord did not respond to a request for comment.Discord\u2019s age verification roll out comes as a host of other services respond to the UK\u2019s law requiring the practice, and more than half of U.S. states passing laws requiring verification to access pornography sites.<\/p>\n","protected":false},"excerpt":{"rendered":"