Disqus

Short description: Website comment hosting service

Disqus, Inc.

Type| Subsidiary
Industry| Audience engagement
Founded| October 30, 2007; 18 years ago (2007-10-30)
Founder| Daniel Ha
Jason Yan
Headquarters| San Francisco, California , U.S

Area served

| Worldwide

Key people

| Daniel Ha (CEO)
Jason Yan (CTO)

Number of employees

| 61 (2014)[1]
Parent| Zeta Global
Website| {{{1}}}

Disqus (/dɪsˈkʌs/) is an American blog comment hosting service for websites and online communities that use a networked platform. The company's platform includes various features, such as social integration, social networking, user profiles, spam and moderation tools, analytics, email notifications, and mobile commenting. It was founded in 2007 by Daniel Ha and Jason Yan as a Y Combinator startup.

In 2011, Disqus was ranked No. 2 in Quantcast's U.S. networks with 151 million monthly unique U.S. visits.[2] Disqus was featured on CNN, The Daily Telegraph, and IGN, and about 750,000 blogs and websites.[3]

On December 5, 2017, Disqus was acquired by Zeta Global.[4][5]

## Contents

* 1 History
* 2 Business model
* 3 Functionality
* 3.1 Language support
* 4 Criticism, privacy, and security concerns
* 4.1 2013 security breach
* 4.2 October 2017 security breach
* 4.3 Issues with delete button
* 4.4 Affiliate links and third-party scripts
* 4.5 GDPR violation
* 5 References
* 6 External links

## History

Disqus was first developed in the summer of 2007 as a Y Combinator startup. It was headed by Daniel Ha and Jason Yan, who were undergraduates at the University of California, Davis.[6] Disqus was launched on October 30, 2007.[7]

In early 2011, Disqus raised $10 million in funding from North Bridge Venture Partners and Union Square Ventures.[8]

In March 2011, Disqus was used by 75% of websites that included a third-party commenting or discussion system.[9][original research?]

On December 5, 2017, Zeta Global announced that it had acquired Disqus for an undisclosed amount.[4][5] In a blog post, Disqus stated that it planned to continue operations as normal.[10]

## Business model

Disqus operates on the ad-supported freemium financial model. While the service is free to use for commenters and small websites, it displays ads. Users can pay optional fees to hide ads and unlock additional features.

In November 2010, Disqus began officially offering three add-on packages for websites.

Starting July 2012, Disqus offered just two premium packages. These were the VIP package and a single-sign-on-only package, for $99/month.

Starting in March 2013, Premium packages were phased out.

On January 4, 2017, Disqus announced new premium packages rolling out in March of 2017.[11] A later blog post clarified that over 95% of sites using Disqus, primarily for personal blogs and non-commercial sites, would be unaffected by the new premium model.[12]

## Functionality

### Language support

In 2011, both the Disqus site and comment system were translated into over sixty languages. However, following the introduction of the new Disqus in 2012, language support was reduced to seven languages.[13] Even though Disqus accepts applications for new languages,[14] only one has been added as of 2013. This saw the number of supported languages rising to eight.

As of 2017,[15] Disqus was translated into 36 languages including Spanish, French, Japanese, and Chinese, using crowd-sourced translation on Transifex.[16]

## Criticism, privacy, and security concerns

This article's Criticism or Controversy section may compromise the article's neutral point of view of the subject. Please use neutral point of view structure of this section (November 2012)

|

Privacy issues have been noted as inherent in the use of services like Disqus, which serve their content through third-party JavaScript widgets.[17][18][19]

As with other embedded web widgets, such as like buttons, the Disqus widget acts as a web bug which tracks a user's activities, even when they are not logged in, across different sites that use the Disqus commenting system. Information tracked by Disqus, which may be disclosed to third parties, includes pseudonymous analytics data, such as a user's IP address, their web browser version and installed add-ons, and their referring pages and exit links.[20] Although this data is referred to by Disqus as "Non-Personally Identifiable Information", such data, when aggregated, has been shown to be usable for de-anonymizing users.[18]

Disqus has also been criticized for publishing its registered users' entire commenting histories, along with a list of connected blogs and services, on the publicly viewable user profile pages.[21] The option to keep profile activity private was later added.

Disqus also was criticized for not giving users control over who follows them. Prior to 2014, any user could follow any other user, but a user being followed could not control or block who was following them, which led to harassment among some users.[22]

If Disqus shuts down, hundreds of millions of comments would be wiped away from a wide range of sites, since by the very nature of the service, comment content is not being managed locally by sites implementing the service. However, it is possible for site administrators to export all of their comments as an XML document which can then be ported into other commenting systems.[23]

In September 2014, it announced an update to its privacy policy: "Disqus will be using anonymous interest data for content personalization and ad targeting."[24]

Third party service Disqussearch can be used to search through all comments by username. This is necessary for viewing old comments of users. On the Disqus site, the user can only load small batches of successively older comments by scrolling down.[25]

### 2013 security breach

In 2013, a Swedish group called Researchgruppen obtained and exposed a large number of anonymous Disqus identities through the application programming interface (API).[26] The group cooperated with the Bonnier tabloid, Expressen, who subsequently visited some of the commenters in their homes, confronting them with their allegedly racist, misogynic, and derogatory sentiments. Researchgruppen said their database contained millions of comments from Disqus users around the world who are at risk of de-anonymization.[27][28][29] In March 2014, Expressen and Researchgruppen won the investigative reporting award Guldspaden.[30]

### October 2017 security breach

On October 6, 2017, Disqus announced that a snapshot of its database from 2012, containing 17.5 million users' email addresses, login names and sign-up dates from between 2007–2012, had been exposed.[31] The data dump also included, for about a third of the affected accounts, passwords that had been salted and hashed with SHA-1.[31][32][33][34]

### Issues with delete button

Previously, if a user attempted to delete their comment, Disqus "anonymized" their comment by changing the author to a Guest user, without removing the content of the body itself.[35] The only recourse at that time was to flag the comment, contact the site moderator to delete the anonymized Guest comment, or to remember to edit out the body of the comment before deleting a comment.

In April 2015, Disqus revised its Delete button to completely delete a comment from the website.[36][37]

### Affiliate links and third-party scripts

Disqus automatically adds affiliate referral codes to links on the containing webpage and converts plain text into links, in order to add affiliate referral codes (this can be turned off).[38] Disqus also injects untrusted and potentially dangerous third party advertising code into containing webpages.[39]

### GDPR violation

In 2021, Norway Data Protection Agency announced its intent to fine Disqus 2.5 million euro for failures to comply with requirements of European General Data Protection Regulation. Allegedly, Disqus was collecting users' private data and sharing it with advertisers without obtaining consent from websites using Disqus and users visiting those sites.[40]

## References

1. ↑ "Disqus team member tweets current headcount". Matt Robenolt. https://twitter.com/mattrobenolt/status/533693963249516544.
2. ↑ "Disqus Network Traffic and Demographic Statistics by Quantcast" . Retrieved October 18, 2011.
3. ↑ "The Numbers of Disqus". May 4, 2011. Blog.disqus.com, Retrieved October 18, 2011.
4. ↑ 4.0 4.1 "Zeta Global Acquires Disqus". https://www.prnewswire.com/news-releases/zeta-global-acquires-disqus-300566451.html?tc=eml_cleartime.
5. ↑ 5.0 5.1 Lardinois, Frederic. "Zeta Global acquires commenting service Disqus" (in en). TechCrunch. https://techcrunch.com/2017/12/05/zeta-global-acquires-commenting-service-disqus/.
6. ↑ "Disqus lays off 11 as it plans a deeper focus on data" (in en-US). TechCrunch. https://techcrunch.com/2016/12/13/disqus-lays-off-11-as-it-plans-a-deeper-focus-on-data/.
7. ↑ Stamatiou, Paul (2007-10-30). "Disqus Officially Launches". https://paulstamatiou.com/disqus-officially-launches/.
8. ↑ "Commenting startups Disqus celebrates its birthday with $10M more - VentureBeat". 4 May 2011. https://venturebeat.com/2011/05/04/disqus-funding/.
9. ↑ "Lijit Study Shows Publisher Adoption of Social Media Tools Grows 80%". 5 July 2013. http://www.lijit.com/blog/2011/03/02/lijit-study-shows-publisher-adoption-of-social-media-tools-grows-80/.
10. ↑ "Disqus and Zeta". https://blog.disqus.com/disqus-and-zeta.
11. ↑ Ha, Daniel. "Our Plans for 2017". Disqus. https://blog.disqus.com/our-plans-for-2017.
12. ↑ Paganini, Mario. "Advertising will remain optional for over 95% of sites on Disqus". Disqus. https://blog.disqus.com/advertising-will-remain-optional-for-over-95-of-sites-on-disqus.
13. ↑ "What's New for the New Disqus - Disqus: The Official Blog". 30 June 2013. http://blog.disqus.com/post/35273949228/whats-new-for-the-new-disqus.
14. ↑ "Translating Disqus". http://help.disqus.com/customer/portal/articles/466219-what-languages-does-disqus-support-.
15. ↑ "How We're Making Disqus Available in New Languages". Disqus. https://blog.disqus.com/how-were-making-disqus-available-in-new-languages.
16. ↑ "Translating Disqus". Disqus. https://help.disqus.com/customer/portal/articles/466219-what-languages-does-disqus-support-.
17. ↑ "#5667 (Is DISQUS a solution for spam-free comments?) : Support". https://support.mayfirst.org/ticket/5667.
18. ↑ 18.0 18.1 "There is no such thing as anonymous online tracking", Stanford Center for Internet and Society. July 28, 2011. Retrieved Jun, 10, 2012
19. ↑ "Disqus Spies On You!". http://citizensteven.blogspot.ca/2011/06/disqus-spies-on-you.html.
20. ↑ "Privacy Policy" Disqus.com Retrieved June 10, 2012
21. ↑ Thomas Baekdal, "The First Rule of Privacy", February 25, 2010. Retrieved June 10, 2012
22. ↑ "Following other users". http://help.disqus.com/customer/portal/articles/708520-following-other-users.
23. ↑ "Comments Export". DISQUS. http://help.disqus.com/customer/portal/articles/472149.
24. ↑ "Update to Disqus Privacy Policy". September 29, 2014. https://help.disqus.com/customer/portal/articles/1670950.
25. ↑ Disqus comment search
26. ↑ "Statement in Response to a Report of 'Cracking Disqus'", Disqus, December 10, 2013
27. ↑ Landes, David (12 December 2013). "Swedes uncover Disqus user security breach". The Local. http://www.thelocal.se/20131212/millions-of-disqus-comments-leaked-to-swedish-group.
28. ↑ "'I hope they starve' post fells Sweden Democrat". The Local. 10 December 2013. http://www.thelocal.se/20131210/sweden-democrat-resigns-after-asylum-seeker-hope-they-starve-post.
29. ↑ "Expressen-artiklar får Disqus att uppdatera" (in sv). Computer Sweden. 11 December 2013. http://computersweden.idg.se/2.2683/1.538270/expressen-artiklar-far-disqus-att-uppdatera.
30. ↑ Byttner, Karl-Johan (24 March 2014). "Expressen-grävaren om Guldspaden-vinsten" (in sv). Resumé. http://www.resume.se/nyheter/media/2014/03/24/expressen-gravaren-om-guldspaden-vinsten/.
31. ↑ 31.0 31.1 "Security Alert: User Info Breach". 6 October 2017. https://blog.disqus.com/security-alert-user-info-breach.
32. ↑ "Learning from the Disqus data breach". 10 October 2017. https://nakedsecurity.sophos.com/2017/10/10/learning-from-the-disqus-data-breach/.
33. ↑ "Disqus Breach: 17.5 Million Emails Exposed By Login Hack". 9 October 2017. http://www.ibtimes.com/disqus-breach-175-million-emails-exposed-login-hack-2599013.
34. ↑ "Disqus reveals it suffered a security breach in 2012". https://www.engadget.com/2017/10/06/disqus-reveals-it-suffered-a-security-breach-in-2012/.
35. ↑ "Why when I delete a comment from sites does it then come back as a guest comment?". Disqus knowledge base. https://help.disqus.com/customer/portal/questions/8012498-why-when-i-delete-a-comment-from-sites-does-it-then-come-back-as-a-guest-comment-.
36. ↑ "Disqus - You can now delete your own comments". Disqus. https://disqus.com/home/channel/discussdisqus/discussion/channel-discussdisqus/you_can_now_delete_your_own_comments/.
37. ↑ "Remove and edit your comments". Disqus knowledge base. https://help.disqus.com/customer/en/portal/articles/466229-remove-and-edit-your-comments.
38. ↑ "Disqus - Disqus Reveal affiliate links on by default, bad for SEO". https://disqus.com/home/discussion/channel-discussdisqus/disqus_reveal_affiliate_links_on_by_default_bad_for_seo/.
39. ↑ "Troy Hunt: Disqus' mixed content problem and fixing it with a CSP". November 14, 2016. https://www.troyhunt.com/disqus-mixed-content-problem-and-fixing-it-with-a-csp/.
40. ↑ "Disqus facing $3M fine in Norway for tracking users without consent" (in en-US). May 5, 2021. https://social.techcrunch.com/2021/05/05/disqus-facing-3m-fine-in-norway-for-tracking-users-without-consent/.

## External links

* v
* t
* e

Hacking in the 2010s

| <- 2000s | Timeline | 2020s ->

|
|

Major incidents|

| 2010|

* Operation Aurora
* Australian cyberattacks
* Operation ShadowNet
* Operation Payback

|

2011|

* DigiNotar
* DNSChanger
* HBGary Federal
* Operation AntiSec
* Operation Tunisia
* PlayStation
* RSA SecurID compromise

2012|

* LinkedIn hack
* Stratfor email leak
* Operation High Roller

2013|

* South Korea cyberattack
* Snapchat hack
* Cyberterrorism Attack of June 25
* 2013 Yahoo! data breach

2014|

* Anthem medical data breach
* Operation Tovar
* iCloud leaks of celebrity photos
* 2014 JPMorgan Chase data breach
* Sony Pictures hack
* Russian hacker password theft
* 2014 Yahoo! data breach

2015|

* Office of Personnel Management data breach
* Hacking Team
* Ashley Madison data breach
* VTech data breach
* Ukrainian Power Grid Cyberattack
* SWIFT banking hack

2016|

* Bangladesh Bank robbery
* Hollywood Presbyterian Medical Center ransomware incident
* Commission on Elections data breach
* Democratic National Committee cyber attacks
* Vietnam Airport Hacks
* DCCC cyber attacks
* Indian Bank data breaches
* Dyn cyberattack
* Russian interference in the 2016 U.S. elections

2017|

* 2017 Macron e-mail leaks
* WannaCry ransomware attack
* Westminster cyberattack
* Petya cyberattack
* 2017 cyberattacks on Ukraine
* Equifax data breach
* Deloitte breach
* Disqus breach

2018|

* Trustico
* Exactis
* Atlanta cyberattack

2019|

* Sri Lanka cyberattack
* Baltimore ransomware attack
* 2019 Bulgarian revenue agency hack
* Capital One data breach
* Zynga Breach

Groups|

| Hacktivism|

* Anonymous
* associated events
* CyberBerkut
* GNAA
* Goatse Security
* Lizard Squad
* LulzRaft
* LulzSec
* New World Hackers
* NullCrew
* OurMine
* PayPal 14
* RedHack
* TeaMp0isoN
* UGNazi

|

Advanced Persistent Threat|

* Bureau 121
* Carbanak (group)
* Charming Kitten
* Cozy Bear
* Elfin Team
* Equation Group
* Fancy Bear
* FreeMilk
* Guccifer 2.0
* Hacking Team
* Helix Kitten
* Iranian Cyber Army
* Lazarus Group (BlueNorOff) (AndAriel)
* NSO Group
* PLA Unit 61398
* PLA Unit 61486
* PLA Unit 78020
* PLATINUM
* Pranknet
* Red Apollo
* Rocket Kitten
* Syrian Electronic Army
* Tailored Access Operations
* The Shadow Brokers
* Yemen Cyber Army

Individuals|

* DkD[||
* George Hotz
* Guccifer
* Jeremy Hammond
* Junaid Hussain
* Kristoffer von Hassel
* Mustafa Al-Bassam
* MLT
* Ryan Ackroyd
* Sabu
* Topiary
* Track2
* The Jester
* weev

Major vulnerabilities
publicly disclosed|

* Evercookie (2010)
* iSeeYou (2013)
* Heartbleed (2014)
* Shellshock (2014)
* POODLE (2014)
* Rootpipe (2014)
* Row hammer (2014)
* JASBUG (2015)
* Stagefright (2015)
* DROWN (2016)
* Badlock (2016)
* Dirty COW (2016)
* Cloudbleed (2017)
* Broadcom Wi-Fi (2017)
* EternalBlue (2017)
* DoublePulsar (2017)
* Silent Bob is Silent (2017)
* KRACK (2017)
* ROCA vulnerability (2017)
* BlueBorne (2017)
* Meltdown (2018)
* Spectre (2018)
* EFAIL (2018)
* Speculative Store Bypass (2018)
* Lazy FP State Restore (2018)
* TLBleed (2018)
* SigSpoof (2018)
* Foreshadow (2018)
* Fallout (2019)
* RIDL (2019)
* ZombieLoad (2019)
* BlueKeep (2019)

Malware|

| 2010|

* Bad Rabbit
* Stuxnet

|

2011|

* Kelihos
* Stars
* Metulji botnet
* Duqu
* Alureon

2012|

* Mahdi
* Carna
* Flame
* FBI
* Shamoon
* Red October
* Dexter

2013|

* DarkSeoul
* CryptoLocker

2014|

* Careto
* DarkHotel
* Duqu 2.0
* Dyreza
* FinFisher
* Brambul
* Destover
* Gameover ZeuS
* Carbanak

2015|

* Dridex
* Rombertik
* TeslaCrypt
* Hidden Tear

2016|

* Hitler
* Petya (NotPetya)
* KeRanger
* Jigsaw
* Pegasus
* Mirai
* X-Agent

2017|

* LogicLocker
* BrickerBot
* WannaCry

2018|

* Kraken

2019|

* ElectricFish
* Grum
* Joanap
* MEMZ
* NetTraveler
* NSA ANT catalog
* R2D2
* Regin
* Tinba
* Titanium
* Vault 7
* X-Tunnel
* ZeroAccess

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/Disqus. Read more

|

Retrieved from "https://handwiki.org/wiki/index.php?title=Company:Disqus&oldid=704718"
*[No.]: Number
*[v]: View this template
*[t]: Discuss this template
*[e]: Edit this template