Remix.run Logo
epanchin 2 days ago

Is there a solution where we can compel parental control to be enabled by default on kids phones?

That would seem to be least intrusive option.

Using the internet in the UK/EU is such a horrible experience, every cookie pop-up is a reminder how badly thought out these rules are.

MaKey 2 days ago | parent | next [-]

> Using the internet in the UK/EU is such a horrible experience, every cookie pop-up is a reminder how badly thought out these rules are.

Technical cookies don't require any consent so every time you see a cookie banner the website owner wants to gather more data about you than necessary. Furthermore, these rules don't require cookie banners, it's what the industry has chosen as the way to get consent to track their users.

mnmalst 2 days ago | parent [-]

Or the website owner doesn't want to take the risk and ads a banner even if the site strictly doesn't need one.

ryandrake 2 days ago | parent | next [-]

So when I see a tracking cookie dialog on a web site, either 1. the site collects more data than they need to in order to run the site or 2. they don't and the site's management is incompetent. Both are pretty good reasons to avoid that particular web site.

aveao 2 days ago | parent | prev | next [-]

that seems like an issue with the website owner to me

reorder9695 2 days ago | parent [-]

A lot of websites for smaller businesses will not be run by technical people, they'll be run by business people or otherwise who don't understand cookies beyond "I see cookie banners on every website I visit, therefore to avoid legal trouble I need one too", you can't expect someone like that to understand the difference between tracking cookies and technical cookies.

Aachen 2 days ago | parent [-]

We're a small business, <10FTE, and have no cookie notice at all. We don't track people.

littlestymaar 2 days ago | parent | prev [-]

There's no risk, they know what they are doing because the law doesn't just mandate the banner, it mandates you to know which third party service you're sharing the data to.

Check the banner next time, you'll see how many “partners” they do sell your data to.

smilingsun 2 days ago | parent | prev | next [-]

It's very easy to make websites without needing cookie popups in EU/UK. Every cookie popup is a reminder of how stale the thinking around tracking and data sharing is!

user34283 2 days ago | parent [-]

If you do not use personalized advertising, I presume. Which may drop your ad revenue by somewhere between 20% and 60%.

scrlk 2 days ago | parent | prev | next [-]

UK mobile networks and ISPs have had age-restricted content filtering enabled by default since ~2013-14.

This policy was pushed by David Cameron, who was the prime minister at the time:

https://www.gov.uk/government/speeches/the-internet-and-porn...

https://www.bbc.co.uk/news/uk-23401076

PaulKeeble 2 days ago | parent | prev | next [-]

Age restricted filtering of the internet is the default on all UK mobile networks as far as I know, it might even be the law that it defaults to filtering. You have to actually ring them up and say you want the filtering switched off or some do it as part of the sign up process.

All the routers also come with filtering settings as well and ISPs ship with the filtering on by default, since that is the law and has been for several decades.

blue_cookeh 2 days ago | parent | next [-]

It's generally just a toggle in the account settings so no need for a phone call, but yes. It is default-on when you take out a new broadband connection or mobile phone contract.

tryauuum 2 days ago | parent | prev [-]

disgusting

my dream is when ISPs are allowed to sell this, but not allowed to call it internet access.

uyzstvqs a day ago | parent | prev | next [-]

The simplest solution is to require all online devices to have a "child mode" that can be activated during setup, and require all parents to enable this for minors under 16. In this mode, the device takes screenshots every few seconds of active use, and makes this viewable on the parents' devices as a timeline. This must be private with full end-to-end encryption and limited data retention in the clients (7 days or so).

It's much simpler than blocking, and much more effective. Most parents don't know what to block proactively, blocklists are imperfect, and the biggest threats are hiding in the most innocent looking apps (Discord, Roblox, Reddit, even just messaging with friends from school).

ceejayoz 2 days ago | parent | prev | next [-]

> Using the internet in the UK/EU is such a horrible experience, every cookie pop-up is a reminder how badly thought out these rules are.

That's what the advertising-dependent implementers who deliberately made it shittier than necessary (stuff like "you have to decline each of our 847 ad partners individually") want you to think, at least. It's mostly malicious compliance.

mrguyorama a day ago | parent [-]

The funniest part of the banners is that most websites just buy a service from a third party to manage compliance, and some of those third party service providers have added "decline all" style buttons and one click solutions to all that use them, and are even friendly enough to save that choice in one of the "necessary" cookies.

But people (like my girlfriend) still click "Allow all" because they don't seem to realize that the legislation requires the website to still function if you decline unnecessary cookies!

The banner is literally an attempt to FOMO you into accepting cookies you never need to accept!

IMO the EU is somewhat in dereliction of Duty for not punishing cookie banner sites

hunterpayne a day ago | parent [-]

Oh, its funnier than that. The most sophisticated data trackers don't even use cookies anymore. Anyone you would have to worry about getting that data hasn't used cookies in years. So the entire exercise punishes small companies that don't do anything with the data except pre-populate fields for you. But big tech companies that the law was targeting don't have to change a thing.

wiredfool 2 days ago | parent | prev | next [-]

Having done several rounds with parental control, I'd say -- nfw. We were worried more about timesink than anything else, but over a long period of time, it mainly boils down to knowing your kids, trusting them, with checkups. The tech is just not there to actually control what happens on a device.

White listing worked for a while (months) when they were young, but it was super-high touch and stuff just broke all the time. You try to whitelist a site, but you have to then figure out all their CDNs.

Restricting specific sites works, sort of, until they find some place that hosts that content. Blocking youtube doesn't work(*), every search engine has a watch videos feature. (Why are you spending 3 hours a day on DDG?) There's really no way to segment youtube into "videos they need to watch for school" and "viral x hour minecraft playthrough". Somehow, we've managed to combine the biggest time waste ever with a somewhat useful for education hosting service.

That's leaving out the jailbreaks that come from finding an app's unfiltered webview and getting an open web escape there.

There's basically no reliable method for filtering even on locked down platforms.

* there's probably a way to kill it at the firewall based on dns, but that's iffy for phones and it's network wide.

jfim 2 days ago | parent | next [-]

It's totally doable to block YouTube with pihole, and also to make it blocked only on certain devices.

The regex are: (^|\.)youtubei\.googleapis\.com$ (^|\.)ytstatic\.l\.google\.com$ (^|\.)ytimg\.l\.google\.com$ (^|\.)youtube-ui\.l\.google\.com$ (^|\.)youtube\.com$ (^|\.)ytimg\.com$ (^|\.)googlevideo\.com$

You can create groups and assign devices to them, and assign the block rules only to certain groups.

The only annoyance with this is that it blocks logging into Google since they redirect to YouTube to set a login cookie as part of the Google login process. If you're already logged into Google though, everything works as normal, and you can always disable pihole for five minutes if for some reason you got logged out and need to log back in.

ceejayoz 2 days ago | parent [-]

My kids figured out disabling Wifi disabled the Pihole within hours, and that was when they were ~9. They are intelligent opponents and a very fast moving target.

jfim 2 days ago | parent [-]

On Android, it's technically possible to use an always on VPN to still use pihole even when on cellular data, but unless there are some mdm controls on the phone, one can obviously disable the VPN.

Terr_ 2 days ago | parent | prev | next [-]

> The tech is just not there to actually control what happens on a device.

Neither is the tech for locking down all online identity to government-controlled access... But I have strong opinions about which one everybody should/shouldn't start creating!

snthd 2 days ago | parent | prev [-]

Maybe they're called parental controls because they control the parents (by limiting and bundling choices).

crtasm 2 days ago | parent | prev | next [-]

Install uBlock. In its settings: Filter Lists -> Cookie notices

blacklion a day ago | parent | prev | next [-]

I'm happy to have popups with "Reject All" button. If there is no "Reject All" button I close site immediately.

Cookie regulations are perfectly Ok, businesses which want to add 429 vendors and data processors to simple internet shop or corporate blog is not.

If you use cookies only for legitimate basic local functionality (like login and shopping cart on online shop site) you SHOULD NOT have any popups, there is exemption for such use cases in the regulations. Only if you want to sell data or pass it for processing to third party you need popup. Simply don't.

Cthulhu_ 2 days ago | parent | prev | next [-]

Sure, but you'd need to apply it to all phones, because what's stopping a kid from buying an adult smartphone if they have the money? And smartphones can be dirt cheap.

Also remember that the pop-up is an industry choice, the rules only mandate that a user should opt in, not how. No laws mandate the cookie banners, no regulations say they should be obnoxious.

alias_neo 2 days ago | parent | next [-]

> Sure, but you'd need to apply it to all phones, because what's stopping a kid from buying an adult smartphone

There's no need, that's already the case.

All phones (the network account attached to the SIM actually, not the phone itself) comes with a content filter enabled by default in the UK, adult or not.

xethos 2 days ago | parent [-]

> All phones (the network account attached to the SIM actually, not the phone itself) comes with a content filter enabled by default in the UK, adult or not.

Neither resident nor frequent visitor to the UK, so I'm behind the times when I ask: I beg your fucking pardon?

Is there further reading on this inane nanny-state horror, ideally via a Wikipedia article on the law or gentleman's agreement amongst the carriers?

Furthermore, is this more common than I assume, and I simply don't notice because I don't stray too far from the mainstream?

alias_neo 2 days ago | parent | next [-]

> I beg your fucking pardon?

Yep, my thoughts exactly when I first encountered it.

> Is there further reading on this inane nanny-state horror

I tried to look something up but it seems the articles and news about the (new) Online Safety Act has taken over all of the search results (and it's not something I want to search too hard at work). I even asked an LLM but it couldn't provide sources and simply said it was "voluntary" and "industry standard". The rest of its output was drowned in the new Online Safety Act.

I suppose thanks to the OSA the old system is now history.

joncrocks 2 days ago | parent [-]

https://en.wikipedia.org/wiki/Internet_censorship_in_the_Uni...

Symbiote 2 days ago | parent | prev [-]

I think you show identification (like when buying alcohol) when buying the phone/contract, and the block is removed. Or, this can be done later.

xxs 2 days ago | parent | prev | next [-]

I suppose it'd be the same thing in the UK - kids cannot buy knives.

ajsnigrutin 2 days ago | parent | prev [-]

> Sure, but you'd need to apply it to all phones, because what's stopping a kid from buying an adult smartphone if they have the money? And smartphones can be dirt cheap.

What's to stop that same kid to buy a porno dvd? Or to download a torrent of a porno? Or a porn magazine?

GardenLetter27 2 days ago | parent | prev | next [-]

The cookie popups is such a painful representation of Europe tech in general.

Like you can configure your browser to do whatever you want with cookies - blocking them all, blocking only third party ones, etc. - there is no need for government regulation here.

But the legislators are completely tech illiterate and even the general public supports more interference and regulation.

phba 2 days ago | parent | next [-]

The legislation simply says if you collect more data about your users than necessary, you must inform them and they must consent. This has nothing to do with cookies or any other tech.

The question a user should ask is why is this website collecting my data. Marketing and adtech companies are trying to shift this question to why is the EU making websites worse.

> there is no need for government regulation here

You don't need to care about this if you respect users' privacy in the same way you don't need to care about waste water regulation when you don't pump waste into rivers.

npteljes 2 days ago | parent | prev | next [-]

No, that legislation is perfectly fine! It's the pesky websites who can't get their grubby hands off of private data. They could very well do away with some of the tracking, and have no popup at all, fully legally! But they all chose not to, and would rather annoy everyone with the pop-up.

I'd welcome a ramp-up of the legislation: outlaw the kind of tracking that needs the banners currently outright. I'm sure a lot of websites would just geo-block EU as a result (like how some did because of GDPR), but I bet the EU-compliant visitor tracking solutions would suddenly skyrocket, and overall, nothing of value would be lost, neither for the users, nor for the website administrators.

james_in_the_uk 2 days ago | parent | prev [-]

It’s a bit of both.

It’s not possible to rely on browser controls as-is, because they do not differentiate between necessary and optional cookies.

Browser vendors could agree standards and implement them, exposing these to users and advertisers in a friendly way.

But they haven’t shown any interest in doing this.

I wonder why?

mrguyorama a day ago | parent [-]

Without laws forcing companies to properly declare which cookies are "necessary", this control you imagine does nothing, as every company simply sets their advertising cookies as "necessary"

One of the hundreds of reasons do_not_track failed. You cannot do something that trusts the website operators, because they are egregiously untrustworthy.

The cookie banner everyone keeps bitching about is a direct example of this. No website is required to have a cookie banner. They choose to, because they know most users click "Yes to all", and then complain about the regulators, instead of the assholes asking you to consent to sharing your data with nearly a thousand third parties

And "browser vendors" will never do anything, because 90% of the market is a literal advertising behemoth, the rest of the market is owned by a company that makes money only when you do things not through the web browser.

james_in_the_uk a day ago | parent [-]

What is considered a “strictly necessary” use of cookies is set out in law in a quite a number of countries.

My point is about UX: it could be much slicker if the browser industry standardised the consent mechanism.

You make a good point about lack of incentives.

HPsquared 2 days ago | parent | prev | next [-]

Come to think of it, parental control would be a neat application for something like Apple Intelligence. A local system service that is "trustworthy enough" to monitor everything on screen, and written content too.

Bender 2 days ago | parent | next [-]

Parental controls only need look for an RTA header [1] that would need to be legislated to be served from any adult or potentially adult user-generated content site. Not perfect, nothing is but it would take an intern maybe half a day to add the code to clients to check for said header. Adding the header on the server side is at trivial. Teens will bypass it as they can stream and watch together porn and pirated movies in rate-PG video games that allow defining a "movie player" but small children on locked down tablets would be fine.

[1] - https://www.rtalabel.org/index.php?content=howtofaq#single

HPsquared 2 days ago | parent [-]

That "unlabelled whack-a-mole" problem is exactly what a system-level visual classifier would block.

Bender 2 days ago | parent [-]

I am not sure what you mean. Are you saying a daemon would recognize a video player that is streaming porn from within a video game? Who is installing this daemon?

A client checking for a header is more than sufficient to block small children from seeing porn and that is 100% more than we have today. No extra memory or CPU required important on tablets or phones handed to children. No privacy invasion by daemons or other third parties.

Kid: "Mommie they said go to pornhub.com for games but it ask for password"

Mom: "Dumb trolls are picking on you, I will deal with them."

HPsquared 2 days ago | parent [-]

The phone manufacturer. I don't think it would otherwise be possible without root. And it's quite a computationally heavy thing where security and privacy are important. It'd have to be secure (no sending information). That's why I suggested Apple, they have the vertical integration to do this kind of thing. In theory. Also it's a good counter to governments trying to censor the internet itself if children can be protected at the device level.

Bender 2 days ago | parent [-]

How about this. We implement RTA headers on the server and checks for the header on the clients, get little ones squared away and in parallel have Google and Apple start working on your local AI daemon. The header should take one code change cycle to get in place, maybe a couple weeks realistically assuming the goal posts are not on wheels.

HPsquared 2 days ago | parent [-]

But "we" are not in control of "the server". I agree though it's worth doing, adult content should be tagged as such. But it doesn't handle the case of non-compliance.

Bender 2 days ago | parent [-]

"We" are not in control of the server or phone client or tablet applications. Should the 5-eyes or 9-eyes countries pass a law to use RTA headers on servers and look for the header on user-agents that should suffice to get basic coverage for kiddos by default and parents can disable the checks if they so desire.

pr337h4m 2 days ago | parent | prev | next [-]

This would enable/catalyze an order of magnitude more child abuse than anything that can happen on the worst cesspits of the internet.

HPsquared 2 days ago | parent [-]

I don't see how a content blocker would do that.

Cthulhu_ 2 days ago | parent | prev [-]

Why Apple Intelligence when screen recording has been a feature for parental control systems for ages?

HPsquared 2 days ago | parent [-]

I mean a classifier to identify anything that looks sus.

Edit: also something like this needs deep OS integration.

cedws 2 days ago | parent | prev | next [-]

I hate that the internet is being destroyed in the name of iPad kids

kypro 2 days ago | parent | prev | next [-]

Some would argue the point is to be intrusive... The most cost effective and simplest solution to kids watching porn would be regulation around on-device filters. Why the UK didn't do this and instead tried to regulate the entire internet should be questioned – is this really about the children watching porn?

When purchasing an internet-enabled device the UK could regulate that large retailers must ask if the device is to be used by an under 18 year old. If they say yes, then they could ship with filters enabled. They could also regulate that all internet-enabled devices which could be sold to children should support child filters.

If we did this then whether or not a child views NSFW material it will be on the parent, instead of the current situation where whether a child can view NSFW material online depends on the age verification techniques of Chinese companies like TikTok or American companies like 4chan.

alias_neo 2 days ago | parent [-]

> then they could ship with filters enabled

All mobile network connections already come with content filters enabled in the UK, adult or not, and has to be explicitly disabled.

crtasm 2 days ago | parent [-]

Yes but to be clear, using wifi or a VPN can bypass that. It's not an on-device filter.

array_key_first 2 days ago | parent | next [-]

Yes but wifi costs money - only adults have wifi. It's effectively already age restricted.

ceejayoz 2 days ago | parent [-]

Is this a joke or reference I'm missing?

array_key_first 2 days ago | parent [-]

No it's not a joke at all.

When you buy wifi, they already make sure you're an adult. They ask for proof of residence, you sign a contract. Children cannot buy wifi. Go ahead and try - no ISP is going to write a contract with a child.

Wifi, like tobacco and alcohol, is already age restricted.

The problem is the adults buying it then turn around and just... Hand it to children. That's not the fault of the law or society.

Like, okay the store clerk might make sure when I buy a pack of menthols I'm of age. But if I just go home and hand my kid the pack of menthols, all bets are off. That's not the store clerks problem, he can't and won't get in trouble for that.

Parents and establishments are being stupid here. Same applies for public wifi. Don't want kids to use it? Okay, give it a password, only tell the password to adults. Easy peasy.

The law can't stop parents from being stupid.

ceejayoz 2 days ago | parent | next [-]

> But if I just go home and hand my kid the pack of menthols, all bets are off. That's not the store clerks problem, he can't and won't get in trouble for that.

But it is society's problem, and within society's capacity to attempt to manage.

https://www.childline.org.uk/info-advice/you-your-body/drugs... says it's illegal to give a child cigarettes, and the cops can confiscate them if you're 16 or below.

> The law can't stop parents from being stupid.

Sure, but reality also often means smart, caring parents still can't stop kids from... being kids. I've lived in places where half a dozen public wifi hotspots were available; even if I didn't, chances are I'd have to let my kids on wifi for homework, on computers I don't have admin rights to because they come from the school.

They can't go sign up for a new internet plan, but that's hardly required.

array_key_first a day ago | parent [-]

> But it is society's problem, and within society's capacity to attempt to manage.

Sure, to an extent, but not really: we give parents a lot of freedom here.

> Sure, but reality also often means smart, caring parents still can't stop kids from... being kids. I've lived in places where half a dozen public wifi hotspots were available; even if I didn't, chances are I'd have to let my kids on wifi for homework, on computers I don't have admin rights to because they come from the school.

Okay, then lock down those networks. We don't need to lockdown the Internet as a whole.

In reality, most of those networks already are locked down.

Try searching up porn on, say, hotel wifi, it won't work.

We already have the solution.

ceejayoz a day ago | parent [-]

> Try searching up porn on, say, hotel wifi, it won't work.

I… very much doubt that.

array_key_first a day ago | parent [-]

What? Why are you doubting that?

I can't even search for porn on cellular networks and I'm in the US.

Hotels, Starbucks, my job, the library - they all block porn. The idea that kids just have free access to a wild internet is legitimately made up. Schools block that stuff too - universities, even.

As I've said, this solution is not solving this problem because this problem legitimately does not exist. It's solving a different problem. What that problem is, is for you to find out.

ceejayoz 11 hours ago | parent [-]

My cellular network (Google Fi / T-Mobile), as far as I can tell, has zero content blocking. Hotels used to officially put porn on the TVs via pay per view. I'm very skeptical that they widely block it.

I have high-school aged kids; they all trade techniques for getting precisely that "free access to a wild internet". It's a game of whack a mole, and school IT administrators are on the losing side.

sib a day ago | parent | prev [-]

What are you talking about when you say "when you buy Wi-Fi"? If you walk into a coffee shop, or a hotel, or just about anywhere, you get Wi-Fi for free. Are you talking about buying mobile service from an operator?

alias_neo 2 days ago | parent | prev [-]

Yes absolutely. It's at the service provider level.

2 days ago | parent | prev | next [-]
[deleted]
skeezyjefferson 2 days ago | parent | prev | next [-]

i love how screen time is only detrimental to young minds, and older minds are somehow immune to its evils.

preisschild 2 days ago | parent | prev [-]

> Is there a solution where we can compel parental control to be enabled by default on kids phones?

What do you mean? Parents can easily set this up before they give them to their children.