Parental Privacy Controls

1. Parental Privacy Controls Wayne Pauley EMC Corporation 02/2011

2. Abstract • Have you ever really thought about how many Internet attached devices are in your family member’s hands today? • Have you thought about the privacy exposures these devices create? • Have you been successful in protecting your family’s privacy on these devices? This presentation will look at the most common devices in the home today, common sites that young people access, and the potential exposures and protections. We will also propose some basic guidelines for managing the growing problems of exposure while still allowing family members not feel completely violated.

3. What is Privacy? Security is the technology and process needed to protect information Privacy is about the information that needs to be protected Legal Definition of Privacy “Privacy is the claim of individuals, groups or institutions to determine for themselves when, how, and to what extent information about them is communicated to others” - Alan Westin: Privacy & Freedom, 1967 Technical Definition – Security vs. Privacy Security With respect to information processing systems, used to denote mechanisms and techniques that control who may use or modify the computer or the information stored in it. Privacy The ability of an individual (or organization) to decide whether, when, and to whom personal (or organizational) information is released. - Saltzer, J.H., & Schroeder, M.D. (1975). The protection of information in computer systems. Proceedings of the IEEE, 63(9), 1278 - 1308

4. Some sad statistics From InternetSafety101.org • Pornography • Between 40-80% kids have viewed adult content online • 40% came from innocent word search • 86% naked people • Cyberbullying • 43% of teens 13-17 reported they were cyberbullied in the past year • Sexting • 73% of teens have or use a cell phone • 19% have engaged in sexting • 65% girls send, 35% boys

5. Exposure Dangers • Facebook examples • Used by robbers in Nashua to rob 18+ homes • People fired for comments on FB • Zynga sued for sharing data collected by Farmville user with advertisers and information brokers • Google examples • Sued in Texas for scanning “incoming” mail from non-gmail users • Sued in Europe and US for WIFI data collection • Apple sued over Apps data collection • Some apps selling additional information to ad networks, including users’ location, age, gender, income, ethnicity, sexual orientation and political views. • Twitter users fired over comments • Various tweets used to fire employees • NH News • Teacher caught sexting in NH • Student in NH cyberbullied seeking restraining order • Student in NH coerced to sext pictures of herself

6. Apps are watching you • Wall Street Journal - Your Apps Are Watching You • 101 Popular Smartphone apps • 56 transmitted the device ID without consent • 47 sent location information • 5 sent age, gender, etc. to outsiders • Examples • Pandora – age, gender, location • Paper Toss – ID sent to 5 ad companies • Apple rules being bypassed by developers • Google leaves it up to developers

7. What Type of Devices are Internet Capable? Cell Phones, Game Consoles, TV’s, Home Theater Receivers, Blueray players, iPOD/Music players, Laptops/PC’s, Routers, Refrigerators?

8. Household Information Flows • Devices: • Cell Phones • TV’s • Video Games • PC’s • Netbooks & Laptops • Tablets • Other? • Flow Paths • Indirect through Firewall • Direct via wireless

9. Home Devices Online

10. Example: My Home • Two adults, one teen • Devices with Internet access • 1 Video Receiver • 2 Cable Boxes • 2 wireless networks (media & Internet) • 1 Wii • 2 iPhones • 1 iPodTouch • 1 iPod nano • 1 Macbook • 2 Laptop with Windows • 1 Apple TV • 1 Desktop PC with Windows ------------------------------ 15devices– 3 don’t go through the firewall/router • 1 + 1 = 42

11. Where to start: Network • Use a router with built in parental controls • e.g. D-Link EBR-2310, includes usage monitoring & content blocking • iBoss Home Parental Control • Use Security keys • Blocks neighbors and criminals • Create a control-point for household devices • Turn on logging & review logs • Make it a quick weekend routine • Routers come with log-viewer software iBoss Home

12. Where to start: Devices • Wii • Game Rating System Control (ESRB Ratings) • Basic control is binary on/off the Internet with Opera browser • No controls on web sites • Optional software to control time limits • DSi • Game Rating System Control (ESRB Ratings) • Restrict use of (on/off): • Pictochat, Browser, Shop, Photo Exchange • Optional use of Browser Filtering for a fee • Cloud Filtering Service (www.astaro.com) • Internet TV • Rely on v-Chip • No web site controls if Internet is enabled

13. Apple: iPhone/iPod Touch • Settings>General>Restrictions (iOS 4.2 • Enable Settings (4 digit passcode)Safari off turns off web access with Apps turned off • Lose good & bad access • Good Wikipedia, Bad - Adult • Alternative browsers with controls on iTunes App Store: • B.O.B. • Mobicip • Location • At the device level • At the app level • e.g. Places Facebook Application on iPhone/iTouch iPhoneiOS 4.2 image

14. Apple: iTunes • Specify what content is accessible, e.g. explicit • Video/TV/Applications • Ratings system • Music • Ping Social Media • Password protected

15. Apple: TV • Access restrictions (show, hide, ask) • Internet: web, radio, photos • YouTube, podcasts, purchase, rental • Content restrictions • Movies: None, G to R • TV Shows: none, TV-Y to TV-14 • Music/Podcasts: Explicit ask or allow

16. Google: Android • Android devices • Smart-phones, tablets, netbooks • No inherent parental controls • Includes location features • Application builders starting … • Remote monitoring apps – Mobile Nanny • SafGuard – tracks calls, SMS, websites • MobiStealth – tracks & records – voice & content • AppBrain Android Parental Control App – restricts access to apps

17. Google: TV • Controls: None • Data not collected (from privacy policy) • Google will not collect your TV viewing history unless you provide opt-in consent • Google may in the future enable the collection of personalized television viewing history directly through the Google TV Platform in order to provide useful personalization services and additional features or functionality. • Google TV does not collect location information through Google Chrome • Google TV does not knowingly or intentionally collect information from individuals under the age of 13. • Data collected • We collect some basic usage statistics from your Retail Product and/or the Google TV Platform • Any content or data that you specifically opt in to synchronizing with your Google Account, other usage data that Google collects regarding your usage of the Google TV Platform is non-personalized before being stored in our server logs

18. Google: Search • Google Search • SafeSearch • Filter levels • Has a parental lock • Works on mobile devices also • YouTube (Google censors) • Guidelines http://www.youtube.com/safety

19. Microsoft: TV & Xbox • Coming via Xbox 360 • Support for ESPN on demand & NetFlix • Controls on Xbox: • Apply to whole console, not users • Movie content rating • Game rating setting • DVD Rating allow/block • Xbox Live Access • Restricted content setting • Console timer setting

20. Microsoft: Windows Phone • There are none provided by Microsoft • Third parties provide controls via services • Security Shield (annual fee) • Monitoring & log of pictures, text, email • Alert on keywords • Access to contacts and address book • Find child's location • MyKidisSafe (annual fee) • Monitoring & log of pictures, text, email • Cyber fence & arrival notices • Pictures and texts reviewed by providers service • Auto - Speeding notifications

21. Browsers & OSs: Apple • Apple Mac OS • Limit Hours of use • Limit access to websites • Limit mail & chat via lists • Tracking via logs • Apple Safari • Approved list of sites • Relies on 3rd party extensions

22. Browsers & OSs: Microsoft • Microsoft Windows • Limit hours of use • Limit media content via media center • Limit applications by user • Windows Live Family Safety for web filtering & tracking (free) • Microsoft Windows Explorer • Content specific filters • Approved/blocked sites • Password lockable

23. Other Browser/OS tools • SafeEyes – used by schools • http://www.internetsafety.com/safe-eyes-parental-control-software.php • CyberPatrol – used by many homes • Includes timelimits, access and content restrictions • http://www.cyberpatrol.com/offers/parental-controls.asp?gclid=CMWQ34HVnqYCFYnc4Aod_BeTmw • ContentProtect – NetNanny • http://www.netnanny.com/?pid= • Integrated tools • Symantec – Norton 360 • http://us.norton.com/360/ • McAfee – SaaS Endpoint Protection • http://www.mcafee.com/us/products/saas-endpoint-protection-suite.aspx

24. Social Networking: Facebook • Parent & Child Agreement: • Break the rules, lose the privilege • Parents won’t post, only monitor • Parents should: • Know login password • Set privacy settings • Email of new posts, new friends, etc come to house email account • Have an FB account and friend their children • Only allow children to add friends they and you know and have met • Limit time children are on FB • Keep computer in common area • Change settings: • Remove from Facebook search results • Remove public search listing • Leave “interested in” or “looking for” unchecked • Contact information should only have screen name and email address • Don’t put full house or email address, full birth date, or phone numbers • Set who can post to wall and who can see wall • Review settings: • All applications settings (Farmville)

25. Summary • The Internet is an amazing resource • Privacy is an important liberty • We must be aware of the opportunity for loss of privacy • Awareness and education will help our children understand the dangers • We must understand the devices we use and what protections they afford • Take time to turn the protections on and teach our children • Communication and trust is the best way to help your children understand the responsibilities that come with being in the digital age

26. Resources for the Family • Social media and online safety site www.ConnectSafely.org • A parents guide to Facebook - www.connectsafely.org/pdfs/fbparents.pdf • Comprehensive directory of online safety resources - http://www.connectsafely.org/Directories/internet-safety-resources.html • HackKid Conference • http://www.hackid.org/content/ • McAffee – A parents guide to social networking sites • http://us.mcafee.com/en-us/local/docs/SocialNetworkinge-guide.pdf • National Cyber Security Alliance • CyberSecurity Awareness Month • http://www.staysafeonline.org/cybersecurity-awareness-month/about-ncsam-2010 • UNH Crimes Against Children Research Center • http://www.unh.edu/ccrc/

27. References • Apple • iPhone Privacy, Security Not what Apple Claims, Researcher Says - http://www.pcworld.com/article/188595/iphone_privacy_security_not_what_apple_claims_researcher_says.html • Facebook • Rules for Teens – http://www.pilgrimworks.com/Facebook.htm • 10 Privacy Settings every Facebook user should know http://www.allfacebook.com/facebook-privacy-2009-02 • Google Family safety center - http://www.google.com/familysafety/tools.html • iBoss Home Router - http://www.ibosswebfilters.com/residential.html • Microsoft – Parental Controls - http://www.microsoft.com/windows/windows-7/features/parental-controls.aspx • Mobile Nanny - http://www.mobile-nanny.com • Wall Street Journal – Your Apps Are Watching You by Scott Thurm and Yukari I. Kane -http://online.wsj.com/article/SB10001424052748704694004576020083703574602.html