but... I would also like to keep my kids from seeing the very worst of the internet before they're ready to handle it. I tried using a PiHole but Firefox DNS-over-HTTPS nullifies that now. It's not realistic for me to be watching over their shoulders 24/7; what can I do to keep them away from stuff 99% of people agree isn't for children to see, without something like this?
# https://doh-int.mydomain.net/dns-query
interface: [ip of lan port]@443
interface: [ip of wifi port]@443
https-port: 443
http-max-streams: 220
tls-service-key: "/etc/unbound/keys.d/unbound_server.key"
tls-service-pem: "/etc/unbound/keys.d/unbound_server.pem"
ip route add blackhole "${IP}" 2>/dev/null
If the childs account is not able to gain admin privs then their ability to change settings can be disabled.
I personally think this current version of the legislation is a good compromise. Tech workarounds are fine for the few of us that understand the relevant technology (though I have never bothered to compile DNS in my life and have no plans to do so in the future), but they are simply not practical for most people. Every time I hear someone suggesting this sort of thing I find myself tempted to say 'why worry about legislation? If you don't like what it mandates you can just write your own operating system.'
Of course this would not be helpful because writing your own OS is extremely hard beyond classroom/toy examples. And likewise, tech workarounds and even parental controls are hard for most consumers - partly by design. I have an xbox console and have been trying to figure out why it keeps freezing on certain apps for months now. I suspect a telemetry problem but it's just a guess, there isn't really any way to look at logs so it's a trial and error process because most consumer hardware/application vendors want their products to be black boxes.
I don't think it is a good compromise. It seems to cover the wrong use cases.
My use cases have nothing to do with children on any level. Why would I want to submit to government restrictions? That makes zero sense.
It's as if the right-to-repair-movement would suddenly be undermined by a lobbyist advocating how restrictions are great. Or Jackie Chan suddenly praising the sinomarxist mono-party.
Like no past generation could stop their kids.
Past generations absolutely protected their kids from cigarettes and alcohol. A gate doesn’t have to be 100% effective to have net benefits.
Some kids getting access to booze here and there with planning and coordination is different from kids walking into a liquor store or bar whenever they want.
No. Like, obviously no. That’s not how effectiveness is ever measured.
But like your examples, it's not guaranteed to work.
Install a DNS filter. Firefox circumvented that? Smart kid :)
Censorship circumvention might be a good skill to have in the near future.
I'm sorry, but what? Cigarettes, sure. Alcohol? Binge drinking was absolutely rampant at my school, and I don't think I'm alone. Don't get me wrong, some parents just buried their heads in the sand, but unless you're giving them a breathalyzer when they get home and severely punishing them all the time it's pretty hard to prevent.
(Yes, you might get carded before you can go into a bar or a club, but we're talking about every possible device that can connect to the internet here; that's a lot closer to the grocery store than a bar or club terms of how much of a staple this is for most people's daily lives at this point. Cutting off my ability to access to my bank account, contact doctor, or pay my bills should not be something that should require additional steps because my devices which no children ever used could theoretically be used for a child to try to watch porn).
I agree these proposals are garbage. But if everyone who can credibly say that is busy trying to block any age gating, this is what we’re going to get.
I'm certainly not busy trying to block a bunch of hypothetical policies that no one has proposed when there are garbage ones that are literally getting pushed right now. It sounds more like too many of the people who recognize the harm of this policy are too busy trying to claim that the burden for coming up with a non-garbage policy should be on the people who fundamentally disagree with that framing.
Things a good way to put it. Yes. Regardless of whether you disagree with that framing, that is the frame that’s been set and is being run with. So you can make theoretical arguments against the framing. Or practical arguments against the policies within the frame.
Fluent in pod tide trends and latest sticker packs, but utterly unable to comprehend anything not working, be it wifi, proxy, dns, their phone's mobile connection. Unable to even ask the question "_why_ is something not working" or "what can I possibly do with this arcane message obscuring my $app's screen".
I know that's a quite broad generalisation but I see this in my kids' school across basically all their peers, and I can observe it online.
Anything broken -> passive hang up until fixed (of course if they cna talk to their bestie about the issue, this is what they do).
The better question is "Why do I need to give up privacy on my devices that no children ever use and are used for all sorts of mundane things that are entirely unrelated to what you're trying to protect your children from to solve this problem?" The solution being proposed here is to require ID checks at the OS installation level; this would be like requiring me to flash my ID when I walk out of my house because kids would have to go outside if they were going to try to buy alcohol.
However DoH isn't obfuscated and in order to operate the list of resolvers that firefox uses must be published somewhere. It follows that you should be able to filter the major DoH providers at your gateway.
This is the main problem that needs to be addressed. Everything else is just a byproduct of it. If you support the by product of what was created by conditions that are not being address, you only make the problem worse.
> before they're ready to handle it
You can restrict any access for the network to them. Extra bonus, this will save your child from addiction.
I understand that this is not always possible, but... it's spectrum - try to reach maximum and do your best.
Also, consider that I don't have any experience in raising a little human, so, probably, I'm talking nonsense
Here we talk about use cases for EVERYONE. I don't see how your use case is fine for me, because I personally do not agree with it on any level at all whatsoever. You believe in restriction. I don't. There is no common ground here.
> It's not realistic for me to be watching over their shoulders 24/7
Is this your job? At which age will you stop monitoring them?
> what can I do to keep them away from stuff 99% of people agree isn't for children to see
99%? Where do you get those numbers from?
Besides, what stuff anyway? Even then the issue isn't about your kids. It is about laws for EVERYONE.
Nothing. VPNs exist (including free ones), some of classmates will have unlocked devices, etc.
Next question?
Also make sure to block all OSes allowing to install apps from outside the app store, lest someone uses a private socks proxy on their free Cloudflare Worker account.
Make sure to ban/backdoor all the encryption protocols so the traffic not yet blocked can be analysed. And ban all free OSes or someone will write a "black market" encryption/communication protocol.
There's insanity in your request and it needs to be called out.