{"id":15458,"date":"2019-05-31T08:30:05","date_gmt":"2019-05-31T16:30:05","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/05\/31\/news-9207\/"},"modified":"2019-05-31T08:30:05","modified_gmt":"2019-05-31T16:30:05","slug":"news-9207","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/05\/31\/news-9207\/","title":{"rendered":"Who watches the iOS parental control apps?"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/thinkstockphotos-476018722-100735105-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Jonny Evans| Date: Fri, 31 May 2019 07:36:00 -0700<\/strong><\/p>\n<p>Children are emotional. Protecting them matters. When it comes to technology, do you want developers you don\u2019t know over whom you have no control watching what your children do on their devices?<\/p>\n<p>Apple recently <a href=\"https:\/\/www.nytimes.com\/2019\/04\/27\/technology\/apple-screen-time-trackers.html\" rel=\"noopener nofollow\" target=\"_blank\">cut developers off<\/a> from using MDM software to drive third-party parental control solutions.<\/p>\n<p>Developers were upset, and seventeen smaller developers you\u2019ve probably never heard of got together just days before Apple\u2019s WWDC 2019 conference with a well-organized PR campaign and a <a href=\"https:\/\/screentimeapi.com\/\" rel=\"noopener nofollow\" target=\"_blank\">professional website<\/a> to demand access to new API\u2019s that let them develop parental control software for iOS.<\/p>\n<p>One of these developers, Kidslox, previously filed an <a href=\"https:\/\/www.kyivpost.com\/technology\/ukrainian-startup-sues-apple-over-unfair-competition.html\" rel=\"noopener nofollow\" target=\"_blank\">EU complaint<\/a> against Apple\u2019s move.<\/p>\n<p>The issue is that in order to make these controls work developers had been making use of Apple\u2019s Mobile Device Management (MDM) remote access tools.<\/p>\n<p>The problem with that is that those tools \u2013 designed to help enterprise users manage fleets of devices \u2013 gave app developers power to tamper with apps and access user information, and Apple didn&#8217;t think it was appropriate, it claims.<\/p>\n<p>The argument is that not only does no rational parent want unregulated and unaccountable third-party entities accessing data about their kids, but lack of regulation means there\u2019s little control over what happens to that data once it is collected.<\/p>\n<p>This is why Apple withdrew those parental control apps from its App Store.<\/p>\n<p>\u201cWe recently removed several parental-control apps from the App Store, and we did it for a simple reason: They put users\u2019 privacy and security at risk. It\u2019s important to understand why and how this happened,\u201d <a href=\"https:\/\/www.apple.com\/newsroom\/2019\/04\/the-facts-about-parental-control-apps\/\" rel=\"noopener nofollow\" target=\"_blank\">Apple wrote<\/a>, explaining the move.<\/p>\n<p>Now the developers are campaigning for Apple to create a set of parental control APIs they can use in their apps.<\/p>\n<p>\u201cApple should release a public API granting developers access to the same functionalities that Apple\u2019s native \u201cScreen Time\u201d uses,\u201d they claim.<\/p>\n<p>While the developers make what seems on the face of it a good case, I do feel their case would be boosted if as well as making a proposal around an API, they could also commit to minimum privacy standards and make public account of:<\/p>\n<p>I didn\u2019t have enough time to investigate every company involved in the campaign, but one quick Google search one one of the 17 firms revealed claims (which I&#8217;ve not corroborated though the source seems solid) that 281GB of images and videos of children that company monitored <a href=\"https:\/\/www.vice.com\/en_us\/article\/ywk8gy\/spyware-family-orbit-children-photos-data-breach\" rel=\"noopener nofollow\" target=\"_blank\">were leaked online<\/a>.<\/p>\n<p>I guess there is a benign explanation for the company\u2019s need to store all those images and videos of other people&#8217;s children, but if I were a well-resourced journalist at any of the major news outlets who are reporting the current campaign, I\u2019d have to ask why that data was retained.<\/p>\n<p>It\u2019s not the only time in which third-party parental control apps seem to have demonstrated <a href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2015\/02\/superfish-fallout-raises-privacy-concern-over-parental-control-apps\/\" rel=\"nofollow\">shaky security<\/a>.<\/p>\n<p>To be fair, I&#8217;m not saying and I do not know if all such software developers gather data \u00a0of this kind, but it certainly seems reasonable to insist that companies who have access to data about your children are utterly transparent about how they protect that data and what they do with it.<\/p>\n<p>And the best way to secure such information is not to let others have it in the first place.<\/p>\n<p>I always try to support developers, but my tiny investigation makes me hesitate to jump enthusiastically aboard the latest \u201c<em>Apple is bad<\/em>\u201d meme.<\/p>\n<p>It is worth noting the current campaign to cast Apple as being anti-competitive comes at a bad time.<\/p>\n<p>The company&#8217;s record on privacy has come under fairly consistent attack since it <a href=\"https:\/\/www.computerworld.com\/article\/3331140\/ces-2019-apple-s-other-trade-show.html\">dared to point out<\/a> its platform is inherently far more secure than the dominant mobile OS.<\/p>\n<p>The current campaign may turn out to be a little counterproductive in terms of furthering the ongoing \u2018Apple is bad\u2019 narrative. After all, if a two-minute web search exposes instances in which the security of such software has been compromised, this rather supports Apple\u2019s inherent argument of needing to switch off access to MDM software in order to protect its customers.<\/p>\n<p>I didn\u2019t have time to investigate every company. I\u2019m not saying they are all subject to such problems, nor that it is likely they are. I&#8217;d even concede that the campaign does signify a need for APIs developers can use in order to deliver more personalised iOS parental protection features than Apple makes available.\u00a0<\/p>\n<p>There are as many usage cases as there are parents and children.\u00a0<\/p>\n<p>At the same time, I\u2019d urge anyone using parental control software on any platform to read the developer\u2019s privacy and security policies thoroughly.<\/p>\n<p>It&#8217;s also important to ensure developers can be held to account in the event they let down your trust, and that you as a parent have complete access to any data held about your children by those developers.<\/p>\n<p>In the event you do not have such control, I&#8217;d recommend not using the solution.<\/p>\n<p>This, surely, is common sense?<\/p>\n<p>Please follow me on<em>\u00a0<a href=\"https:\/\/twitter.com\/jonnyevans_cw\" rel=\"nofollow\">Twitter<\/a>, or join me in the\u00a0<a href=\"https:\/\/mewe.com\/join\/appleholics_bar_and_grill\" rel=\"nofollow\">AppleHolic\u2019s bar &amp; grill<\/a>\u00a0and\u00a0<a href=\"https:\/\/mewe.com\/join\/apple_discussions\" rel=\"nofollow\">Apple Discussions<\/a>\u00a0groups on MeWe.<\/em><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3398641\/who-watches-the-ios-parental-control-apps.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/thinkstockphotos-476018722-100735105-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Jonny Evans| Date: Fri, 31 May 2019 07:36:00 -0700<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p>Children are emotional. Protecting them matters. When it comes to technology, do you want developers you don\u2019t know over whom you have no control watching what your children do on their devices?<\/p>\n<h2><strong>Apple doesn&#8217;t<\/strong><\/h2>\n<p>Apple recently <a href=\"https:\/\/www.nytimes.com\/2019\/04\/27\/technology\/apple-screen-time-trackers.html\" rel=\"noopener nofollow\" target=\"_blank\">cut developers off<\/a> from using MDM software to drive third-party parental control solutions.<\/p>\n<p>Developers were upset, and seventeen smaller developers you\u2019ve probably never heard of got together just days before Apple\u2019s WWDC 2019 conference with a well-organized PR campaign and a <a href=\"https:\/\/screentimeapi.com\/\" rel=\"noopener nofollow\" target=\"_blank\">professional website<\/a> to demand access to new API\u2019s that let them develop parental control software for iOS.<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3398641\/who-watches-the-ios-parental-control-apps.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[2211,10480,10554,714],"class_list":["post-15458","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-apple","tag-ios","tag-mobile","tag-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15458","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=15458"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15458\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=15458"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=15458"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=15458"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}