3 ms·

I think anyone expecting these security-related features to work as expected would regard it as a vulnerability.

• dcow 3y ago
  There are also just normal bugs and known limitations and acceptable risks.
  • eli 3y ago
    So are nearly all security vulnerabilities. Is bypassing the lock screen a security bug?
    • kllrnohj 3y ago
      The lock screen isn't bypassed in either of these.
      • IshKebab 3y ago
        He didn't say it was.
• kllrnohj 3y ago
  Is parental lock really "security-related" ? Like it's a frustrating response to this valid bug report, but it's not really a security risk here, either. You don't actually bypass the lock screen or anything.
  • andybak 3y ago
    I think it really is and could have serious safeguarding issues. Also other features are effected like kiosk mode etc. The implications are unclear but could conceivably be quite serious in some scenarios.
    • kllrnohj 3y ago
      > Also other features are effected like kiosk mode etc Is it? That's not demonstrated nor claimed in the linked article. > I think it really is and could have serious safeguarding issues. Elaborate. What's the security risk from your child using a browser after the parental control timeout expired? It's annoying that the automatic limits didn't fully happen, but data isn't compromised as a result, either.
      • ramses0 3y ago
        Browse the open internet (or internal network?!) from a McDonalds ordering kiosk? No skin in the game, but this is very similar to the old Win95 "About... Help... $BROWSER" style bypasses.
        • reddalo 3y ago
          >Win95 "About... Help... $BROWSER" style bypasses Could you tell me more about this?
          • ramses0 3y ago
            https://news.ycombinator.com/item?id=39232188 https://news.ycombinator.com/item?id=39232188
      • semireg 3y ago
        We are worried about children being compromised. This is as much about data getting into their heads as it is about basic exfiltration.
        • prmoustache 3y ago
          That is still out of scope. And as parents you have to accept that you cannot keep control of everything. Your child might see stuff in the streets, might see stuff on someone else's device for which you weren't prepared, or find ways to circumvent any limitation you put to his life. And being educated != being in jail.
  • axoltl 3y ago
    I think “your threatmodel is not my threatmodel” applies here. I can easily see a parental lock being relevant in certain abuse cases for example.