Kent Newsome on technology, music and life

9/07/2006


Xanga Gets Popped: Who's Next?

I said back in May that if the social networking sites didn't start taking meaningful steps to make their web sites safer, particularly where kids are concerned, that someone- namely the government- was going to start doing it for them.

First we had the so-called My-Space Law.

Now we have fines. Big ones. Mashable reports today that social networking site Xanga has been fined $1 million for violating the Children's Online Privacy Protection Act (COPPA). What should be scary about this is the fact that Xanga is reported to have better privacy features than most social networking sites- probably because it is geared more for young people.

COPPA applies to the online collection of personal information from children under 13. It contains requirements for a privacy policy as well as the contents thereof. It attempts to ensure parental consent before such information is collected, with consent to be evidenced by a signed form, a verifiable credit card number, a telephone call, or an email with a digital signature. COPPA is the basis for the birth date question you see when registering for many web sites.

On the one hand, this looks to me like a warning shot across the bow of a bunch of social networking sites. Many will have a knee-jerk reaction against anything that keeps a user from content, but I'm on record as a supporter of any reasonable requirements that will keep kids safe on the often unsafe internet. Any reasonable requirement.

It's an open question, however, about whether COPPA actually does what it is intended to do, since it seems the only requirement is to refuse to register someone who admits to being underage. If we lied to buy beer in the 70s, why do we assume kids will tell the truth when registering at web sites in the oughts?

According to Mashable, Xanga's mistake was not checking the user-supplied birth date for those who checked the "not under 13" box. Checking the box does not eliminate the need to do the math on the birth date. So those who checked the box but supplied a birth date showing themselves to be under age should have been refused.

Checking the birth date is one line in the code. So unless there's evidence that Xanga was trying to make it even easier for a kid to lie, this seems to me like a million dollar technical glitch, as opposed to a big win for internet safety.

Tags: ,


Share: Digg | Email | Facebook | FriendFeed | Propeller | Reddit | Stumble Upon
Recommend: Twit This | To Techmeme
Bookmark: Del.icio.us | Furl
Discuss: 3 Comments | Post a Comment | Inbound Links

3 Comment(s):

On the other hand, Kent, given that it's so damned easy to do, it's particularly egregious that it was left out (probably forgotten).

By Blogger Kate, at 9/07/2006 8:53 PM  
**************************

I agree that this is a warning shot for other social networking sites. There have been some cursory measures on MySpace but nothing that can really stop someone from lying about their age. I like that with Xanga you have to confirm your age in a secondary way with a parent approval, etc. Like you said this seems like more of a fluke.

I think that these sites need to follow MySpace's lead and join with groups like the Cybertipline for PSAs, etc and while they should not be held accountable for people's actions they should act in their users best interests in terms of educating them about online safety.

It will be interesting to watch this issue evolve - Facebook got into their own mess this week on users privacy issues.

By Anonymous Catch Up Lady, at 9/08/2006 9:09 AM  
**************************

I just had an idea on how to fix this whole underage problem. Kent, you were on to it when you were talking about underage people buying beer in the 70s. We should sell membership cards at places that sell cigarettes and liquor. They are used to carding. Then to buy the membership card to myspace, xanga, etc, etc you have to show your ID. The membership card will have a lottery scratch type area with a secret code that needs to be entered when you sign up to the site. Charge a couple of bucks for the card, most of which would go straight to the retailer as a way for paying them for being your security police.

If it is good enough security for smokes and drinks, it should be good enough for talking online.

By Anonymous Mike, at 9/08/2006 10:07 AM  
**************************

Post a Comment

DISCLAIMER
Newsome.Org, Kent's blog and the related pages and content are solely the thoughts and opinions of Kent Newsome in his personal capacity and are not associated with any other person or entity, including, without limitation, any partnership or other business entity Kent may now or hereafter be associated with.