Comment by dylan604

3 months ago

I can't believe in 2025, nearly 2026, that anyone would seriously suggest a header as a valid way of doing anything like this. Headers can be spoofed, modified along the way, or flat out ignored. DNT header is the obvious go to example here.

An aspiring teen could set up an RPi that modifies headers for all traffic on the network that the parental units never even know about. I'd venture there would be plenty of YT, TikTok, Discord threads, etc that would provide a step-by-step set of instructions to do it. Probably just point to an image to download to copy to your SD and voila.

This would require SSL interception, which requires a custom certificate on the end device.

If your kid can figure out how to install a custom certificate on their device and MITM SSL to evade filters, (a) you never secured the device (b) you already lost long ago and (c) let’s get that kid a job or a scholarship.

  • how many of those of us reading this right now would have been able to do this? how many of us reading this right now had parents that would had a clue about any of this to question it?

    • True hacker kids will figure it out no matter what. If the phone is restricted they will jailbreak it or beg an old one from a friend. If the network is locked down they will crack the password for the neighbor’s wifi. If the clearnet is locked down due to authoritarian laws, they will end up on incredibly sketchy sites on the dark web. If you block all escape outlets they will do really stupid things in nihilistic protest like huff cans of whipped cream or scam money from crypto. The power of bored youth springs eternal.

      What I’m saying is you can set rules, you can try your best, but under no circumstances can you build an impenetrable wall for determined kids. Things like this header solution or better controls on the end device would make things safe for the vast majority of kids. So don’t ruin the internet for adults because of a handful of unruly kids who are going to get in trouble no matter what.

      2 replies →

    • Parental control software on general purpose computing devices has always been an intelligence test. If you cannot bypass it you fail.

DNT is a client header that failed to get traction and never did anything useful. RTA is a server header and small children will not be doing this for the most part and parents can of course disable parental controls assuming one day they are enabled by default for child accounts. Like I said, it's not perfect. Teens can of course bypass this a million different ways. For every 100 million dollars a company spends to lock teens out of something is just an extra 5 lines of python or 15 seconds of their time on AI if that. Currently many teens watch pirated movies and porn together in VR and assorted games that allow placing a media player in G-rated world building games.

It's probably worth noting that if teens can not view porn, they will likely produce porn making an entirely new tax free underground market on Tor or other networks.

This is just for keeping small children out. Nobody in the history or future of earth have ever or will ever locked teens out of a thing. Archive this comment so we can review it at a later time.

> An aspiring teen could set up an RPi that modifies headers for all traffic on the network that the parental units never even know about

An aspiring teen could just have sex with another aspiring teen...

You won't stop teenagers from finding a way to be teenagers. Part of being a teenager is learning how to subvert the rules set by adults to fulfil one's hormonal imperative.

If your goal is to make something teenager proof, you have already failed before you started. Many teenagers have the intellectual capacity of full grown adults, it is their emotional intelligence and life experience that is lacking. Doing any more than putting a simple padlock on the door will not stop them, the same way a determined adult couldn't really be stopped, and teenagers are determined in most everything they try by default.

> An aspiring teen could set up an RPi that modifies headers for all traffic on the network that the parental units never even know about.

Who cares? Why is this an issue? An aspiring teen can (and will) do many things their parents don't know about. It's part of growing up. Making air tight surveillance systems to prevent teens from talking to friends or looking at boobies is many a bridge too far.

> An aspiring teen could set up an RPi

If circumventing a measure requires setting up a RPi and modifying headers, I would call it widely successful, that would be less than a thousandth of kids.

> An aspiring teen could set up an RPi that modifies headers for all traffic on the network that the parental units never even know about.

Just like how teens are already bypassing age-gates? The point is to make it the responsibility of the parents and not of the government.