- Pete Davidson is OK and at work following alarming Instagram post Saturday 7:26 PM
- Wisconsin Governor Scott Walker doesn’t know how to use a Venn diagram Saturday 5:38 PM
- This college student made a movie trailer to tease her boyfriend, and Twitter can’t get enough (updated) Saturday 3:13 PM
- ‘Kappa Delta Crypto’ aims to break stereotypes in five-minute Snapchat episodes Saturday 2:29 PM
- Two iPhone X customers are suing Apple over screen size Saturday 1:18 PM
- Secretary Ryan Zinke is out at the Department of the Interior Saturday 12:03 PM
- How to watch the New Orleans Bowl online for free Saturday 10:25 AM
- Prada’s racist toys pulled from shelves after social media backlash (updated) Saturday 10:22 AM
- How to watch the Camellia Bowl online for free Saturday 10:00 AM
- How to watch the Las Vegas Bowl online for free Saturday 8:30 AM
- How to watch Real Madrid vs. Rayo Vallecano online for free Saturday 7:30 AM
- ‘Runaways’ season 2 expands its universe and mysteries Saturday 7:30 AM
- How to watch the Cure Bowl online for free Saturday 7:05 AM
- How to watch Canelo Alvarez vs. Rocky Fielding for free Saturday 7:00 AM
- Politicians who inspired the internet in 2018 Saturday 6:30 AM
Rob Bulmahn/Flickr (CC-BY)
Researchers using an automated testing process have discovered that 3,337 family- and child-oriented Android apps on Google Play were possibly collecting kids’ data in an improper manner, potentially putting them in violation of the U.S.’ Children’s Online Privacy Protection Act (COPPA), according to a study recently published.
COPPA regulates how mobile apps, games, and websites are allowed to collect and process personal information from children under the age of 13, in an effort to protect minors from giving away their personal data before they fully understand the implications of it. The study shows, however, that actually enforcing the law can be tricky.
“Based on our automated analysis of 5,855 of the most popular free children’s apps, we found that a majority are potentially in violation of COPPA, mainly due to their use of third-party SDKs (software development kits),” the study said. “While many of these SDKs offer configuration options to respect COPPA by disabling tracking and behavioral advertising, our data suggest that a majority of apps either do not make use of these options or incorrectly propagate them across mediation SDKs.”
This study could monitor when data is first accessed and where it is sent, according to the published report. To conduct the study, researchers modified Android’s permission system to enable the real-time monitoring of apps’ access to protected resources (like location data, address book contacts, etc.) and instrumented all the functions in the Android platform that access these sensitive resources. The framework also included a modified version of Lumen, a network monitoring tool that captures all network traffic generated by the app being tested.
The study shows that of the 5,855 total apps included in the study, 281 of them collected contact or location data without asking for a parent’s permission. Additionally, 1,100 apps shared persistent identifying info with third parties for restricted purposes, while 2,281 of them seemed to violate Google terms of service forbidding apps from sharing those identifiers to the same destination as the Android Advertising ID. About 40 percent of apps transmitted info without using “reasonable security measures,” and 92 percent of the 1,280 apps with Facebook tie-ins weren’t properly using the social network’s code flags to limit under-13 use.
These findings show how protecting children online isn’t as simple as doing an age check or asking for parents’ permission—both can be overridden by a thrifty child— and that Google, third-party apps, and officials have a long way to go in effectively enforcing COPPA.
Tess Cagle is a reporter who focuses on politics, lifestyle, and streaming entertainment. Her work has appeared in the New York Times, Texas Monthly, the Austin American-Statesman, Damn Joan, and Community Impact Newspaper. She’s also a portrait, events, and live music photographer in Central Texas.