An urgent note about using Zoom

During the COVID-19 Pandemic Safe on Social are able to deliver all of our Cyber Safety Education Services through secure webinar. We pay for the premium business level service with Zoom to ensure the highest levels of security a substantial investment to allow us to have up to 300 participants at a time if required.

Whether it be a Telehealth appointment or a Yoga class if you are paying a third party to deliver any service via Zoom or similar always ask that they show you that they are paying for the service and have the appropriate levels of Cyber Security in place.

From an article in The Washington Post:

"Thousands of personal Zoom videos have been left viewable on the open Web, highlighting the privacy risks to millions of Americans as they shift many of their personal interactions to video calls in an age of social distancing. Videos viewed by The Washington Post included one-on-one therapy sessions; a training orientation for workers doing Telehealth calls that included people’s names and phone numbers; small-business meetings that included private company financial statements; and elementary school classes, in which children’s faces, voices and personal details were exposed.

Many of the videos include personally identifiable information and deeply intimate conversations, recorded in people’s homes. Other videos include nudity, such as one in which an aesthetician teaches students how to give a Brazilian wax."

Many of the videos appear to have been recorded through Zoom’s software and saved onto separate online storage space without a password. It does not affect videos that remain with Zoom’s own system.

But because Zoom names every video recording in an identical way, a simple online search can reveal a long stream of videos elsewhere that anyone can download and watch. The Washington Post is not revealing the naming convention that Zoom uses, and Zoom was alerted to the issue before this story was published.

Read more here: https://www.washingtonpost.com/technology/2020/04/03/thousands-zoom-video-calls-left-exposed-open-web/

Read more about how to [protect your Zoom calls here: https://www.washingtonpost.com/technology/2020/04/03/zoom-video-set-up/

A little bit about BitLife

BitLife has been around since 2018 and is described as a life simulation game. Updates and new inclusions are regularly added, and an Android version was released this year.

The objective is to essentially live a digital life from birth to death, acquiring education, relationships and jobs along the way. Like real life ,there are both good and bad choices along the way. Your character lives and dies as a result of the choice made by the user.

There are stages representing infancy, primary school, high school, and on to undertaking university courses and gaining employment. Bit-money is earned, houses and cars can be bought, and a player may even follow a life choice to become famous. There is a lot of detail put into the choices that lead from various paths, and mini-games within your bit-life ( e.g. playing black jack for bit-money ).

With an adult life, comes adult considerations and here is where the content of the game may be too much for some and is definitely NOT for children.

Decisions to make are very mature at times ranging from choices around sex (one-night stands, group sex), murder or assault, prostitution, and drug taking are all on offer. There is the option to choose not to have protected sexual intercourse and suffer the possible consequences of that action. Or the player might get sent to prison and join a gang, or train to be a prison guard etc.

Ratings are inconsistent across platforms:

The Apple store offers a 17+ rating

The Google play store 15+

Common Sense Media throws in a 14+, so for parents it is hard to know where to draw the line, when advice is so conflicting.

Safe on Social suggests that it is absolutely not one for anyone under 15+, as some of the choices offered made are emotionally and conceptually beyond those below this age group. There is a strongly humorous, tough in cheek approach with this app, the nuances of which will be missed by younger teens and children.

Once a character dies, you are able to restart and live your “life” again – endlessly. There is scope within the topics raised in BitLife to open discussions with your teen about appropriate actions to take in circumstances presented via text in the game.

There are several alternate versions of BitLife available in the app stores , the majority of these being free, and of the names listed below, all are similar in their general approach to BitLife. Some options and life styles offered within the apps may vary, but at the core they are the same thing, and cover similar mature life choices.

- InstLife

- Life Simulator

- Your Life Simulator

- Life Simulator 2018

- Nirvana

One that is not appropriate at all, is the charmingly named Hobo Simulator.

This is offensive due to the name, as the app offers experiences such as eat from the trash, fight individuals, rob banks……offering the user a chance to play at life of the streets – which is just nasty, and disrespectful of the homeless, but of course given time – you might become a CEO.

This app has been around for a while and contains features such as conserving beer to use when your happiness levels fall low, taking strange pills you might find, getting onto disability benefits, or welfare, Vodka boosts your popularity and the character may die from starvation within 7 days quite easily if you don’t give the game enough attention.

This one is not for children or anyone with a modicum of empathy. It is also more difficult to play and requires more time spent on it to drop the hunger score of the character, and build up happiness, so can be quite addictive.

Summary

BitLife is considered to be entertaining, addictive and only appropriate for older teens given the range of mature content, bombardment with advertising, and the subtle humour. Life simulation apps are popular and they can be fun but the age ratings hover around 15+ for most of them, and given the subjects addressed this is a more appropriate age than for children in Primary School.

Yubo....Tinder for teens and tweens

In the last few weeks we have been made aware of enormous amounts of usage of the app "Yubo" happening again after it had disappeared off our radar for a while.

In early 2018 an app called Yellow - rebranded itself quietly as Yubo.

There were very good reasons for this name change to be made following hundreds of parental complaints, a deserved reputation as a Tinder for teens ( and tweens) , the developers had described their own product as a ‘virtual flirting app” , included a direct link to Snapchat with all the disappearing sexting and bullying that that offered, had children’s feeds filled with sexual content and predator followers , it had issues with location GPS software pinpointing user’s locations, and had accrued warnings from the FBI , The Australian Federal police and more law enforcement agencies across the globe.

It is worth noting Yellow had come into existence a short time after Tinder raised it’s age rating to 18+.

The YUBO rebrand was supposed to usher in a swathe of new security protocols, more moderation, a general improvement on its performance , and a strong hope everyone forgot about the righteous mess that Yellow had been.

Did that happen? Well, sort of.

And what changes were made? Some.

And how substantively have these changes effected the safety of your child if using this app? Not much.

What it is and how it works?

Yubo is free. And available for Apple and Android devices.

With over 20 million users, Yubo is continuing to collect users.

Age ratings on App stores now reflect the need for a more mature audience , focusing on the 17+ recommendation, rather than the 12+ Apple, and Google previously rated it at.

But, as with all age recommendations – it’s still completely possible to lie about your birthdate.

Yubo has divided its members into two sections, in effect accepting that while its age rating is 17+ there will still be younger users signing up.

There are now two sections within the app.

To access the complete version a user must be over 17+.

There is a section for tweens b/n 13-17, where older users out of this age range cannot interact with this group. This age range must have parental permission to use the app.

This is described by the app developers in text from their website. www.yubo.live.

Individuals under 13, are not allowed access if they enter a correct date of birth.

There is still no definite way to prevent younger users lying about dates of birth, or older user replicating that behaviour.

Yubo is trying.

It must be said that Yubo gives every appearance of trying to protect their younger users.

The developers provide this statement within their website, outlining the steps they have initiated since the re-brand. The Safety Guides are comprehensive and worth looking at.

It’s still not quite working that well, good intentions and all.

In order to sign up

An individual must provide a name, gender, date of birth, a mobile number, a recognisable image, and initially a location to allow the app to “match” the individual with people near to them. The app stated that dates of birth will not be published – though an age will, and a mobile phone number is required to proceed.

Only real images of an individual’s face can be used.

Trying to substitute a non-facial image will attract the attention of the moderators. There is nothing to stop someone using a digital picture of a friend, or copying an image from the internet, for use as a profile shot.

The final step in signing up is a verification code. Once this has been sent to the supplied phone number, the user is offered a series of profile shots of likely looking individuals within their area.

Like Tinder, a swipe to the right registers an interest and adds the individual to the users contact list, a swipe to the left consigns that would be friend to the dumpster.

None of these improvements offer any kind of guarantee that a younger Yubo users will not be matched, or connect with an individual claiming a false age.

It is still simple to use a false image, and a false date of birth, and any child with a smart phone will be able to complete all the steps necessary to join – without any input from their parents.

Gender selection

Specifying the gender of the friends a user is hoping to find directs this app into the dating arena instead the purported friendship arena. While this alone isn’t necessarily bad, it opens the door for a teen to be pressured into sexting, or meeting up for the purpose of a date. While on Snapchat, friends tend to be people known to the individual user, and even then the pressure to sext is still considerable.

Yubo however can takes this pressure to another level by exposing a teenager to people they don’t know, and are anxious to please. There are numerous reports of requests for nude photos almost immediately after a connection has been swiped.

When you consider the stranger danger lectures we give our children, and tell them not to post photos of themselves online to a stranger, Yubo opens the door to absolutely anyone nearby.

Location services

This app matches users using the location feature. It uses a phones GPS to do this. This is a default setting, and the user must deliberately turn off this feature within the app to stop their location appearing.

Validation and judgement

Social media sees many teenagers associating high numbers of followers with popularity. Self- worth and follower numbers are being increasingly connected.

Yubo is one of those apps that facilitates this need for popularity. And this is a concern. Some teenagers will lose their judgement in pursuit of online followers and this can lead them to be less careful than they should be. Information and personal details such as phone numbers and other social media addresses are often exchanged in chat sessions.

Yubo is asking young people if they want to be in a friendship or a romantic relationship based on a profile picture, offering judgement of worth based on an image. This is not a positive app for any individual with self-esteem issues, nor a message that should be reinforced.

Privacy

You cannot make a Yubo account private.

The nature of the app is to connect strangers based on gender preferences, age and locations. With a full privacy function enabled the app would be unable to be used.

The best steps to take are to hide your city, and block and report any users that repeatedly harass you.

It is also possible for screen shots and clips to be copied by other users without your knowledge. Yubo states this clearly in its terms and conditions.

Content

If your child is a user of this app and fits into the 13-17 age category, inappropriate content is still common, as are requests for naked images.

Yubo is attempting to block by algorithm sexually explicit content, nudity and the more suggestive of the emoji’s but the process is not yet foolproof, and does little to limit the pressure some users have placed upon them. The Live chat and video streaming functions of this app, allow suggestive content through regularly . A cute message pops up on the stream warning that some things are naughty to share.

This is a nice idea, but it is unlikely to have much attention paid to it.

The only remedy is to report the offensive material to Yubo and hope they will act.

Standard practice for users that breach these behavioural guidelines is that Yubo will send them a polite message asking them not to do it again. Repeated offences have resulted in some individuals being banned, but these are not regular occurrences.

Blocking and reporting

This is one area where there is a noticeable improvement to Yellow, though the manner is clunky and could cause a blocked individual to react negatively. It is common to run into conflict with others on social media. Many platforms have made their methods of blocking individuals subtle. This not so with Yubo.

The removal of shared content is positive, but the complete severance of all levels of contact may pose problems should users have shared details across other social media platforms. Put simply, if you block someone – they’ll know immediately.

The advice Yubo provides about taking screen shots should be taken notice of. As all content will be deleted should an individual been bullied or sextorted through this app, without screen shots regaining the evidence will be exceptionally difficult, if not impossible.

How to block and report.

Should a user need to block or report another user, the system has been simplified.

On the top left of the profile of the individual you wish to block is a flag button.

By tapping this a drop-down list of reasons to block or report is provided.

Select the most appropriate to report the user.

Current response times from the app are about 24 hours from the time the report was made.

No more Snapchat and Instagram links available.

One of the major issues Yellow fell afoul, was the ability for users to connect their accounts to Snapchat and Instagram profiles.

This had been a privacy disaster, especially when combined with the disappearing nature of Snaps, Snapchats Live map – providing more detailed information of the location of a Yubo user, and access to a user’s contacts. With over 80% of Yubo users possessing public Instagram accounts- this feature was also considerably risky, given Instagram is often more personalised than Yubo.

Snapchat itself was responsible for Yubo discontinuing the link with it, refusing to allow the Snapchat button to feature in the rebranded app. This is telling. Yubo had not seen this as an issue, yet Snapchat did.

As a result, links to Instagram and Snapchat are no longer functions of the app, though some Yubo users will still include additional social media addresses in their profiles.

A negative alteration – Live Streaming and Group live streaming

Unlike Yellow, Yubo offers a live streaming option.

Pitched as a way to have an online party with friends, users are invited to join by individuals in their contacts list. While it is not possible to join into a group live-stream without a direct invitation – it remains possible to WATCH the live streams of any account holder at any time.

There is no way of telling who these individuals might be, or to confirm if your live stream is being observed without your knowledge.

This needs fixing, and should be disturbing for parents.

In app payment options – let’s buy visibility

Another new feature is the appearance of the in-app purchase. Pandering further to the need for popularity and validation – you can buy more visibility for either a short period of time, or should you wish to fund it – though buying a permanent premium subscription to ensure a better place in the limelight.

Warning for parents

Yubo specifically states that once this additional exposure is purchased there is no option for refund. Even if you choose to close your account within the period of time you have paid for prominence there is no redress.

Within the Terms, Conditions and relating to Data protection

Intellectual property

If you post anything offensive on the app, that in any way involves civil legal proceedings – you as the user are liable for any expenses incurred by the app as a result of your upload. This liability is something a user expressly consents to within the terms and conditions.

The app uses this fear of liability to extend the time it will continue to store a user’s data,

even after their account has been deleted for up to five years. This is stated as necessary to comply with legal requirements.

The app may change its terms and conditions of use at any time without notifying the users. The onus to research any alterations is on the user. Functions may be deleted or added at will.

Liability

The app offloads all liability to the users including damages incurred by Yubo

Your data is stored for quite a while, even if you have ceased to use the app. This is explained away as being necessary for security and legal purposes and for protecting the privacy of users and improving safety and security.

This may all be well and good, but an excess of five years is a long time for an app you no longer use to keep your personal information and use it as it sees fit.

And your data is stored offshore. Yubo is a French based app, and supplies no listings for where this data storage will occur other than it may be outside the EU, in America and/or other countries. All with different laws regarding data collection , usage and privacy.

In Summary

Yubo’s developers have tried to avoid repeating the same problems they ran into with Yellow. And in some ways the focus on safety has improved security – especially the inability to link through the app to Instagram and Snapchat.

But despite the volley of new safety features introduced by Yubo, controls are still easily circumvented , and the same problems of inappropriate contact with strangers persists. Frequent unasked for nude shots still appear, as do request for nudes and other sexualised behaviour. While these are able to be reported, this still can’t be unseen.

The addition of public, live streaming chats provided adds a huge risk , and there are now requests for sexualised performances live, the inherent voyeurism of anonymously watching such live groups chats offers thrills for predators and the monetisation of popularity introduced by the app is damaging to self – esteem, and places teens in positions where their judgement can become questionable.

It is still, at its core Tinder for teens with sexting, bullying, sextortion all still rampant, in spite of the app’s best efforts.