We originally locked the account down to try and keep her safe.
With commuication off and the account limited to only th Roblox verified games we thought we were okay.
It turns out that even in those games there’s usually an ability to change a “nickname” which allows users to chat by just updating their nickname.
As a dev I know how straight forward it would be to stop this frok happening.
Upon discovering the problem I contacted Roblox support and we pulled the kid out of Roblox.
Fyi; roblox support is not good, when the problem relates to child safety they pull all the classic tricks to make it seem like a “you” problem. They blame the third party “experience” developer, despite the game being vouched for by roblox. They close tickets after a short period with no response. They also treat this widespread issue (using nicknames to chat) as an individual breach of ts & cs, rather than fixing thr problem. Blaming the end user, who’s usually younger than 12.
Given the age of my and other kids I’d assume they’re violating GDPR & other global data protection laws on a regular basis.
That is shocking! It is an 'unknown unknown' thing that as parents we would be totally unaware of, but will somehow be communicated in game, or in hundreds of hours of youtube videos that kids watch. You think that it is all locked down, but can never be sure.
Also, as a company Roblox is evidentially a bad actor. I would rather trust Nintendo, Microsoft, or Sony parental controls. Not that they are perfect, and don't make mistakes, but their business models don't run on whatever Roblox Inc does.
For jumping into new codebases I stick to the Jetbrains toolbox because it’s usually a consistent enough environment to investigate a new codebase. I also greatly appreciate the indexing.
In the UK all of my final stage interviews had me bring in an ID and National Insurance Number for a photocopy for their records. Has been for over a decade.
Seems a simple enough solution, it’s expected and it’s something the company needs in order to pay me. It’s not a start of interview hostile question, it’s usually something we sort out in the formalities, along with what equipment I’ll need or be using, sorting out ID photos.
The ID system is a lot more fraught in the US - most folks don't have a national ID, and the national insurance (social security) number is just printed on a bit of cardboard. The processes to obtain photo ID vary from state to state within the US, and may be extremely difficult in some cases (lost birth records, born to undocumented immigrant parents, etc).
It's also a hot-button political issue in any number of directions (i.e. requiring photo IDs to vote, or allowing trans folks to change their name/gender on government-issued IDs).
This is something I find fascinating about the US, there's people functioning in society without photo ID. Official documentation, or things you can use as proof of something, are often trivial to fake. A social security card is a 1950s looking piece of cardboard. More recently, the CDC covid vaccination card is a simple piece of paper that not only lacks vertification features but doesn't even have a routinely used unique identifier for the patient. Before learning this, I used to associate lack of robust ID systems with developing countries.
I know there's a segment of society in the US that associates robust IDs with government overreach and dictatorship, but I see it as fallacious. Yes, communist dictatorships did have a "papers please" system, and you can still easily encounter an ID check in Russia for instance. As somebody who lives in a free and well-functioning country though, I consider a robust ID system to be both a boost to my freedoms and a great convenience.
It's essentially an authentication and signing system. It allows me to positively authenticate myself in any interaction with the government, and thus protects me from impersonation by others. It allows me to sign documents in a way that establishes a chain of trust between the document and my ID, which protects me from fraud. And since interactions with the government are relatively rare, the best part of the system is that it acts as a trust authority between me and third parties. If I want to enter into a contract with some other private entity, the government ID system provides us both with authentication mechanisms that we trust.
You're talking about Right to Work checks, which are a legal requirement. Companies can do these earlier in the process, but they wouldn't want to due to having to consider the GDPR and Data Protection Act when holding that data.