Beachballin'

One of the things that has annoyed me most about parental controls on Leopard is the logs and reporting feature. Every time I go to that screen in the Parental Controls, I get a beachball. It never comes back. And I end up having to Force Quit the System preferences.

I picked up a tip in the Apple forums some time ago, and I thought I would share it here.

Sometimes your child goes to a normal website and it has a link to something you think should be allowed. So the easy method would be to look at the logs on the parental controls to see what the most recently blocked website is. Then that site could be added and everything would theoretically run swell.


However, if you are like me and you get the beachball, you need a way around this. I have two. The first is to look in Safari at the Activity window.

But if you don't mind getting your hands dirty, I like the following method better.

Open up Terminal.

su mokidad
Password:

You will need to replace mokidad with your own shortname. The su (substitute user) command allows you to pretend to be you while logged in on the kids account.

Then copy and paste these next two commands.

cd /Library/Application\ Support/Apple/ParentalControls/

sudo sqlite3 Users/kids/events.data "SELECT datetime(ZDATE,'unixepoch','31 years','localtime'),ZPAGETITLE,ZPAGEADDRESS from ZBLOCKEDWEBSITE" sudo sqlite3 Users/kids/events.data "SELECT datetime(ZDATE,'unixepoch','31 years','localtime'),ZPAGETITLE,ZPAGEADDRESS from ZBLOCKEDWEBSITE"

Notice, there are two bold kids there. You will need to replace those with the shortname of the user you are trying to inspect. This will spew an entire history of all the blocked websites with the most recent ones being printed last. It will very quickly show you the website that was blocked. The last few lines of output for mine look something like this:


2009-08-31 20:25:46||http://1.channel29.facebook.com:80/x/670286327/false/p_100000106381638=1
2009-08-31 20:26:51||http://1.channel29.facebook.com:80/x/4098069827/false/p_100000106381638=0
2009-08-31 20:50:10||http://2.channel29.facebook.com:80/x/1785344291/true/p_100000106381638=0
2009-08-31 20:53:51||http://8.12.43.175/hotdices/game_farkle_users.php?view=week&filter=friends&filter_game=simple&fb_sig_user=100000106381638&fb_sig_session_key=2.320_VmoCnoNfm0g9nbr09Q__.86400.1251856800-100000106381638&sesid=b8guughed00thu115mvl9ovsuo06ojg3&time=1251770028734
2009-08-31 20:53:57||http://8.12.43.175/hotdices/game_farkle_data.php


I added the bold to highlight the important data. My daughter was on facebook and wanted to play the farkle game. Since it would not load, I was able to run this command and quickly isolate the server which was being blocked.



To enable Farkle on Facebook you will need to add access to
http://apps.facebook.com
http://8.12.43.175

Basics

This video from Apple demonstrates the basics in setting up parental controls in Leopard and Snow Leopard.

Mac passwords

TIP FOR: Mac OSX Tiger (10.4.x) and earlier

This tip is a bit on the technical side, but it is a glaring hole in the security of Macs. Basically, it is this: any user on your system can determine the administrator's password with a bit of knowhow. It has improved with Tiger and seems to be completely fixed with Leopard, but it is still possible. There is an excellent article about cracking Mac passwords here.

If however, you just want to plug the hole and fix this, here are the instructions:

Open Terminal.

Type this in:

sudo chmod 700 /usr/bin/nidump

Enter the administrator password when prompted.

This does not do anything in Leopard as Apple has removed nidump alltogether.

It's operating system season

and there are so many operating systems ripe for the harvest. Coming this week is the next incarnation of large feline -Mac OSX Snow Leopard. Then in another few weeks, Microsoft will be releasing Windows 7. A new version of Ubuntu is also coming very soon. My house is full of Macs and I will be getting the latest because at $49 for a 5 user license, why shouldn't I?

I am most excited to see what they do with parental controls. However as each day passes, I am less and less hopeful that anything will happen. Apple released a lot of literature today about Snow Leopard today and there is not one mention of parental controls.

Microsoft, on the other hand, has a very detailed blog post with all the "enhancements" they are about to make to parental controls in Windows 7.

However, it seems that Windows 7 will be taking a step backwards in parental controls. They have removed web filtering and reporting from the operating system alltogether. Relying on third party software to do it for them.

/Epic fail

Gimp

Gimp is a free image manipulation program. Think Photoshop for cheapos. Photoshop for cheapos that don't want to Torrent Photoshop. It's a great and very powerful program that does more than most people would ever need from image editing software.

Tonight I tried to install the latest version on OSX Leopard for the kids. This was not easy.

Not only do you have to enable Gimp as an application that is allowed, you also have to install and allow X11. X11 is a free program that is on your Leopard install disk. It is not normally installed with OSX, but is easy enough to install with your original disk.

If that were all it would be okay.

The other steps involved are these:
Open Gimp on the administrator account. Make sure it installed correctly.

Next Open Parental Controls and allow the application for the kids. I have two in my list.
Also make sure to allow X11 (under Utilities)
The last step is the hardest.

Open Gimp on the kid's account.

Sounds easy, however, due to the fact that Gimp is ported to OSX from other platforms, it has about 50 different applications that need to be allowed for the kids. These do not show up in parental controls for whatever reason. So they must be allowed individually. This means

Open Gimp.
Allow whatever application it needs to use (gimp-helper, set-fontsize, etc)
Close Gimp (and possibly X11)
Repeat.

Eventually it will work. And it is worth it! The kids can create some amazing things with Gimp. It just takes some parental patience in the beginning.

Firefox

Just a reminder to my OSX readers.

Firefox does not obey parental controls. You can lock down whatever you want, but if you allow Firefox, Opera, IE, Google Chrome or any other browser, then your safetynet has a large gaping hole. To disallow Firefox, go to Parental Controls | System.

Check the box for "Only allow selected applications"

And do not allow things which you do not want.

Lock it up

A good practice on any computer is to lock the screen when you leave. There are several ways to do this:

First, set up your screen saver to require a password to get back in. This way if you forget to lock the screen it will automatically lock after a few minutes.

OSX
In System Preferences | Security
Check "Require password to wake this computer from sleep or screen saver."

Windows
Display Properties | Screen Saver
Check "On resume, password protect my computer"

Second, make a habit of locking your screen every time you get up

In OSX, you will need a shortcut to start the screensaver. I use the hot-corners function so that when I place my mouse in the top corner, the computer locks. You could also enable "Show Status in Menu Bar"

In Windows, you can press the windows key and the L key at the same time. This will lock the computer.

Location, location, location

Computer placement is essential to the operability of any parental controls software. Place the computers in a centrally located area of the home. Your kids are less likely to try to find holes in the software when Dad and Mom are right there.

This blog is more dedicated to the technical aspects of parental controls software and I want to stay away from psychological discussions, however, the other essential ingredient to the success of parental controls software is to open up a dialog with your children about why the controls are in place.

Choosing the right software

Parental control software is a daunting category. On Amazon.com, there are currently 66 results for "parental control software."

However I have the magnet to help find the needle in the haystack. I have been a Software Engineer for sixteen years and I can unequivocally tell you that parental controls should be a function of the operating system. All other parental controls are band-aids and kids are smart. There are plenty of ways to skirt around parental control software. These can easily be found with a quick search on Google or Yahoo.

Today there are options for parental control software which are built-in to the operating system. There are two software packages that I recommend:

1. Apple's OSX 10.5 (Leopard)
   10.4 (Tiger) has a good level of parental controls but they are vastly improved in 10.5
2. Microsoft's Windows Vista Home
   Note that other versions of Vista (Business and Executive) do NOT have parental controls.

These two are far from perfect, and are in desperate need of some of the features which have been available for years in other software packages. However the strength of Vista and Leopard lies in their user account management system. When set up correctly, the only way to bypass parental controls is to know the administrator password.

JellyTelly

Jelly Telly is a hit in my house. My kids get a huge kick out of the Fabulous Bently Brothers and Buck Denver. Recently, We tried ice cream with cereal because, as Buck Denver says

What is the difference in putting milk and sugar on your Cheerios vs. putting ice cream on your Cheerios? Isn't ice cream just milk and sugar?*

Personally, I love imitating Dr. Schniffenhousen's accent in so many different situations.

When I first turned on parental controls, however, my kids missed a few days of JellyTelly. This is due to the fact that you need to add two servers to your parental controls in order to get JellyTelly.com working

http://jellytelly.com
http://ooyala.com

Ooyala is the video delivery service that JellyTelly uses to host video content.

* Family Verdict: The reason ice cream and cereal do not work is the Crunch™. Cereal is designed to need some of the liquid that the milk provides. The cereal is just a bit too crunchy without the milk. And by the time your ice cream melts enough to sog up the cereal then you have kind of missed the point.

Webkinz

Setting up parental controls to work with Webkinz™ should be easy. Webkinz is a wonderful site for kids (and parents). You buy a stuffed animal which comes with a secret code. The secret code unlocks a virtual character that can interact with the Webkinz world.

However, for being such a child-centric site, Webkinz does not play well with Parental Control Software. If a parent were to unlock www.webkinz.com by itself then they would not get past the login screen. Forever wondering what could be beyond the magical flashing W promising that something is "Loading..."

Ganz, the makers of Webkinz, has a list of servers in their FAQ that need to be unlocked, but due to their immense popularity they have added many servers to handle their loads and yet they have not updated their list. So many parents (including myself) were stuck watching the flashing W.

I believe, through some searching, some surmising, and some determination, I have compiled a list of all of the IP addresses that need to be added to your parental control software in order to get Webkinz working again. These need to be allowed individually in your parental control software. There are several ways to do this which I will cover in future posts.

Here is the list


66.48.69.98
66.48.69.99
66.48.69.100
66.48.69.101
66.48.69.102
66.48.69.103
66.48.69.104
66.48.69.105
66.48.69.106
66.48.69.115
66.48.69.116
66.48.69.117
66.48.69.118
66.48.69.123
66.48.69.124
66.48.83.130
66.48.83.131
66.48.83.132
66.48.83.133
66.48.83.134
66.48.69.158
66.48.69.159
66.48.69.160
66.48.69.164
66.48.69.165
66.48.83.158
66.48.83.159
66.48.83.160
66.48.83.161
66.48.83.162
66.48.83.163
66.48.83.164
66.48.83.165
66.48.83.210
66.48.83.211
66.48.83.212
66.48.83.213
66.48.83.214
66.48.83.216
66.48.83.218