r/Parenting•
cheracc

If your kids play Minecraft, their safety may be in danger with the latest new addition

Mojang has recently released their "Minecraft Realms" service in North America (it is already available in most of Europe). Minecraft Realms is a subscription service that allows players to have their own small, private server to which they can invite their friends and play together online without the hassle of setting up their own persistent world.

This is a really neat addition to the game, and it has been wanted for a long time. However, Mojang's implementation of it has exposed my children and any children that play (or have ever played) on any multiplayer servers to potential very easy targeting by child predators.

The problem is the way in which players can invite their friends to their Realms servers. All that is needed is a username, and the invited player will receive a notification that they have "been invited to so-and-so's Realms server".

This becomes a problem when a child predator joins "family-friendly" or "kid-friendly" servers, and can get a list of dozens to hundreds of usernames that are primarily young children. Normally, these servers are moderated and all communications and connections are logged, so that if anything were to happen as a result of communications on them there is a record of those conversation and IP addresses that can be turned over to authorities. However, a child predator could send Realms invitations to these kids, with no record or knowledge by the server staff. In fact, on many servers, the predator would not even have to connect to it, since lists of players can often be found on websites or online world maps.

Less internet-savvy kids would gleefully accept any "invitation" thinking they were the recipient of something special. Once on there, all bets are off as far as their safety and security.

At the very least, you should make your kids aware of this and instruct them not to accept these invitations, unless they know the person in real life.

I have opened a suggestion on the r/Minecraft and the r/MinecraftSuggestions subreddits, to attempt to get some attention to this glaring safety issue. Myself and some other parents are asking for Mojang to add a "Parental Controls" menu to the game, which will allow parents to restrict what multiplayer servers and Realms servers that their kids can connect to. We would like this to work similarly to the v-chip in your television: parents could restrict their kids from receiving Realms invitations, and also from joining multiplayer servers unless a parent approves it. Unfortunately, the demographic of those subreddits is a bunch of 13-16 year old kids, and they aren't too keen of the idea of giving their parents control over what they do on the internet.

I would like to ask that if your kids play Minecraft, and you would appreciate having some parental controls over what servers and private Realms servers you kids have access to, that you would let Mojang know and help us get this done. You can show your support by tweeting the developers (@jeb_, @Dinnerbone) and Mojang support (@MojangSupport), by posting on their Facebook page, or by voting on and expressing your concern in the comments of the Reddit posts that have already been made.

EDIT: If you disagree with the last two paragraphs of this post, feel free to comment and say that. But downvoting this post because you disagree with that one part is against reddiquette, and is preventing the knowledge of this vulnerability from reaching parents. Even if nothing gets changed with Minecraft itself, parents deserve to at least know that their kids could be invited to what is essentially a "private chat room" by anybody. Please, please comment with your disapproval for instead of downvoting because you disagree with one small part of this post

Posted May 2, 2014, 11:51 PM UTC · edited

019
[deleted]•

[deleted]

15
PrawnShopGhost•

Yeah, I agree. It's the parent's responsibility here - not mojang's. I want less companies trying to do my job for me - not more.

1†
cheraccOP•

I agree with you. I never implied that I want anybody to do your job for you. In fact, I said:

At the very least, you should make your kids aware of this and instruct them not to accept these invitations, unless they know the person in real life.

This is my primary goal with this post - to inform you and other parents that there is potential out there for people to contact your kids through a game aimed at kids without your knowing about it.

My secondary goal is to get a tool to help us parents do our job better. If you don't wish to use that tool, that is your choice.

Cars have seatbelts and seatbelts help save lives - if you choose to use them. I'm just asking for a "seatbelt" to be installed in Minecraft for those that would appreciate having that option. I'm not asking them to force anything on anybody.

4
PrawnShopGhost•

Any multiplayer game has that potential. Also, while I see it as a kid safe game - I don't believe it is marketed or aimed at children. While there is cross over interest in fan merchandise - the game itself really hasn't been marketed at all. Really though, the same merch exists for wow or any number of game for adults.

As a gamer and a parent - I think you're making much ado about nothing. The risks was already there when you let your kid on the internet.

0
cheraccOP•

And WoW allows me to block RealID or whatever its called for my kids. WoW allows me to set hourly restrictions on their playtime.

Why can't Minecraft have similar options? Its userbase of 10-15 year-old kids is enormous, whether it is marketed at them or not.

4†
[deleted]•

[deleted]

1
cheraccOP•

Parenting can only go so far when it comes to kids of this age. Do you consider using the v-chip in your TV to block porn to be bad parenting?

It is in the best interest of the developer to support this to prevent any potential liabilities that may come from predators using their service to lure kids. There is no reason for them not to.

If even one kid's abduction or exploitation is avoided, the work done would have been worth it.

-5†
bighatscoutguy•

Thousands upon thousands of elementary and middle school age children play this game regularly. Minecraft Realms allows for blind invitations that require only a username. This gives a person with ill intent an ice cream truck full of puppies and a place to hide. Child predators are devious. It is just a matter of time before the worst case scenario of a child being harmed due to lack of parental diligence happens. (Not all parents are good parents) SO..if you are in favor of even one child being needlessly harmed then by all means continue down voting, cursing, and throwing a very silly tantrum. OR: you could go change your vote and your stance and actually jump on the bandwagon and possibly be the hero that protected a child from harm.

4†
Aerazykil•

Great way of summarizing the risk this issue presents! Thanks Big Hat

1
PrawnShopGhost•

Nice scare mongering there. You might have a future in government

0†
bighatscoutguy•

scare·mon·ger [skair-muhng-ger, -mong-]
noun a person who creates or spreads alarming news.

I did not create this issue nor make it more alarming than it already is.

luckily reddit has a feature that allows you to click a username and review all of their posts. Then you can consider the source.

0
matthewrozon•

or spreads alarming news.

1
davidp40•

Good parenting isn't about being with your child at all times to protect them (physically impossible for me as a parent of 5 anyway), it's about allowing them age-appropriate experience.

For my 6 year old, this includes a whitelisted, moderated Minecraft server where she will not meet pedophiles in chat.

That's not bad parenting, it's common sense.

Perhaps I should also remove the front gate which separates our garden from a busy road, and stand there all day?

There should be parental controls if I wish to switch them on. No inconvenience to all you parenting experts out there.

3
athaliah•

Maybe I am missing some key bit of information...but people have ALWAYS been able to host their own Minecraft servers. All this new feature is doing is charging $$ for a streamlined process, because before you had to use a 3rd party program to set it up, but it was still super easy and super possible to not only host your own servers, but join others.

My friends and I have done this before, and I don't recall needing any invitations or even passwords, anyone with the ip address could join. So in fact, this new service offers a bit more protection.

2
crusoe•

May not be the easiest option but can't you just blacklist the realms hosts or sub domain in an appropriate web filter?

1
crusoe•

Really its the only way to even remotely control what kids do online.

1
cheraccOP•

There are two major problems with this solution:

  1. You would have to block ALL Realms servers. If your child has a friend from school that they want to play with, you cannot, with current functionality, block just one Realms server. They are all hosted on one set of IPs, and one cannot be allowed through firewalling without allowing all of them.

  2. You would have to set up a whitelist instead of a blacklist. This is possible, but it is a hassle to set up. One would need to whitelist every website that they want to allow their kids access to. This is like swatting a fly with a sledgehammer. It would be orders of magnitude easier to simply click some links that said "block Realms invitations for this account" and enter a password.

0†
lumaga5yr, 3yr, 4m•

All I'm reading here is OMG STRANGER DANGER. Talk to your children, educate them on how to be smart about online interactions, and stop worrying about everything.

1
bighatscoutguy•

These are not OUR children we are talking about. The children we are talking about make mistakes with their personal info everyday right before our eyes even though they HAVE been informed many times not to do so. I really do mean literally everyday. Cheracc personally emails the parents of these children when they do make such a mistake. To not worry about a childs safety is not in my or his nature.

1