Live data from Hacker News

Tell HN: My kid's school installed spyware and I can't remove it

news.ycombinator.com

161–170 of 442 posts

Re: Tell HN: My kid's school installed spyware and I can't remove it

#161
post #134

> I bought him a Chromebook for schoolwork, but also for other private things. When we logged in... This is why you need to pay attention to the technology choices that you make, and that your schools make. Chromebooks are designed from the ground up to be locked-down dystopian spyware once you "log in" to them with a specific Google account. For heaven's sake stop buying any more Chromebooks. The correct solution he…

> Call into the school's board meeting during public comment, and make it loud and clear that the school is installing spyware on students' Chromebooks. Share your technical credentials and the method by which you found this. Just some comments on the political aspect of this, since the HN crowd tends to not be so good at that part: - Following this advice and using a tone that even resembles the tone of the comment…

> When you run into that kind of bad outcome from human frailty, it is better to treat it as such

I take it, then that, you would not bother to do anything about the descent down the slope to uniformity controlled by MAMAA?

Re: Tell HN: My kid's school installed spyware and I can't remove it

#162
My I suggest a nice one page letter from your attorney to the School Attorney and cc the School board and local police department.

It runs a foul of 1990s computer law, at least in the USA as the firm producing the software did not have your permission to break computer security safeguards and access guards.

Oh and make sure to save a copy of the local newspapers.

Then submit story to channel & i-team at:

https://abc7chicago.com/contact-i-team-submit-story-investig...

Re: Tell HN: My kid's school installed spyware and I can't remove it

#165
The real question isn't whether or not GoGuardian is installed--because the Chromebook is going to be subject to the school's policies while the student is logged in, assumedly doing classwork. The real question is whether or not it's being disclosed to you when you initially login to the school's domain that this software is being installed.

Installing something you were given a chance to read the EULA and disclosures for is fairly reasonable, because you would have the opportunity to decline (and then they probably wouldn't be able to login to the schools network). The school using MDM to install the monitoring software _without disclosing this to the user_ would likely fall afoul of the law, because yeah if you paid for it you are the owner and what you say goes. Third parties are not allowed to install software on equipment you own without explicit permission. Additionally, to be even remotely ethical, this needs to be disclosed clearly and the first time the school login is used and the software installation is about to occur--not buried inside a school handbook somewhere.

If the school has been so bold as to ignore the need to disclose that they're installing something that records and reports all web browsing activity (which GoGuardian is designed to do), or if this software applies to other logins on the system which will be used by people who did not consent to being monitored, then the school needs to start hiring _competent_ people to administrate the network, because doing this with minors involved is just really begging for a judge to slap the school system hard.

The school system can (and should) make that policy only apply when the kid's school login is being used--so if they try to fob you off with that silly excuse, feel free to go ahead and start talking to lawyers. Google would not be amused to find some rinkydinky school administrators making claims that the attested environment used by ChromeOS may be trivially compromised by other users and thus justify installing the monitoring software to be in play all the time. Rather a lot of work has gone into creating that environment.

Re: Tell HN: My kid's school installed spyware and I can't remove it

#166

> I did a full factory reset, signed in to his account again, and now the system is once again locked down. > So now I'm in the position where I have to ask permission from a local government entity to please let me install stuff and don't monitor the computer I bought and paid for. I don't understand, this sounds like an issue with the account, not with the Chromebook. Does this spyware persist on this device even i…

> I don't understand, this sounds like an issue with the account, not with the Chromebook.

While it does sound like an issue with the account, the unusual part is that Chromebook hands over the control of a device you own to someone else, just because you logged in to some account. Call me old fashioned, but an OS or device that does this is a vulgar anti-consumer design.

I get it that consumers should accept it as a feature of the product. But this was an unacceptable proposition a decade ago. There is a gradual erosion of consumer rights and we aren't fighting back enough. Another factor is that even tech savvy users are caught by surprise. This means that this drawback is not sufficiently highlighted in the product description. The platform may not have become this popular if it was.

Re: Tell HN: My kid's school installed spyware and I can't remove it

#168

Earlier quoted context omitted.

On a Windows account, a user can change the default browser for their own account. Therefore, a user can delegate the choice of default browser to the remote management. A user can record which sites their own browser visits. Therefore, a user can delegate that authority, allowing remote management to record which sites that user visits. A user does not have the authority to record which sites are visited by another…

Group policies on Windows, applied at logon, give the admin control over what the user can or cannot do. If the admin wants you to use Chrome not Edge, then that is what you'll be using, and you won't be able to change the default.

To my knowledge, that group policy only applies to the user who is logging in, not the other users on the computer.

Re: Tell HN: My kid's school installed spyware and I can't remove it

#169

Earlier quoted context omitted.

Probably a Google account sign on. If I sign into my work Google account on my androids chrome it basically forces you to install spyware so our IT team can suck up my browser history. It sounds like chrome os takes this approach and adds steroids.

This is why people should be issued a work phone (or children a school laptop in the case of the OP) if the IT department is going to request control of it. A while ago my company eventually decided to enable security settings for Microsoft Outlook, Teams etc on all mobile devices (the wipe phone on demand option). All that happened was everyone without a company phone uninstalled Teams and used WhatsApp instead.

I wouldn't accept a work phone unless I was given full control over it and can use it for personal use as well.

I'm not carrying two around.

If you want me to leave one at my desk that's fine but you won't reach me on it unless I'm there.

Same goes for work laptops and working from home.

The whole idea that you need to separate work from personal is based on the idea that if you use work laptop for personal work then they own it, that's an entirely made up constraint, one I won't accept.

In before bad analogies, there are plenty of industries that provide tradies with tool stipends, those are still owned by the tradesman but paid for by the employer do to their consumable nature. It allows tradies to buy more expensive tools if they prefer and encourages them to look after them better.

Re: Tell HN: My kid's school installed spyware and I can't remove it

#170
GoGuardian CEO here. Lots of misinformation in this thread.

Chrome extensions are attached to your Google account. Your son logged into his Chromebook with his CPS account which in turn installed the GoGuardian chrome extension.

The simplest solution here is to just log on to your Chromebook with a personal account. No enterprise policy will be applied.

Post reply on HN