Roblox 家长控制是一场反乌托邦式的安全灾难
6 分•作者: notsure357•4 个月前
我的 14 岁女儿的账号被盗了，黑客成功地将自己添加为她账号的“关联家长”。我甚至不确定对方是否一开始就获得了她的密码。这一切都发生在周三早上（6/24/26），但事发当天我没有收到任何相关的电子邮件，尽管该账号绑定了我的邮箱（已验证）。通常情况下，如果有人在新设备上登录，我都会收到邮件提醒，但 6/24 那天我什么都没收到。我怀疑即使她账号已经启用了双重验证，也无济于事，因为她的账号被添加了一个双重验证的通行密钥，这绝对不是她设置的。但通过使用这个新创建的通行密钥，“关联家长”显然能够登录她的账号（我对此也未收到任何邮件），进入所有游戏，并将她自 2020 年以来收集的所有可交易物品全部转移走。
更糟糕的是，Roblox 表示他们对这些丢失的物品不负责任。过去 6 年圣诞节和生日的 Roblox 礼品卡，本来是用来购买这些收藏品的，现在却被这个“关联家长”全部挥霍一空。我的女儿对这些收藏品的丢失感到非常沮丧。
在密码重置过程中，我不得不禁用双重验证才能登录账号。一旦登录账号，如果没有通行密钥就无法从账号中移除双重验证通行密钥，我不得不通过一个 AI 聊天机器人来完成移除。那个“关联家长”还更改了出生日期，让我的女儿在 Roblox 上变成了 8 岁，而且似乎无论出于何种原因，出生日期只能更改一次，这意味着我不得不一次又一次地提交请求，试图更改出生日期。每次提交支持请求时，我都必须通过验证（验证码），输入六位数的邮箱安全码，然后尝试与一个只能部分理解我问题的 AI 机器人交流。我可以选择与人工客服对话，但这会立即结束与 AI 机器人的聊天，并告知我已提交支持请求。
最令人费解的是，我曾要求移除这个“关联家长”，但无论是 AI 还是其背后的支持团队，我都无法成功移除“关联家长”。我甚至有一个工单被关闭，并收到一封电子邮件回复，上面写着：“出于安全原因，我们无法更新或修改您孩子账号上的家长设置。家长控制可以由您孩子账号上具有家长权限的家长进行管理。”当我与 AI 机器人讨论此事时，他们解释说，“关联家长”是唯一能够从我孩子账号中移除自己的人，任何超出这个答案的要求都被拒绝了。我最终碰壁了，因为我提交了太多请求，他们不再接受我的表单提交。我的妻子现在正在处理这件事，因为我已经走投无路了。她设法将账号转移到了她的邮箱地址，因为她过去曾向 Roblox 付款为该账号充值，但那个“关联家长”仍然存在。
经历了这一切之后，我为什么还要再给 Roblox 花钱呢？孩子们在这个游戏平台上的精明程度远超任何人，他们会不断寻找漏洞来做这些事情。无论添加多少层级的沟通限制，这只会让情况变得更糟，因为 Roblox 从根本上不承担系统内任何丢失物品的责任，而在这个系统中，这些收藏品可以在朋友之间交易，或者被盗贼窃取。我不知道 Roblox 是否能够解决这些问题，因为他们的解决方案似乎反而让事情变得更糟。如果您持有 Roblox 的股票，我建议您强烈卖出！
查看原文
My 14 year old daughter got hacked by someone who was able to add themselves as a "linked parent" to her account. I'm not even sure that this person got ahold of her password in the first place. All this happened on Wednesday morning (6/24/26) but on the day it happened I did not recieve a single email about any of this even though the account is tied to my email address (verified). Usually if there is a new log in on an unrecognized device I would have gotten an email about it, but nothing was sent on 6/24 to me. I suspect that even if two factor authentication was already added to her account it would have done nothing, because there was a two factor authentication passkey added to her account which was definitely not set up by her. But by using that newly created authentication passkey the "linked parent" was clearly able to log into her account (which I didn't get any emails about), go into every game and transfer out every last collectable thing she had collected since 2020.<p>And wouldn't you know it, Roblox says they aren't responsible for those lost collectables. All the christmas and birthday roblox gift cards from the last 6 years which were used to buy those collectable items are completely wiped away for fun by this "linked parent". My daughter is absolutely devastated by her loss of these collectables.<p>During the password reset process I had to disable two factor authentication to be able to log in to the account. Once in the account, the two factor passkey could not be removed from the account without having access to the passkey and I had to go through an AI chatbot to get that removed. The "linked parent" also changed the date of birth to make my daugter become 8 years old in Roblox and apparently for whatever reason you are only allowed to change the date of birth once, meaning I had to make request after request trying to get the date of birth changed. Every time I am making these support requests I have to prove I am a human (captcha), enter six digit email security codes, and then try to talk to an AI bot that only partially understands my issues. I can request to speak to a human which immediately ends the chat with the ai bot telling me a support request has been filed.<p>What is most baffling of all is that I had requested removing the "linked parent" in question and between both the AI and whatever support team is behind that AI, I could not get the "liked parent" removed. I even had one ticket closed out with an email response telling me "We are unable to update or modify the parental settings on your child’s account due to security reasons. Parental controls can be managed on the account with parent privileges linked to your child’s account." When I was talking to an AI bot about this they explained that the "linked parent" was the only person who could remove themselves from my child's account and trying to request anything beyond that answer was denied. I finally hit a wall in which I had made too many requests and they were no longer accepting form submissions from me. My wife is trying to work on this stuff now because I'm at a dead end. She was able to get the account moved to her email address because she had made payments to Roblox in the past to fund the account, but the "linked parent" is still there.<p>Why would I ever want to give money to Roblox again after all of this? Kids are more savvy than anyone else on that gaming system and will keep finding loopholes to do these sorts of things. No matter how many procedural layers of restricted communication are added this is only made worse because fundamentally Roblox assumes no liability for any lost items within a system where these collectables can be traded among friends or stolen from thieves. I don't know that Roblox will be able to solve these problems ever when their solutions seem to be actually making things worse. If you have any stock in Roblox I would say they are a STRONG SELL!