Preprint, prepared for IEEE Transactions on Technology and Society
Refusals That Reveal: Server-Enforced Teen Contact Policies and Their Age-Inference Side Channels in a Production Social Platform
Tafadzwa Innocent Tauro · October 2026 · 7 pages · DOI 10.5281/zenodo.23147336
Protections that stop strangers contacting teens can, if built naively, reveal which accounts belong to teens. We found and closed two such leaks in Kibhi.
- 13 of 13 attack checks passed
- Timing leak closed: 96% to chance
- 98.75% less phone-number probing
