The tech trade’s unofficial motto for 20 years was “transfer quick and break issues”.
It was a philosophy that broke extra than simply taxi monopolies or hotel chains. It additionally constructed a digital world stuffed with dangers for our most weak.
Within the 2024–25 monetary yr alone, the Australian Centre to Counter Little one Exploitation obtained nearly 83,000 reports of on-line youngster sexual exploitation materials (CSAM), totally on mainstream platforms – a 41% enhance from the yr earlier than.
Moreover, hyperlinks between adolescent utilization of social media and a range of harms have been found, reminiscent of opposed psychological well being outcomes, substance abuse and dangerous sexual behaviours. These findings symbolize the failure of a digital ecosystem built on profit quite than safety.
With the federal authorities’s ban on social media accounts for under-16s taking impact this week, in addition to age assurance for logged-in search engine customers on December 27 and adult content on March 9 2026, now we have reached a landmark second – however we should be clear about what this regulation achieves and what it ignores.
The ban could maintain some kids out (in the event that they don’t circumvent it), nevertheless it does nothing to repair the dangerous structure awaiting them upon return. Nor does it take steps to change the dangerous behaviour of some grownup customers. We’d like significant change towards a digital duty of care, the place platforms are legally required to anticipate and mitigate hurt.
The necessity for security by design
At present, on-line security usually depends on a “whack-a-mole” strategy: platforms look forward to customers to report dangerous content material, then moderators take away it. It’s reactive, gradual, and sometimes traumatising for the human moderators concerned.
To actually repair this, we want security by design. This precept calls for that security options be embedded in a platform’s core structure. It strikes past merely blocking entry, to questioning why the platform permits dangerous pathways to exist within the first place.
We’re already seeing this when platforms with histories of harm add new options – reminiscent of “trusted connections” on Roblox that limits in-game connections solely to individuals the kid additionally is aware of in the actual world. This characteristic ought to have existed from the beginning.
On the CSAM Deterrence Centre, led by Jesuit Social Service in partnership with the College of Tasmania, our research challenges the trade narrative that security is “too exhausting” or “too expensive” to implement.
Actually, now we have discovered that easy, well-designed interventions can disrupt dangerous behaviours with out breaking the person expertise for everybody else.
Disrupting hurt
One among our most vital findings comes from a partnership with one of many world’s largest grownup websites, Pornhub. Within the first publicly evaluated deterrence intervention, when a person looked for key phrases related to youngster abuse, they didn’t simply hit a clean wall. They triggered a warning message and a chatbot directing the person to therapeutic assist.
We noticed a lower in searches for unlawful materials, but additionally greater than 80% of customers who encountered this intervention did not attempt to search for that content on Pornhub again in that session.
This information, in keeping with findings from three randomised control trials now we have undertaken on Australian males aged 18–40, proves that warning messages work.
It’s also according to one other discovering: Jesuit Social Service’s Stop It Now (Australia), which offers therapeutic providers to these involved about their emotions in direction of kids, obtained a dramatic enhance in internet referrals after the warning message Google reveals in search outcomes for youngster abuse materials was improved earlier this yr.

The warning that Google shows in Australia directing customers to Cease It Now in the event that they seek for unlawful materials referring to youngster sexual exploitation.
By interrupting the person’s circulation with a transparent deterrent message, we are able to cease a dangerous thought from turning into a dangerous motion. That is security by design, utilizing a platform’s personal interface to guard the group.
Holding platforms accountable
This is the reason it’s so very important to incorporate a digital obligation of care in Australia’s online safety legislation, one thing the federal government dedicated to earlier this yr.
As a substitute of customers getting into at their very own danger, on-line platforms can be legally accountable for figuring out and mitigating dangers – reminiscent of algorithms that advocate dangerous content material or search capabilities that assist customers entry unlawful materials.
Platforms can begin making significant modifications at present by contemplating how their platforms may facilitate hurt, and constructing in protections.
Examples embrace implementing grooming detection (enabling the automated detection of perpetrators making an attempt to use kids), blocking the sharing of recognized abuse imagery and movies and the hyperlinks to web sites that host such materials, in addition to proactively eradicating hurt pathways that focus on the weak – reminiscent of kids on-line with the ability to work together with adults not recognized to them.
As our analysis reveals, deterrence messaging performs a job too – displaying clear warnings when customers seek for dangerous phrases is very efficient. Tech firms should partner with researchers and non-profit organisations to check what works, sharing information quite than hiding it.
The “transfer quick and break issues” period is over. We’d like a cultural shift the place security on-line is handled as a necessary characteristic, not an non-compulsory add-on. The expertise to make these platforms safer already exists. And proof reveals that security by design can have an effect. The one factor lacking is the need to implement it.![]()
- Joel Scanlan, Senior Lecturer in Cybersecurity and Privateness, University of Tasmania
This text is republished from The Conversation beneath a Artistic Commons license. Learn the original article.

