this post was submitted on 07 Mar 2026
284 points (98.6% liked)

Technology

42453 readers
526 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 4 years ago
MODERATORS
 

As of today, about half of all U.S. states have some form of age verification law around. Nine of those were passed in 2025 alone, covering everything from adult content sites to social media platforms to app stores.

Right now, California's Digital Age Assurance Act (AB 1043) is all the rage right now, which targets not only websites and apps but also operating systems. Come January 1, 2027, every OS provider must collect a user's age at account setup and provide that data to app developers via a real-time API.

Colorado is also working on a near-identical bill, which we covered earlier.

The EFF's year-end review put it more bluntly: 2025 was "the year states chose surveillance over safety." The foundation's concern, which I concur with, is, where does this stop? Self-reported birthday today, government ID tomorrow? There appears to be no limit to these laws' overreach.

top 50 comments
sorted by: hot top controversial new old
[–] powermaker450@discuss.tchncs.de 6 points 15 hours ago

this is the pipeline to fully ~~trusted~~ restricted computing.

Linux couldn't possibly comply properly with these new restrictions? Consumer grade prebuilts and laptops now only run "certified" operating systems, just like most mobile devices.

Surveillance and censorship are the ends, "age" (identity) verification is the means.

[–] 42beansinapod@discuss.tchncs.de 4 points 14 hours ago

One should be able to skip it when creating an account and then it should default to Jan 1st 1970 on all open source OS's to provide anonymity.

[–] altphoto@lemmy.today 2 points 12 hours ago

The population of the united States has suddenly jumped in age to 54. They don't give Fuchs.

[–] FosterMolasses@leminal.space 10 points 20 hours ago

Told you so told you so told you so told you so told you so told you so told you so told you so told you so told you so told you so told you so told you so told you so told you so told you so told you so told you so told you so told you so told you-

[–] Bazell@lemmy.zip 7 points 20 hours ago

The problem with Linux for the government is that it has a unique ability for being easily modified by users. You sure can force some very popular distros to follow these laws but you cannot force less popular distros made by enthusiasts to comply. Especially if those enthusiasts live not in your country.

[–] Quexotic@beehaw.org 4 points 19 hours ago

The very day I hear that my os is asking people their age is the day I find a different one.

[–] korazail@lemmy.myserv.one 1 points 18 hours ago (1 children)

The OS angle is huge, and worth picking a fight with, but I haven't seen any coverage over how this goes after developers too.

I think this is an attack on ALL open-source.

These bills are written by people who are clearly or maliciously tech illiterate and don't understand either the terminology or the practical impacts. And of course it's wrapped in 'what about the children?!'

They include definitions like (paraphrasing; not quoting a specific bill, but New York, Colorado and California do this):

  • "Application" is any software application that may be run on a user's device -- so ... EVERYTHING.
  • "Application Store" is any publicly accessible website or similar service that distributes applications -- so ... also everywhere, such as GitHub or GeoCities.
  • "Developer" is a person who writes, creates or maintains an application -- so if you have a github repo, or you've posted a binary or perhaps even a script somewhere recently, you're a developer.

And then require both developers and operating system providers to handshake this age verification data or face financial ruin. I think the original intent or appearance of intent is that the store developer needs to do the handshake. I'm not a lawyer, but I can't imagine these definitions aren't vague enough that they can't be weaponized against basically anything software.

I have a github account, and have contributed to "applications". As I read them, these bills pose a serious threat to me if I continue to do so, as that makes me a "developer" and would need to ensure the things I contribute to are doing age verification -- which I don't want to do.

I think that even outside the surveillance aspect, the chilling effect of devs not publishing applications is the end-goal. Gatekeeping software to the big publishers who have both the capacity to follow the law and the lawyers/pockets to handle a suit. These laws are going to be like the DMCA 1201 language (which had much much more prose wrapped around it and was at least attempting to limit scope), which HAS been weaponized against solo devs trying to make the world better.

I fully expect some suit against multiple github repo owners on Jan 2, 2027.

[–] RamenJunkie@midwest.social 2 points 14 hours ago

I have a script on my Github that process an exported Wordpress backup to Markdown files. Am I supposed to age gate this once these rules take effect? How would I even do that? Even if there was some sort of Python library to age gate the script, easy to use, drop it in, its a script, literally anyone could comment it out or delete it.

[–] jerkface@lemmy.ca 1 points 18 hours ago* (last edited 18 hours ago)

No, it mightn't. Err, won't.

[–] craftrabbit@lemmy.zip 9 points 1 day ago (1 children)

The most practical solution is probably to "not sell Linux in California anymore". I guess distributions could geofence the iso download page for plausible deniability and then that's that, right?

[–] Powderhorn@beehaw.org 12 points 1 day ago (3 children)

Who the hell is "selling" Linux?

[–] RamenJunkie@midwest.social 1 points 14 hours ago

I have an official Ubuntu CD, but I think it was just a donation, or maybe a "pay shipping" thing.

[–] oatscoop@midwest.social 9 points 1 day ago* (last edited 1 day ago) (1 children)

The offical linux shop, obviously -- though your local PC sales/repair shop can probably order you a copy. I understand that Linyos Torovoltos grew up under communism and originally couldn't legally sell Lunix, but the Soviets lost the cold war decades ago.

I'd rather spend a few bucks for a legitimate copy than risk installing some virus infested illegal version off some sketchy website.

[–] KyuubiNoKitsune@lemmy.blahaj.zone 4 points 19 hours ago (1 children)

I went to your second link and I think it gave me a virus. I keep having these verbal tics now.

[–] oatscoop@midwest.social 2 points 12 hours ago* (last edited 12 hours ago)

Oh no, that's the first phase.

You need to get your computer to an A+ certified tech and have your OS reinstalled ASAP. If you delay you're looking at a lifetime of buying old Thinkpads off the Internet.

[–] TehPers@beehaw.org 4 points 1 day ago (1 children)

Red Hat.

The other distros? No idea.

[–] Powderhorn@beehaw.org 2 points 1 day ago (1 children)

I knew someone was going to come back with Red Hat. I just didn't expect it to be you!

[–] TehPers@beehaw.org 2 points 1 day ago (1 children)

Hey even I use Linux daily.

Actually, I'm not really sure why "even I" should be shocking. I write code for a living. Surely I should be using Linux once in a while.

Anyway RHEL is probably the only Linux distro I can think of that costs money and comes with support. The major cloud providers sometimes have their own Linux distros they use as well (looking at you, Amazon) and you can argue they are selling Linux, but not as directly as RHEL does.

[–] Powderhorn@beehaw.org 1 points 1 day ago (1 children)

I'd like to go back to KDE Neon, but it doesn't play nice with thermals on my Surface.

(and I totally expect you to be a Linux user ... why haven't you bragged about using Arch yet?)

[–] TehPers@beehaw.org 2 points 21 hours ago

why haven't you bragged about using Arch yet?

Well Manjaro is Arch-based, but it feels like cheating to say that. Anyway, I used Manjaro, btw.

[–] SnotFlickerman@lemmy.blahaj.zone 120 points 2 days ago* (last edited 2 days ago) (6 children)

Let's be absolutely clear here: The explosion of people being comfortable coming out as some stripe of LGBTQ+ has everything to do with an open internet where youth were not restricted from finding out about information related to how they felt inside. Instead of being made to feel like strangers in their own skin, with a world telling them that people like them didn't or shouldn't exist, they instead found community and self-love through internet forums and information which allowed them to pursue full, healthy lives as adults.

This "protect the children" malarkey is one more way for the religious groups who oppose LGBTQ+ culture to "protect the children" by restricting access to this kind of information, reducing their ability to find it in their formative years, in the name of protecting them while actually stunting their personal growth.

It extends beyond sexuality as well, although that is the most obvious since many religions are deeply censorious regarding sex.

It also affects subjects like atheism, as the various religious cultures generally do not want people contemplating the idea that there isn't a god, especially not while they're young, they want you long indoctrinated into belief before you can explore different ideas.

Further, when I was a kid in the 80s and 90s, everything I knew about drugs was literally old wives tales meant to scare kids away from drugs, and then the internet came around and suddenly there was a boom of actual, verifiable scientific information about drugs so if you wanted to experiment with drugs, you knew what you were getting into. I once had a conversation with a girlfriend who was a bit older than me about her experiences with LSD as a teen, and she admitted that at the time she really didn't understand on any scientific level what was happening or what the nature of hallucination was, she just knew she was having fun and seeing crazy shit.

This is a backdoor to restricting access to important information that youth need to have access to for making healthy decisions for themselves sexually, religiously, and in terms of what substances they put in their bodies.

The birth of the internet gave us a beautiful period where people could grow up with access to accurate, verifiable, worthwhile information that helped them navigate and understand the world they were growing up in and who they were within that world.

This kind of legislation intends to snuff out that openness and accessibility which led to increased openness and acceptance of LGBTQ+, atheism, and safe drug use (including the understanding that some illegal drugs like marijuana and LSD are probably safer than legal drugs like alcohol and tobacco).

[–] Katrisia@lemmy.today 18 points 1 day ago

Also, neurodiversity, mental illness, and basic mental health care. People are discovering they are autistic, ADHDers, etc. They're learning how to prevent depression or how to apply DBT tools (e.g., for emotional regulation, for judging less). It's amazing.

[–] TehPers@beehaw.org 9 points 1 day ago (1 children)

It also affects subjects like atheism, as the various religious cultures generally do not want people contemplating the idea that there isn't a god, especially not while they're young, they want you long indoctrinated into belief before you can explore different ideas.

This reminds me of a Pakistani person I don't personally know, but someone I know talks to them.

In their hometown, people recite verses from the Quran as part of their religious activities. There's only one problem: the Quran they use is written in Arabic, but everyone there speaks Urdu. People don't actually know what the passages say, just how to say them.

So this person asked them once what the passages say. Why do we read the passages in Arabic instead of Urdu? People here don't know Arabic.

Anyway, he got belted shortly after that.

[–] Powderhorn@beehaw.org 4 points 1 day ago

Wasn't it Vatican II that finally allowed Catholic services in local languages instead of Latin? That really wasn't long ago in the grand scheme.

[–] d3adpaul77@lemmy.org 11 points 1 day ago

and I think it's worth noting that a lot of hetero people don;t fit the normative paradigm and anonymity allows for that to be developed enjoyed and explored.

[–] parson0@startrek.website 7 points 1 day ago

Well said, thank you.

load more comments (2 replies)
[–] ArcaneSlime@lemmy.dbzer0.com 8 points 1 day ago (1 children)

Wait, so instead of me telling every website I'm 90, I'll tell my OS I'm 90 and the sites will query that, and this somehow works better? I'm not 90 btw, so all I'm doing is just changing who I'm lying to from zyn.com to Fedora? Great plan.

[–] Fraction9170@infosec.pub 6 points 19 hours ago

They know people will do this. It's only stage 1. After this system is integrated, they will complain that people are misusing the feature and it needs to be upgraded to ID or biometrics. Boiling the frog.

[–] FreddiesLantern@leminal.space 6 points 1 day ago (1 children)

Time to get a permanently offline machine.

[–] CanadaPlus@lemmy.sdf.org 8 points 1 day ago

Overkill. Just find the illegal no-age-collection ISO. Installing with your middle finger raised is optional, but recommended.

[–] schnurrito@discuss.tchncs.de 87 points 2 days ago (18 children)

In my youth I was taught that democracy meant that the government served the people.

What do any of these laws have to do with serving the people? Do they have anything to do with the will of the people?

[–] sharkfucker420@lemmy.ml 52 points 2 days ago

The government serves the class that controls production and right now that class is really really concerned about what everyone does when they aren't slaving away for them.

[–] ryannathans@aussie.zone 6 points 1 day ago

The govt serves the biggest election campaign funder. In almost all cases that is Israel

load more comments (16 replies)
[–] AllAroundNerd42@lemmy.today 10 points 1 day ago (6 children)

Your Linux distro may be next. I use Arch by the way.

[–] FosterMolasses@leminal.space 1 points 20 hours ago

Do you actually wear pink knee-high socks? I'm dying to know.

[–] robador51@lemmy.ml 3 points 1 day ago

I lolled. Thanks I needed that.

load more comments (4 replies)
[–] vivalapivo@lemmy.today 53 points 2 days ago (7 children)

Age Verification Laws

The most misleading title ever. They are surveillance laws

load more comments (7 replies)
[–] RedFrank24@piefed.social 39 points 2 days ago (1 children)

Presumably even if Linux must provide a means of reporting an age, you can always modify that distro to always report the oldest age?

[–] LodeMike@lemmy.today 27 points 2 days ago (1 children)

Yes

The California law is just "put this column in your DB and make a getAge() call.

load more comments (1 replies)

Age verification today. What other BS surveillance info tmr?

[–] rimu@piefed.social 24 points 2 days ago (1 children)

The thing about doing age verification at the OS level is the user could just install a crack that rewrites the necessary code. It'll take some heavy DRM type stuff to block that. Possibly hardware support, like a specialised TPM.

No way can that be standardised and then rolled out quickly. If they rush it then it'll be some proprietary power grab.

The alternative is each website and app does it separately which will be spotty and provide endless security breaches.

It'll be a shitshow either way.

[–] Mesa@programming.dev 17 points 2 days ago* (last edited 2 days ago) (3 children)

The thing is, this shouldn't really be a problem.

I am still against where all this age verification crap is coming from, and I'm against what specifically "age verification" entails; but here's the thing: We keep saying, "It should be the parent's responsibility to secure their kids"—and while that's true, you can do all the talking and educating you want, but the fact is that the internet is now nigh-fully integrated with our lives, and unless you are surveilling your kid at every moment they are on the internet (don't recommend), not every parent has the time, resources, or know-how to keep their children safe on the internet without help.

So to play naive for a moment and ignore the well-understood reality that "child safety" is an atom-thick veil for mass surveillance: Why did we give up so fast on device parental controls? The info being stored on the OS / user settings actually isn't so bad of an idea if the implementation valued both safety and privacy. Upon setting up the device or account, it is the parent's responsibility to create a password or biometric or whatever to activate/deactivate the safety mode. No personal information required. It should be pretty easy. Are there technically ways for the kid to get around this? Yes, but that'd be breaking the trust. In the same way you'd deal with your kid sneaking out of the house, you deal with that separately. The existence of websites that don't perform the check is inevitable no matter what you do.

And if you don't believe your kid needs a safety lock on the internet, then that's your prerogative.

It's apparent that many parents need a more convenient tool available to them, but privacy doesn't need to be compromised in order to achieve a safer internet. I got lazy while writing this, and I'm sure that's clear in some spots, but I'm just gonna post it. There's possibly something huge that I'm overlooking, so I'll just let someone else point it out.

load more comments (3 replies)
load more comments
view more: next ›