this post was submitted on 02 Nov 2025
312 points (94.1% liked)

Privacy

4151 readers
37 users here now

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don't promote big-tech software
  3. No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
  4. No reposting of news that was already posted
  5. No crypto, blockchain, NFTs
  6. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

founded 1 year ago
MODERATORS
 

AB-1043 "Age verification signals: software applications and online services."

Text https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260AB1043

Other info https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260AB1043

California AB 1043 signed. Mandatory os-level, device-level, app store, and even developer-required age verification for all computing devices.

Edit: altered title from "ID check" to "Age Verification check"

top 50 comments
sorted by: hot top controversial new old

sudo apt install apache2

do you have a valid drivers licence?

y

please type in your drivers licence number

[–] Cevilia@lemmy.blahaj.zone 51 points 6 days ago (1 children)

Take it from a Brit... It's not about the children. It's never about the children.

[–] ZILtoid1991@lemmy.world 15 points 6 days ago (2 children)

One of the architects of Project 2025 confessed on secret camera that the purpose of age verification laws is a de facto porn ban.

[–] Dasus@lemmy.world 6 points 6 days ago* (last edited 6 days ago)

I'm sorry but you're using that term wrong. You mean a de jure porn ban.

A de facto porn ban would mean that you actually couldn't get any. And that's just ridiculous.

Like drugs are illegal de jure, but de facto getting weed pretty much anywhere in the world is not a challenge. Usually even easier than getting alcohol as an underage person. Not that I have experience of that in the past few decades (being underage that is).

I mean I guess it's "de facto" in sofar that it's not exactly presciptively de jure illegal when it's done like that. So in that sense you are right to use it like that, but eh. I disagree with who I was when I started writing this. No matter we're on lemmy.

[–] floofloof@lemmy.ca 5 points 6 days ago

Maybe for them. But for governments in general the point is that age verification is ID verification and it means everything you do online or on any electronic device can be surveilled and tied to your real identity. And that makes political dissent a lot harder to organize without being shut down.

[–] SpiceDealer@lemmy.dbzer0.com 29 points 6 days ago (2 children)

Why do I need to show my ID to install Gentoo?

[–] sudolinuxjunkie69@lemmy.dbzer0.com 5 points 6 days ago* (last edited 6 days ago)

Because how can Persona (and the government) know who is using Gentoo without an ID requirement? What is someone doesn't use javascript when browsing the internet?

[–] derpgon@programming.dev 3 points 6 days ago (1 children)

I'd like to see them try. Is it during installation or download?

[–] lka1988@lemmy.dbzer0.com 9 points 6 days ago

Oops, forgot to compile that module. Oh well.

[–] pyre@lemmy.world 31 points 6 days ago (9 children)

i hope people talking about him as a potential president remember this; he's a conservative robot who doesn't give a shit about you.

load more comments (9 replies)
[–] RedFrank24@lemmy.world 14 points 6 days ago* (last edited 6 days ago) (2 children)

This bill, beginning January 1, 2027, would require, among other things related to age verification with respect to software applications, an operating system provider, as defined, to provide an accessible interface at account setup that requires an account holder, as defined, to indicate the birth date, age, or both, of the user of that device for the purpose of providing a signal regarding the user’s age bracket to applications available in a covered application store and to provide a developer, as defined, who has requested a signal with respect to a particular user with a digital signal via a reasonably consistent real-time application programming interface regarding whether a user is in any of several age brackets, as prescribed. The bill would require a developer to request a signal with respect to a particular user from an operating system provider or a covered application store when the application is downloaded and launched.

I'm not sure how this is going to be enforceable. So, in essence:

  • The OS should have an accessible API that returns the age bracket of the user, presumably for the purposes of eliminating a lack of compliance on apps using children's data for advertising. That's not necessarily a massive problem, though I don't like the idea of age brackets, I'd prefer it if it's just a "Adult" vs "Child" bracket.

  • It doesn't seem to be asking that the age be verified through some external provider, so simply stating the age of the user is enough.

  • App developers are expected to always request that information on launch/installation, which is simply not going to work because how would you enforce it for software made before this law came into effect?

  • The definition of "covered application store" is way too broad and covers basically anywhere you can download software, including things like public docker hubs or Github, so no that's never going to work out. Apple and Google can maybe include the request for age brackets and provide that information by default as part of the SDK, but legacy software? Good luck getting WinRAR to request that information. You've essentially banned all software made before 2025.

So... The OS-level stuff isn't a huge deal, but the requirements on app developers are way too strict and would be unworkable. If I were to re-write the bill, I'd make it so the age bracket must be available at the OS level, but not required by the app developer to actually use it. I would then add more strict requirements on sites to not use children's data for advertising, with the reasoning being that they could have asked for the age bracket from the OS at any time, and the fact that they didn't even bother means they actually wanted to use children's data.

[–] anarchiddy@lemmy.dbzer0.com 12 points 6 days ago (1 children)

The bigger problem IMO is the implication that a device/OS must have a defined "account holder" that is associated with an actual person with an age. Nevermind that there isn't any verification happening that could de-anonymize a user or be breached - as an administrator, am I responsible for ensuring users only use a specific account with the correct age identified? What about google or apple? Are devices meant for children to be locked down so that new users or accounts can't be created to circumvent restrictions?

This law is too vague to have any meaningful impact on child safety, and the implications behind it make future erosion of privacy far more likely.

[–] RedFrank24@lemmy.world 1 points 5 days ago

That's not even accounting for server racks. Servers run operating systems too, and a server doesn't really have a 'user' as such. Sure there's the admin account, but there isn't a definitive person you can tie that to.

[–] Peruvian_Skies@sh.itjust.works 2 points 6 days ago* (last edited 6 days ago)

So the "age verification" boils down to the same level of security as that pop-up on PornHub asking if I'm over 18? And Newsom wants to create a legal precedent that can open the way to mandated State-controlled malware on every electronic device in the State just for that?

I mean, he's a politician. He's very aware that people can and do lie all the time. Which means that the stated goal of this legislation is very obviously not its actual goal.

[–] treesquid@lemmy.world 9 points 6 days ago

"Age verifications" AKA "A complete ID and access record of all that you do on your personal electronics." This is some seriously dystopian surveillance and control shit and it has nothing at all to do with children.

[–] Zeon@lemmy.world 5 points 6 days ago

The whole point of the GNU/Linux operating system is for free speech. Whatever you're trying to do California, it's not going to happen. I refuse to run any proprietary software on my machines. It's astounding that any porch for freedom is just gets blindly attacked by a bunch of uneducated fools. What a boring dystopia we live in...

[–] Tollana1234567@lemmy.today 7 points 6 days ago

seems like MS lobbying group.

[–] noxypaws@pawb.social 4 points 6 days ago

What is the point of bucketizing the actual age when anything querying it can simply note the date at which the user shifts to the next bucket to determine the exact birth date even if it never sees the exact birth date?

Furthermore, what about a common login like on a media PC?

What about a Steam Deck that gets shared around a household?

This is all very dumb. Could be a lot worse but it's still very dumb.

[–] sudolinuxjunkie69@lemmy.dbzer0.com 4 points 6 days ago* (last edited 6 days ago)

Computer code is a form of speech. It is mind-boggling to me that California wants to assert its rules over all FOSS software.

If California is able to do this, what stops them from next requiring Arch to be bundled with ID-checking Persona as part of a mandatory GUI installation?

Maybe Arkansas wants a mandatory "governemnt module" in Fedora to allow easy remote access?

Perhaps Dubai would like ProxMox to ping Dubai's government so they can create an IP registry of ProxMox users?

And since so many developers use github, will github just ban developers who don't comply?

I understand that such a rule could undermine Project 2025's objectives, but it is still a slippery slope.

load more comments
view more: next ›