Age Verification Laws Are Multiplying Like a Virus, and Your Linux Computer Might be Next
As of today, about half of all U.S. states have some form of age verification law around. Nine of those were passed in 2025 alone, covering everything from adult content sites to social media platforms to app stores.Right now, California's Digital Age Assurance Act (AB 1043) is all the rage right now, which targets not only websites and apps but also operating systems. Come January 1, 2027, every OS provider must collect a user's age at account setup and provide that data to app developers via a real-time API.
Colorado is also working on a near-identical bill, which we covered earlier.
The EFF's year-end review put it more bluntly: 2025 was "the year states chose surveillance over safety." The foundation's concern, which I concur with, is, where does this stop? Self-reported birthday today, government ID tomorrow? There appears to be no limit to these laws' overreach.
Age Verification Laws Are Multiplying Like a Virus, and Your Linux Computer Might be Next
What started as age gates on adult websites has quietly crept into app stores and operating systems.Sourav Rudra (It's FOSS)
like this

schnurrito
in reply to Powderhorn • • •In my youth I was taught that democracy meant that the government served the people.
What do any of these laws have to do with serving the people? Do they have anything to do with the will of the people?
like this
rem26_art, Quantumantics and Hexanimo like this.
masterofn001
in reply to schnurrito • • •Billionaires are people.
They have the will to fuck everything that moves.
like this
Th4tGuyII and Quantumantics like this.
schnurrito
in reply to masterofn001 • • •like this
Th4tGuyII likes this.
https://lemmy.ssba.com/u/Ebby
in reply to schnurrito • • •Well, the billionaires that own age verification and surveillance services have gone from trying their best to stalk to world through tracking and analytics, despite pesky privacy laws, to forcing giant swaths of populations to hand over data by compulsion.
Yeah, they're making a mint off us.
like this
deliriousdreams and Hexanimo like this.
schnurrito
in reply to • • •OK, that's about the elaboration I was looking for...
Somehow I don't think this is the central reason. I think governments are perfectly capable of doing bad things completely without billionaires having an interest in it. It especially doesn't explain things like the California law that will regulate how we can or cannot program operating systems (hint: software code is a form of speech, meaning that this ought to be struck down as a violation of free speech), because no age verification services are involved in that.
like this
deliriousdreams likes this.
https://lemmy.ssba.com/u/Ebby
in reply to schnurrito • • •I am Californian and that one snuck past me. I really didn't hear anything about it until recently and I'm pretty pissed.
You can't put the genie back into the lamp on biometrics. We needed real control over outlr digital data and biometrics before this became law. I hope it is repealed somehow, but the elite class don't give a fuck.
As for business vs government, government is scrutinized closer but businesses get away with much more. It's easier to get around red tape to outsource work to businesses than build government infrastructure to do things themselves.
like this
deliriousdreams likes this.
schnurrito
in reply to • • •Yes, I expressed the same sentiment here: discuss.tchncs.de/post/5595932…
Is our entire information "ecosystem" so broken that we only pay attention to bad things after they've already happened, not before when there is still a chance to stop them?!
like this
deliriousdreams likes this.
Hexanimo
in reply to schnurrito • • •The non-stop flood of bad things happening makes it very difficult to keep up with anything, even the topics that are most important to us. Which makes it all the easier for new local laws that strip away our rights to be slipped past the citizens who care enough to stop them.
The information overload is the system working as intended for those who seek to exploit us.
ComradeSharkfucker
in reply to schnurrito • • •like this
potatoguy and Hexanimo like this.
OwOarchist
in reply to schnurrito • • •In your youth, your teachers lied to you.
like this
potatoguy, deliriousdreams and Hexanimo like this.
Lena
in reply to OwOarchist • • •FaceDeer
in reply to schnurrito • • •It's serving the will of prudes, religious fruitcakes, inattentive parents, the technologically illiterate, and anyone dumb enough to be taken in by the "think of the children!" Rhetoric of the control-freaks.
Unfortunately this is a rather large constituency.
like this
yessikg, deliriousdreams, Hexanimo and Zier like this.
schnurrito
in reply to FaceDeer • • •Life is Tetris
in reply to schnurrito • • •Enkrod
in reply to schnurrito • • •The problem is the silent majority.
And what counts as silent.
Because if you haven't actually demonstrated, talked to, or written (with a letter) to a politician, you're effectively silent.
Talking about it with friends and family and on the internet is tantamount to silence when it comes to influencing politics.
The other side, the raving lunatics who want total surveillance... they are loud as hell.
𝕸𝖔𝖘𝖘
in reply to schnurrito • • •don't like this
Cătă 🇷🇴🇺🇦🇲🇩🇪🇺 doesn't like this.
schnurrito
in reply to 𝕸𝖔𝖘𝖘 • • •like this
Cătă 🇷🇴🇺🇦🇲🇩🇪🇺 likes this.
eleitl
in reply to schnurrito • • •driving_crooner
in reply to Powderhorn • • •Snot Flickerman
in reply to driving_crooner • • •Actually, when being grilled by congress, Mark Zuckerberg proposed exactly this solution: OS level age verification.
It's actually being pushed by social media companies to take the heat and responsibility off of them.
like this
Th4tGuyII, potatoguy, yessikg, deliriousdreams and Hexanimo like this.
cub Gucci
in reply to Powderhorn • • •The most misleading title ever. They are surveillance laws
like this
Hexanimo likes this.
Snot Flickerman
in reply to cub Gucci • • •cub Gucci
in reply to Snot Flickerman • • •Redvenom
in reply to cub Gucci • • •Snot Flickerman
in reply to cub Gucci • • •cub Gucci
in reply to Snot Flickerman • • •Mesa
in reply to Snot Flickerman • • •Yeah, I think you're arguing with clouds. This person isn't saying these aren't effects or even objectives of the age verification effort, but it's a little silly to say, "No, this isn't about surveillance, it's about stifling LGBTQ and atheist progression." It's just so tunnel-visioned.
You could've even said it's about centralizing education as a whole and that would've been better encompassing. I agree, that's a bad thing. But it's absolutely not the full picture.
CanadaPlus
in reply to Snot Flickerman • • •Snot Flickerman
in reply to Powderhorn • • •Let's be absolutely clear here: The explosion of people being comfortable coming out as some stripe of LGBTQ+ has everything to do with an open internet where youth were not restricted from finding out about information related to how they felt inside. Instead of being made to feel like strangers in their own skin, with a world telling them that people like them didn't or shouldn't exist, they instead found community and self-love through internet forums and information which allowed them to pursue full, healthy lives as adults.
This "protect the children" malarkey is one more way for the religious groups who oppose LGBTQ+ culture to "protect the children" by restricting access to this kind of information, reducing their ability to find it in their formative years, in the name of protecting them while actually stunting their personal growth.
It extends beyond sexuality as well, although that is the most obvious since many religions are deeply censorious regarding sex.
It also affects subjects like atheism, as the various religious cultures generally do n
... Show more...Let's be absolutely clear here: The explosion of people being comfortable coming out as some stripe of LGBTQ+ has everything to do with an open internet where youth were not restricted from finding out about information related to how they felt inside. Instead of being made to feel like strangers in their own skin, with a world telling them that people like them didn't or shouldn't exist, they instead found community and self-love through internet forums and information which allowed them to pursue full, healthy lives as adults.
This "protect the children" malarkey is one more way for the religious groups who oppose LGBTQ+ culture to "protect the children" by restricting access to this kind of information, reducing their ability to find it in their formative years, in the name of protecting them while actually stunting their personal growth.
It extends beyond sexuality as well, although that is the most obvious since many religions are deeply censorious regarding sex.
It also affects subjects like atheism, as the various religious cultures generally do not want people contemplating the idea that there isn't a god, especially not while they're young, they want you long indoctrinated into belief before you can explore different ideas.
Further, when I was a kid in the 80s and 90s, everything I knew about drugs was literally old wives tales meant to scare kids away from drugs, and then the internet came around and suddenly there was a boom of actual, verifiable scientific information about drugs so if you wanted to experiment with drugs, you knew what you were getting into. I once had a conversation with a girlfriend who was a bit older than me about her experiences with LSD as a teen, and she admitted that at the time she really didn't understand on any scientific level what was happening or what the nature of hallucination was, she just knew she was having fun and seeing crazy shit.
This is a backdoor to restricting access to important information that youth need to have access to for making healthy decisions for themselves sexually, religiously, and in terms of what substances they put in their bodies.
The birth of the internet gave us a beautiful period where people could grow up with access to accurate, verifiable, worthwhile information that helped them navigate and understand the world they were growing up in and who they were within that world.
This kind of legislation intends to snuff out that openness and accessibility which led to increased openness and acceptance of LGBTQ+, atheism, and safe drug use (including the understanding that some illegal drugs like marijuana and LSD are probably safer than legal drugs like alcohol and tobacco).
like this
slothbear, rem26_art, Quantumantics, deliriousdreams, Hexanimo and Undvik like this.
d3adpaul77
in reply to Snot Flickerman • • •d3adpaul77
in reply to Snot Flickerman • • •Katrisia
in reply to Snot Flickerman • • •TehPers
in reply to Snot Flickerman • • •This reminds me of a Pakistani person I don't personally know, but someone I know talks to them.
In their hometown, people recite verses from the Quran as part of their religious activities. There's only one problem: the Quran they use is written in Arabic, but everyone there speaks Urdu. People don't actually know what the passages say, just how to say them.
So this person asked them once what the passages say. Why do we read the passages in Arabic instead of Urdu? People here don't know Arabic.
Anyway, he got belted shortly after that.
Powderhorn
in reply to TehPers • • •Anarki_
in reply to Snot Flickerman • • •RedFrank24
in reply to Powderhorn • • •like this
deliriousdreams, Hexanimo and Zier like this.
Kairos
in reply to RedFrank24 • • •Yes
The California law is just "put this column in your DB and make a getAge() call.
like this
Hexanimo likes this.
P03 Locke
in reply to Kairos • • •sysctl user.legal_bullshit.pretend_age_quote_verification_unquote=99Watch that land on distros everywhere.
like this
Hexanimo likes this.
mr_anny
in reply to Powderhorn • • •My Linux is not ever going to have any age verification.
I'm not living in those backwards contry and if that push ever comes to shove, there will always be way around it. It's the beauty of open source, no entity is liable to comply.
And we're in the brink of ad-hoc internet which would render that stupid centralized and overgoverned shit to zero.
rmuk
in reply to Powderhorn • • •like this
Hexanimo likes this.
Rimu
in reply to Powderhorn • • •The thing about doing age verification at the OS level is the user could just install a crack that rewrites the necessary code. It'll take some heavy DRM type stuff to block that. Possibly hardware support, like a specialised TPM.
No way can that be standardised and then rolled out quickly. If they rush it then it'll be some proprietary power grab.
The alternative is each website and app does it separately which will be spotty and provide endless security breaches.
It'll be a shitshow either way.
like this
deliriousdreams and Hexanimo like this.
Mesa
in reply to Rimu • • •The thing is, this shouldn't really be a problem.
I am still against where all this age verification crap is coming from, and I'm against what specifically "age verification" entails; but here's the thing: We keep saying, "It should be the parent's responsibility to secure their kids"—and while that's true, you can do all the talking and educating you want, but the fact is that the internet is now nigh-fully integrated with our lives, and unless you are surveilling your kid at every moment they are on the internet (don't recommend), not every parent has the time, resources, or know-how to keep their children safe on the internet without help.
So to play naive for a moment and ignore the well-understood reality that "child safety" is an atom-thick veil for mass surveillance: Why did we give up so fast on device parental controls? The info being stored on the OS / user settings actually isn't so bad of an idea if the implementation valued both safety and privacy. Upon setting up the device or account, it is the parent's responsibility to create a password
... Show more...The thing is, this shouldn't really be a problem.
I am still against where all this age verification crap is coming from, and I'm against what specifically "age verification" entails; but here's the thing: We keep saying, "It should be the parent's responsibility to secure their kids"—and while that's true, you can do all the talking and educating you want, but the fact is that the internet is now nigh-fully integrated with our lives, and unless you are surveilling your kid at every moment they are on the internet (don't recommend), not every parent has the time, resources, or know-how to keep their children safe on the internet without help.
So to play naive for a moment and ignore the well-understood reality that "child safety" is an atom-thick veil for mass surveillance: Why did we give up so fast on device parental controls? The info being stored on the OS / user settings actually isn't so bad of an idea if the implementation valued both safety and privacy. Upon setting up the device or account, it is the parent's responsibility to create a password or biometric or whatever to activate/deactivate the safety mode. No personal information required. It should be pretty easy. Are there technically ways for the kid to get around this? Yes, but that'd be breaking the trust. In the same way you'd deal with your kid sneaking out of the house, you deal with that separately. The existence of websites that don't perform the check is inevitable no matter what you do.
And if you don't believe your kid needs a safety lock on the internet, then that's your prerogative.
It's apparent that many parents need a more convenient tool available to them, but privacy doesn't need to be compromised in order to achieve a safer internet. I got lazy while writing this, and I'm sure that's clear in some spots, but I'm just gonna post it. There's possibly something huge that I'm overlooking, so I'll just let someone else point it out.
Infernal_pizza
in reply to Mesa • • •Mesa
in reply to Mesa • • •The issue still remains that with a check like this, who is to say what content need be age-restricted now lies with the state. They could (and will) restrict content and information that I think my kid should have access to, and it will be a bit all-or-nothing.
Provided the above, I'd say the centralizing of information is the chief concern @SnotFlickerman@lemmy.blahaj.zone.
I don't know what a satisfying and achievable solution looks like here with that considered.
Powderhorn
in reply to Mesa • • •It's a bit crazy to think about how things have changed. When I was a kid, the only computer in the house that was online was in the office/living room, so my parents could walk past at any time and see what I was up to. This was in the MSN beta days, and I was usually in teen chat, which, given the beta, meant that we were all teens whose parents had gotten prerelease Win95 discs (actually, in my case, it was the head of my high school math department who "loaned" me his CD).
As a result, it was pretty chill. Having your phone at all hours and no oversight seems an absurd situation.
Player101010
in reply to Powderhorn • • •InFerNo
in reply to Player101010 • • •robador51
in reply to Player101010 • • •Powderhorn
in reply to Player101010 • • •skaffi
in reply to Powderhorn • • •Powderhorn
in reply to skaffi • • •FosterMolasses
in reply to Player101010 • • •Kissaki
in reply to Powderhorn • • •danielhanrahantng
in reply to Powderhorn • • •ArcaneSlime
in reply to danielhanrahantng • • •I don't think Meshtastic would work for that with a 200char limit.
Usenet and torrents otoh, already can't stop that. Not to mention lying is still a thing. I'm 136 years old so I should know.
danielhanrahantng
in reply to ArcaneSlime • • •ArcaneSlime
in reply to danielhanrahantng • • •Sylvartas
in reply to ArcaneSlime • • •ArcaneSlime
in reply to Powderhorn • • •Fraction9170
in reply to ArcaneSlime • • •FreddiesLantern
in reply to Powderhorn • • •CanadaPlus
in reply to FreddiesLantern • • •romanticremedy
in reply to Powderhorn • • •craftrabbit
in reply to Powderhorn • • •Powderhorn
in reply to craftrabbit • • •TehPers
in reply to Powderhorn • • •Red Hat.
The other distros? No idea.
Powderhorn
in reply to TehPers • • •TehPers
in reply to Powderhorn • • •Hey even I use Linux daily.
Actually, I'm not really sure why "even I" should be shocking. I write code for a living. Surely I should be using Linux once in a while.
Anyway RHEL is probably the only Linux distro I can think of that costs money and comes with support. The major cloud providers sometimes have their own Linux distros they use as well (looking at you, Amazon) and you can argue they are selling Linux, but not as directly as RHEL does.
Linux from AWS
Amazon Web Services, Inc.Powderhorn
in reply to TehPers • • •I'd like to go back to KDE Neon, but it doesn't play nice with thermals on my Surface.
(and I totally expect you to be a Linux user ... why haven't you bragged about using Arch yet?)
TehPers
in reply to Powderhorn • • •Well Manjaro is Arch-based, but it feels like cheating to say that. Anyway, I used Manjaro, btw.
oatscoop
in reply to Powderhorn • • •The offical linux shop, obviously -- though your local PC sales/repair shop can probably order you a copy. I understand that Linyos Torovoltos grew up under communism and originally couldn't legally sell Lunix, but the Soviets lost the cold war decades ago.
I'd rather spend a few bucks for a legitimate copy than risk installing some virus infested illegal version off some sketchy website.
Linux Distros on CD / DVD - Shop Linux Online
www.shoplinuxonline.comKyuubiNoKitsune
in reply to oatscoop • • •oatscoop
in reply to KyuubiNoKitsune • • •Oh no, that's the first phase.
You need to get your computer to an A+ certified tech and have your OS reinstalled ASAP. If you delay you're looking at a lifetime of buying old Thinkpads off the Internet.
RamenJunkie
in reply to Powderhorn • • •Bazell
in reply to Powderhorn • • •FosterMolasses
in reply to Powderhorn • • •ɔiƚoxɘup
in reply to Powderhorn • • •Jerkface (any/all)
in reply to Powderhorn • • •korazail
in reply to Powderhorn • • •The OS angle is huge, and worth picking a fight with, but I haven't seen any coverage over how this goes after developers too.
I think this is an attack on ALL open-source.
These bills are written by people who are clearly or maliciously tech illiterate and don't understand either the terminology or the practical impacts. And of course it's wrapped in 'what about the children?!'
They include definitions like (paraphrasing; not quoting a specific bill, but New York, Colorado and California do this):
- "Application" is any software application that may be run on a user's device -- so ... EVERYTHING.
- "Application Store" is any publicly accessible website or similar service that distributes applications -- so ... also everywhere, such as GitHub or GeoCities.
- "Developer" is a person who writes, creates or maintains an application -- so if you have a github repo, or you've posted a binary or perhaps even a script somewhere recently, you're a developer.
And then require both developers and operating system providers to handshake this age verification
... Show more...The OS angle is huge, and worth picking a fight with, but I haven't seen any coverage over how this goes after developers too.
I think this is an attack on ALL open-source.
These bills are written by people who are clearly or maliciously tech illiterate and don't understand either the terminology or the practical impacts. And of course it's wrapped in 'what about the children?!'
They include definitions like (paraphrasing; not quoting a specific bill, but New York, Colorado and California do this):
- "Application" is any software application that may be run on a user's device -- so ... EVERYTHING.
- "Application Store" is any publicly accessible website or similar service that distributes applications -- so ... also everywhere, such as GitHub or GeoCities.
- "Developer" is a person who writes, creates or maintains an application -- so if you have a github repo, or you've posted a binary or perhaps even a script somewhere recently, you're a developer.
And then require both developers and operating system providers to handshake this age verification data or face financial ruin. I think the original intent or appearance of intent is that the store developer needs to do the handshake. I'm not a lawyer, but I can't imagine these definitions aren't vague enough that they can't be weaponized against basically anything software.
I have a github account, and have contributed to "applications". As I read them, these bills pose a serious threat to me if I continue to do so, as that makes me a "developer" and would need to ensure the things I contribute to are doing age verification -- which I don't want to do.
I think that even outside the surveillance aspect, the chilling effect of devs not publishing applications is the end-goal. Gatekeeping software to the big publishers who have both the capacity to follow the law and the lawyers/pockets to handle a suit. These laws are going to be like the DMCA 1201 language (which had much much more prose wrapped around it and was at least attempting to limit scope), which HAS been weaponized against solo devs trying to make the world better.
I fully expect some suit against multiple github repo owners on Jan 2, 2027.
17 U.S. Code § 1201 - Circumvention of copyright protection systems
Office of the Law Revision Counsel (LII / Legal Information Institute)RamenJunkie
in reply to korazail • • •povario
in reply to Powderhorn • • •this is the pipeline to fully ~~trusted~~ restricted computing.
Linux couldn't possibly comply properly with these new restrictions? Consumer grade prebuilts and laptops now only run "certified" operating systems, just like most mobile devices.
Surveillance and censorship are the ends, "age" (identity) verification is the means.
42beansinapod
in reply to Powderhorn • • •altphoto
in reply to Powderhorn • • •