Luke James writes that California's legislature has passed Assembly Bill 1856, which provides an exemption for open-source operating systems from the state's Digital Age Assurance Act. The bill, which was amended by the Senate before passing with a unanimous vote in both chambers, ensures that software distributed under licenses like GPL, MIT, BSD, and Apache is not required to collect user age data during setup. This decision resolves uncertainty regarding whether Linux distributions or SteamOS would need to implement mandatory age verification alongside major platforms like Windows or macOS.
- The exemption applies because these open-source licenses allow recipients to copy, redistribute, and modify the software.
- Software components such as libraries and dependencies distributed through package managers (e.g., apt or pacman) are also excluded from being classified as "applications" under the law.
- Browser extension stores are carved out because they distribute add-ons that run within a host application rather than acting as standalone executables.
- The amendments removed a problematic definition of "user" that would have technically classified every device owner in California as a child.
- The exemption applies because these open-source licenses allow recipients to copy, redistribute, and modify the software.
- Software components such as libraries and dependencies distributed through package managers (e.g., apt or pacman) are also excluded from being classified as "applications" under the law.
- Browser extension stores are carved out because they distribute add-ons that run within a host application rather than acting as standalone executables.
- The amendments removed a problematic definition of "user" that would have technically classified every device owner in California as a child.
This patch introduces a new kernel configuration option, CONFIG_VFS_AGE_VERIFICATION, which mandates that processes register a valid birth date using a new prctl call (PR_SET_BIRTHDATE) before being allowed to create files. This is in response to new regulations requiring age verification for digital content creation. If a process hasn't registered a birthdate or is under 18 years old, file creation will fail with a new error code, ETOOYOUNG.
The patch also adds a new error number, ETOOYOUNG (134), and includes safeguards against bypassing verification through execve(). It playfully rejects birthdates indicating an age over 150, acknowledging the lack of support for immortal entities.
The patch also adds a new error number, ETOOYOUNG (134), and includes safeguards against bypassing verification through execve(). It playfully rejects birthdates indicating an age over 150, acknowledging the lack of support for immortal entities.
Hundreds of academics are campaigning against the global move toward age checks on online services, warning that the technologies are ineffective and carry significant risks to privacy, security, and freedom.
California's Digital Age Assurance Act (AB 1043) requires operating system providers to collect age information from users at account setup and transmit that data to app developers. This impacts Windows, macOS, Android, iOS, Linux distributions, and Valve's SteamOS.
