• Treczoks@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    2 days ago

    It would make it illegal to sell our products there, as our central control unit has an OS, too. I know, I have written it, and I have no plans of implementing an age veryfication system for the people logging in to set and control parameters.

  • Einhornyordle@feddit.org
    link
    fedilink
    English
    arrow-up
    9
    ·
    2 days ago

    I’ll just copy my comment from a similar bill in colorado, I will leave the link to the colorado bill in, but here is the california bill as well if you want to read it yourself.

    The title is very misleading. This is the actual bill that they are trying to pass. The link already includes a summary, so I will just give you an even simpler explanation and some practical examples why this is actually really neat.

    First of all, this is not age verification. No IDs have to be submitted, no selfies or videos will be submitted to any age estimation AIs, so put your pitchforks away (for now, until they decide to expand the bill to include these measures as well, then it’s time to burn it down). The name of the bill already tells you what it is: Age Attestation. Aka what every piece of software already does before it shows you explicit content.

    With the bill in place, every “operating system provider” has to ask you for your age or date of birth during OS setup, which will then be made available to other software via an API. So instead of having to fill in your date of birth or checking “Are you 18+/21+?” boxes, software will use the new API to check instead, saving you the trouble of doing it manually every time for every application that is not made for all ages.

    What makes it even better is that the OS does not have to provide your actual age or birth date, the bill has a minimum requirement of just disclosing age-bracket data. So it could work just like age ratings, which also rely on age groups rather than specific years. Also, the bill explicitly forbids asking for more than your age, sharing more than that via the new API and using the entered age data for anything else than the described purpose, like sending it to a server for tracking purposes.

    And finally, as mentioned in the beginning, no IDs or anything else as it is with age verification necessary. You can still lie, just enter 1.1.2000 or whatever you want. Nothing changes, except that you will only have to do it once every time you reinstall/reset your OS or buy a new device.

    • ArmchairAce1944@lemmy.caOP
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      1
      ·
      2 days ago

      Fun fact: Dell now offers their ready made desktops in linux and windows. That never happened before. Windows had to really suck to get that shit go that bad.

  • wendigolibre@lemmy.zip
    link
    fedilink
    English
    arrow-up
    11
    ·
    3 days ago

    This is actually incredible.

    1. Buy all the RAM and video cards. RAM and video cards become too expensive for the average person to purchase.
    2. Push AI for everything until dependency develops.
    3. Sell remote access to computing power. (AI, Streaming video games, remote desktop, etc.)
    4. As the “Operating System Provider,” collect all of the personal information necessary to validate that each user is telling the truth about their age.

    Result: Zero Individual Privacy- Everything you compute is processed by a computer owned by a big corporation with a backdoor built-in for your authoritarian government (which is owned by billionaires) to surveil.

    • ArmchairAce1944@lemmy.caOP
      link
      fedilink
      English
      arrow-up
      8
      ·
      2 days ago

      Anyone who says there is no plan by large groups to control people is a fool. They aren’t some secret shadowy group that will vanish into thin air the moment some obese tinfoil hat wearing nutjob with a gun flashes a flashlight at them, but they’re so incredibly obvious that it is incredible many are still in denial about it.

      Yes, the people at the top are incredibly stupid, but their plan isn’t something that needs genius level intellect to work. It just needs a fuckload of money and a compliant legislative branch, and they have both.

  • wer2@lemmy.zip
    link
    fedilink
    English
    arrow-up
    7
    ·
    2 days ago

    Not just Linux, but embedded OS’s too. Also, the age verification requirement is a “reasonable attempt”, so maybe a prosecutor decides full face scan checks are the minimum “reasonable effort”. Will it hold up? Who knows, but can you afford to litigate it?

    Note, there are not exceptions for headless installs, or OS’s without an account.

  • madcaesar@lemmy.world
    link
    fedilink
    English
    arrow-up
    12
    ·
    3 days ago

    Republicans: Full of pedophiles and pedophiles protectors. Hated by every sane person with any kind of conscience.

    Democrats: Not on my watch! I can be an asshole too!

  • Archr@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    2 days ago

    This was passed and signed last October. Why is this just hitting the news cycle?

  • Darkcoffee@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    13
    ·
    3 days ago

    standing on a San Francisco street corner, opening my trench coat revealing 40 USB sticks

    Hey kid, wanna buy illegal Linux?

    • tal@lemmy.today
      link
      fedilink
      English
      arrow-up
      5
      ·
      3 days ago

      It doesn’t matter if you’re, say, Debian, because they’ll just put up some symbolic “not intended for use in state X” and then continue doing whatever they were doing, but if you’re Red Hat and actually selling something like Red Hat Enterprise Linux to companies in the state, stuff like this is actually a pain in the ass.

      And to reiterate a previous comment, the Democrats have a trifecta in both California and Colorado, and the legislation here is something that they are squarely to blame for. I’d really rather that they knock this kind of horseshit off so that I can go back to being upset with the Republican Party.

      • night_petal@piefed.social
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        edit-2
        3 days ago

        It makes me wonder if RHEL will get (or at least lobby for) some kind of carveout, since their intended customers are corporations. It would be really impractical at vest to try to make some headless server try to verify its age.

  • Ricky Rigatoni@piefed.zip
    link
    fedilink
    English
    arrow-up
    11
    ·
    3 days ago

    Gavin Newsom should drop out of politics and stick to shitposting about trump. He’s much better at that.

  • Buelldozer@lemmy.today
    link
    fedilink
    English
    arrow-up
    6
    ·
    3 days ago

    Read the legislation. It’s not just operating systems, its applications as well! All applications, there are no exceptions. Everything from GIMP to the EHR your Doctor uses to a custom Open Claude bot on Github. ALL of them.

    • Zetta@mander.xyz
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 days ago

      Good thing this will be unenforceable for open source software, or at least things can be forked if they are maintained by bigger companies that need to comply.

    • ArmchairAce1944@lemmy.caOP
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      1
      ·
      3 days ago

      They don’t care. They want your face, retina, fingerprints, DNA. All for their LLMs and so they can sell you something else.

      Also to blackmail you later if they think they can or just feel like it… because they will put all that shit on an insecure server and some 13 year old hacker in Turkmenistan will leak it and make a killing (literally and figuratively) with it.

        • ArmchairAce1944@lemmy.caOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 days ago

          Or just use real CSAM from their own private collection and place it on your machine. Or even make a deepfake using your face pasted on theirs and those of your children or young relatives or random kids pasted onto the children. If you point out that this is a deepfake and you have the technical knowledge to prove it, they will use that as proof that you are actually trying to frame THEM.

      • Archr@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        1
        ·
        3 days ago

        FYI, I am not a lawyer.

        Have you actually read the bill itself? Nowhere in it does it mention any of the things that you mentioned. It doesn’t even mention ID cards at all.

        What it does say is operating system providers shall “Provide an accessible interface at account setup that requires an account holder to indicate the birth date, age, or both, of the user of that device”. What we should look out for is that the law does not forbid OS providers from requiring IDs.

        It does however require that OS providers “Send only the minimum amount of information necessary to comply with this title and shall not share the digital signal information with a third party for a purpose not required by this title.” (emphasis mine)

        I wonder how much this is news outlets overreacting to a proposed bill that is not actually that bad, or if this is some marketing against the bill by some Corp.

        https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260AB1043

        • pivot_root@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          3 days ago

          No, it is bad.

          Suppose it’s used to verify your age when visiting Pornhub. How is Pornhub going to trust the user’s computer didn’t lie about the user’s age? A “just trust me bro” sent by the browser isn’t going to suffice; teenagers would find a way around that.

          Thr attestation will have to be cryptographically signed by some trusted party—and that’s either going to be the government, or the operating system vendor.

          If it’s the government holding the signing keys: the website can now verify that you’re a resident of $state in $country and use that for fingerprinting and targeted advertising. And what if your country doesn’t participate, or if Pornhub doesn’t trust the signing keys used by the government of Estonia? Tough shit, no porn for you! It would be impractical to manage all those keys, though, so why not instead leave it up to the operating system vendor?

          If it is left the operating system vendor, it’s going to end up being exactly the same as Google Play Service’s SafetyNet “feature”. If you’re not using an approved operating system (a.k.a. Windows, MacOS, stock Android, iOS) you’re not visiting Pornhub. Or a banking app. Or applying for jobs. Etc.

          This bill is a poison pill for device ownership and FOSS operating systems being handed to corporations on a silver platter.

  • timestatic@feddit.org
    link
    fedilink
    English
    arrow-up
    3
    ·
    3 days ago

    Good luck trying to strongarm foss. Forks and backups included. Also making all linux servers illegal. This will totally not be circumvented. Get lost with your law. Let the parents do the parenting instead of overreaching on mass surveillance and trying to end any form of online anonymity.