An upcoming California law requires operating system providers to enforce basic mandatory age verification

https://lemmy.ca/post/61071136

An upcoming California law requires operating system providers to enforce basic mandatory age verification - Lemmy.ca

Apparently this will include Linux…

Sorry but I don’t think the article text backs up the title?

The claim is that they have to enforce age verification, but the quoted law says:

Provide an accessible interface at account setup that requires an account holder to indicate the birth date, age, or both, of the user of that device for the purpose of providing a signal regarding the user’s age bracket to applications available in a covered application store.

Doesn’t this just mean it needs to ask for an age at setup, so e.g. parents can set it up with an age and they can automatically be restricted?

I don’t see anywhere actual verification is required, if you’re setting it up yourself then just lie?

Honestly, this sounds like my preferred path if we are gonna do anything.

And I don’t understand, because windows already does this and has for years. I don’t live in California though, so I don’t know the particular nuances they are asking for.

The problem is, and has always been, getting parents to use the tools. So unless you’re sending parents to jail for not doing this, then it’s totally optional and most won’t use it.

If you want screentime limits, content filters, browsing history, restricted programs, age verification, wallet control, friends list filters, etc. It exists and is available on Windows and Xbox for free.

I think the next bit from the article I didn’t quote explains that:

“(2) Provide a developer who has requested a signal with respect to a particular user with a digital signal via a reasonably consistent real-time application programming interface that identifies, at a minimum, which of the following categories pertains to the user.” The categories are broken into four sections: users under 13 years of age, over 13 years of age under 16, at least 16 years of age and under 18, and “at least 18 years of age.”

I think the idea is that you would say that under 16s can’t use social media. Then you’d enforce this not with the horrendous Australian strategy of having everyone IDed, but instead you would enforce it by having an API that websites and apps could use that would tell them the age of the user.

So basically:

  • Parent sets up device for kid and sets their age.
  • Kid tries to download Facebook app
  • Gets denied because they are under age
  • Kid tries to go to facebook website instead
  • Website sends request to browser for user’s age, browser asks Windows (or whatever OS) for age and provides this age back to Facebook
  • Facebook denies access because user is under age

Windows might already have parental controls within Windows, but it’s the ability for apps and websites to know the age (or in this case age range) that is the important part.

I much prefer this than handing over ID.

Windows can do that too, for the applications and websites that support it. There is no point in forcing it onto other ecosystems if parents are not willing to use the tools in the ones they already exist in.

Windows doesn’t ask at install, and also this law requires them to ask for already set up accounts too.

This will make it a lot more visible.