A small set of people are merging changes to various Linux components to make sure every application knows your birth date.

This is being done rapidly by people with questionable justifications and being merged with no youth and few marginalized people involved.

https://gitlab.freedesktop.org/accountsservice/accountsservice/-/merge_requests/176#0b07c0cc4d49be119f65cdb2037440f56eed647a

user: Add BirthDate with polkit-gated GetBirthDate and SetBirthDate methods (!176) · Merge requests · accountsservice / accountsservice · GitLab

Summary Add a BirthDate field to the user account interface. For non-homed users, the value is stored...

GitLab
@wwahammy why the fuck are people complying in advance? Where is the commitment to software freedom?

@artemis I don't know why.

And I'd say "why are people complying at all?".

@wwahammy @artemis Everyone involves in proposing and merging these needs to be deemed untrustworthy and unwelcome in real FOSS.
@dalias @artemis 1000% agree. It's shameful.
@wwahammy @artemis Like seriously. Even if you weren't going to consider complying with this unthinkable, adopting something like this that's a policy matter should be a process that requires a proposal and feedback from the community, with a long enough time window for that to happen. Not rushed-through changes by shadowy actors who show up just to do what some malicious external authority demands.
@dalias @wwahammy @artemis This. Compliance can look like foot dragging and endless committee meetings about how exactly to comply with unclear and contradictory regulation. The Debian list posts noting that compliance in one jurisdiction could be violation in another are a great beginning of sitting down and engineering a feature to either death or satisfaction, which is what actual legal compliance looks like; ad-hoc implementations don't have enough lawyers involved to legally function.

@feonixrift @dalias @wwahammy @artemis It's not complying "in advance". The California thing is *law* now. Sure, other jurisdictions are in progress, but the time between now and the next Linux distribution releases before the January 1, 2027 date isn't that long.

Everyone in the different community spaces that *do the work* are scrambling because being out of compliance is ludicrously expensive and there's not much time to be prepared. Even so, there *are* public discussions with patch review.

@feonixrift @dalias @wwahammy @artemis And as @soller has pointed out in multiple locations, unlike most doctrines, this one is fairly simple and written in plain language. It's pretty understandable what is required. We are also anticipating expansion of age verification laws in other jurisdictions (UK, Australia, France, Canada, etc.). But nobody is implementing anything that isn't law right now. And an implementation that exists also influences what laws can ask for in the future too.

@neal @feonixrift @dalias @wwahammy @artemis I stated on the xdg mailing list that amendments are expected. We are working with Colorado legislators on language that would exclude effectively all open source operating systems and all embedded/server operating systems. This has a chance of making it to the California bill before it is effective.

I had a chance to demand polkit access controls be implemented on the accountsservice change but the systemd userdb change did not get that implemented.

@soller

It's good that someone is doing that. IBM seriously dropped the ball when it came to lobbying about this, given how it affects #RedHat. No-one even brought up the implications for #Unix-like operating systems in #California.

You're not the first person to talk about amending the California Bill. It's an Act now, not a Bill, though. It's nigh on impossible to supersede it before 2027-01-01.

The politics, as well as the physical realities of how long it takes to enact legislation, mean that there just isn't the time, even if the will could be drummed up.

The current Act took 8 months to pass, itself, and not only is there no-one in California really lobbying to fix this, there's also the political problem of seeming to want to carve a massive exemption in a law that only months ago passed through every stage in the legislature with zero 'no' votes.

https://mastodonapp.uk/@JdeBP/116175882841550437

@neal @feonixrift @dalias @wwahammy @artemis
#CaliforniaLaw #USLaw #FreeSoftware #AgeVerification

@JdeBP @neal @feonixrift @dalias @wwahammy @artemis Gavin Newsom's signing letter requested amendments for other cases prior to the law taking effect. I see no reason to give up on an exemption for floss being there before 2027.

https://www.gov.ca.gov/wp-content/uploads/2025/10/AB-1043-Signing-Message.pdf

@soller

You should. Because the problem will be a lot of #California legislators having to be convinced that what they just did, not even in a prior legislative session, was wrong enough for a political U-turn; and then come up with a way of fixing this so that it does not broadly encompass pretty much any operating system with a ports/packages system for applications, *without* letting the targets that they *thought* that they were hitting (given the records of the passage through committee stages) off the hook; and *then* fight the organized lobby that clearly is behind this almost exactly the same bill text appearing in Colorado, Illinois, and New York as well, reacting with a #FreeSoftware-people-want-to-harm-children campaign.

2027-01-01 is simply too near a deadline for all that to happen before. Colorado, Illinois, and New York have a chance, as it's still Bills there; but it's too late in practical terms for California.

@neal @feonixrift @dalias @wwahammy @artemis
#USLaw

@JdeBP @soller @neal @feonixrift @dalias @artemis I want to point out there almost certain will be amendments for a few reasons:

* It doesn't exempt non-consumer operating systems or devices.
* It doesn't really handle multi-user systems in any way.

@wwahammy

Without a doubt if people are now paying attention and lobbying. The immediate problem is the chance that @soller mentioned of them happening before the provisions of the #California Act take effect on 2027-01-01. It's slim to none.

The slightly further away problem is finding how to express the difference in legal terms. It's actually quite hard to come up with something that doesn't as a side-effect let #FDroid off the hook. They'll want to keep F-Droid in the 'covered' camp, because it's exactly the sort of smart 'phone thing that they *thought* that they were covering, so the law cannot just exempt a 'store' solely on the grounds that it distributes #FreeSoftware.

Colorado came up with an addition to the common base text that grants exemptions for intra-business use. But that's an exemption for developers, not for operating system makers, based upon application purpose; so isn't much use to follow.

@neal @feonixrift @dalias @artemis
#USLaw #ColoradoLaw

@wwahammy @soller

I gave this some thought at the start of March. There are a number of blind alleys.

The Microsoft Store is obviously a direct target here, but Microsoft Windows is a multi-user operating system; so the operating system having multiple local user accounts is not a way to structure an exemption.

The likes of Debian, Ubuntu, RedHat, FreeBSD, et al. use accountless access to repositories, whereas one has to use a Google Account with Google Play and a Microsoft Account with the Microsoft Store. But F-Droid is seemingly accountless too so that sort of exemption would let it off the hook.

Maybe one could get somewhere with tweaking the definition of a 'covered user' to make it specific to operating systems where Microsoft/Google/AppleID/whatever accounts functionally *are* the operating system user accounts.

Several ways still to draft that badly, though.

@neal @feonixrift @dalias @artemis
#ColoradoLaw #AgeVerification #USLaw