You aren't setting up your childrens accounts. You're setting up your accounts to show that you're not a child. And suddenly, every single thing you use, from apps to websites, is gatekept behind an API that is controlled by the government. If checking age on social media is all it ever does, then sure, whatever. But that isn't all it will ever do. It will creep further and further, and the details you need to provide will increase, one shitty government term at a time. And then one day, they'll able able to decide that people in your country shouldn't be able to see safe sex information, or abortion information, and the framework to deny the whole country access is already there, and just one small tweak away from locking you out of information that is deemed inappropriate.
post
Because they don't care about your age. They want to tie you to your ID, so everything you say and do online can be tracked and tied to you as a person.
Meanwhile the leader of one of their countries has raped women and teenagers and even a couple of children, but they don't do anything about it. But you can be jailed for decades for seeing a picture or video of it. But the actual act? They don't care about that. (I'm saying you can be jailed for simply seeing CSAM online, but if you're a billionaire actually doing the things, you won't be tried for the actual CSA being recorded.)
So as you can see, it's not your age, but your identity.
Most people think the Nazis only locked up Jews. Some realise they also locked up minorities. Historians know it was also anyone who disagreed with them. Anyone who spoke out against them. Anyone who wouldn't wear the armband. And they're afraid history will repeat. And they're right to be afraid.
But between setting up the birthdate when creating my children's local account on their computers, and having to send a copy of their ID to every platform under the sun, I'd easily chose the former.
This is how they move the goalpost. They changed the argument.
You currently can just create a local account - period. It's yours. No tracking. No personal info.
But now you're accepting that you're willing to give a third party information, even just a little.
The next argument is: "If giving your age is okay, why not your home address?"
This is what police do to fish information out of you.
I'd even agree to a simple protocol (HTTP X-Over-18 / X-Over-21 headers?) to that.
In a era where privacy conscious people don't even connect their TV to the internet... This is okay to you?
You went from "Why do they want my information?"
To
"I'm not concerned with sharing my age. But how should we do it?"
And that itself is the root issue.
Also this goalpost will move almost immediately. What if the parent doesn't understand why the OS is asking for a DOB and they type whatever? What if the parent doesn't log out and the kids use the adult account? What if the kid is really smart and bypasses the check (I think this could actually get bypassed easily)?
Rather than rolling back this rule they'll just go even further and say the OS must analyze every action and utilize every input (e.g. microphone, camera) to determine the age of the current user and that controls need to be at the hardware level and OSes need to get state certified, etc. Before long only Windows, Apple, Google, and maybe RedHat can comply. An entire community of Linux enthusiasts destroyed. And as some bills have stated, rather vaguely, this can apply to something as simple as a calculator!
Also this goalpost will move almost immediately. What if the parent doesn't understand why the OS is asking for a DOB and they type whatever?
Which we have already seen with content ratings. Instead of using the rating to inform themselves on what content to allow their child, they basically relied on the retailers/theatres not selling access to people below the age.
My calculator doesn't need to know how old anyone is. Nor does my refrigerator. I suppose a case could be made for a router if you are all onboard for age gating everything privacy and freedom be damned. An OS isn't just Mac or Windows... the CA law is just so so dumb as written that I have zero faith in anything from Silicon valley.
At least my printer already has a scanner I can put my ID into. How am I going to tell my smart fridge, that I'm not too old for the snacks with cartoon characters on the wrapper?
Will you be allowed to lie about the age? If yes, then it's a pointless law. If no, then whoever is checking needs to have more control over your device than you do, DRM style. That's gives them an entry point through which they can put whatever they want without you being able to control it.
The Califirnia law, at least, states the age flag should be set when the account is created, presumably by the controller of the computer, and holds that controller responsible for setting it correctly, and the developer responsible for ensuring it's set and works correctly, at least, that's my reading of it. If it's your computer, that makes you resoonsible for setting your age and that of accounts you create for your children.
and to prove its not actually about safety and instead about control: parents are already responsible for what kids do online and could be charged using existing laws. but… where is the overreach in that?!
Whilst parents absolutely should be guiding and helping the kids determine where they go online, and what they look at, I'm trying to envision where, or how, parents would be liable for them looking at something inappropriately "adult", barring actual child neglect.
A system like this would actually help parents be more confident that little Johnny wasn't going to stumble across something in appropriate, because, yes, in a way this is about control. It's about controlling what kids are exposed to before they are intellectually ready for it. Yes, there are potentially serious issues around that, such as limiting access to LGBTQ+ or other helpful material for young adults, but that should be a discussion around what information is needed at each age, rather than how to indicate that age.
Age gating on the open internet will happen, I don't see any way that it wont, what matters is how it is implemented. We know that submitting government issued ID to every site with potentially contentious content is a terrible idea; this neatly sidesteps the need for that, and actually forbids it.
for ex: if you let your kid look at porn, in the US, the parents are absolutely liable for various forms of “risk of injury to a child “ laws.
To bring charges under those sorts of laws there's going to have to be some external evidence of harm. Either the kid is acting in a way that causes an agency sufficient concern that they investigate the family, or the government mandate much stricter monitoring of exactly who is doing what online. The former case is unlikely, but should probably be persued vigerously when it does hapoen, and the latter case is something I imagine we all very much want to avoid.
By providing a simple, privacy conscious, way of taking some of the burden of vigilence off of the parents (the child is less likely to stumble on inappropriate material) it makes it easier for them to provide actually beneficial guidance, and reduces the risk of law enforecement getting involved to investigate minor transgressions.
putting burden for safety on corps is not a healthy thing.
The burden is still on the parents, but this would actually provide a useful tool for them to address that burden.
have you seen any existing tools be so bulletproof that kids cant get around them?
No, and this wouldn't be impossible to bypass either. I don't think the aim is 100% perfection, so much as harm reduction, and I don't think you'll get more than that no matter how onerous the law becomes. Most kids, most of the time, are not going to be trying to circumvent it, and it would still be up to the parents to look out for cases where they were.
The current proposal requires storing and transmitting a flag that can take one of four values (under 13, 13-16, 16-18, 18+), and prohibits sites using other means of age verification. It'll work adaquately to stop kids accidentally seeing pornography, and hopefully things like andrew tate, giving the parents some space to do their part to help their kids learn how to understand what they migjt be exposed to.
why are the harm reduction methods we have now not being used?
That's a thorny question. The main ways we currently got either involve the sites in question collecting personally identifiable information, such as government issued ID, and making a determination as to what to serve based on the information that contains, or the sites adhereing to a voluntary code, such as RTA, to include an identifying header, and parents installing, configuring and maintaining the software or services to restrict access. The former method is obviously dangerous as it requires handing over your ID, and the latter is all voluntary and so there is little impetus to do it, and the complexity will also act as a deterent for parents. Turning it around and just having the computer send a flag for the age bracket gets rid of the need to transmit personally identifiable information and makes the parents' setup job much easier with a one-shot, tick a box and carry on, process.
Yes, this is precicely why a client side flag is so much better than a server side "send your ID documents to a third party" system. As I said, the Californian bill seems to have no requirement that the OS account creation process actually checks the value entered, just that it requires it at setup.
if they are claiming the new laws are for kid safety there must be existing already some external evidence of the need, no?
There's fairly clear evidence at a societal level that access to, for instance, hardcore pornigraphic material is harmful to children, but that is very different to having evidence that a particular child is currently being exposed to it.
exactly. so why do we need more laws that also happen to provide massive leak able tracking to corporations and govs without warrants, etc?
I'm not sure what you mean by "massive leak able tracking" in this case. It's literally a flag that indicates the user's age bracket, and means sites don't use the really invassive options.
setting that flag involves the leakable process.
Again, I'm only going by the Californian bill, but that one is pretty clear that the person setting up the account should either supply the user's birth date, or the age bracket they are in. There is nothing indicating this should be validated in any way. I'd agree that, if the machine was compromised, and the user's birth date was used, it would be possible to leak that data, but given those preconditions, it would be one of the least interesting things leaked. I'd certainly prefer to just store the age bracket, and have a way for the computer admin update it as the user grows towards their 18th birthday.
Just because they are responsible doesn't mean the have the means to exert their responsibility. Demanding birth-date upon (local) account creation would allow them to better exert that responsiblity.
no it wont. kids get around shit easier than ever especially with luddite parents.
if the gov actually cared they’d take to charging using existing laws.
Parents of current 8-18 year olds are gen X and millenials, who every survey shows are (on average) significantly more tech literate than gen Z and Alpha.
correct. i am a gen x software engineer and I know for a fact my kid who is now 25 would always find ways around firewalls when he was 14 and horned up.
my point is that we have laws already that are perfectly appropriate to the “concern” stated, “child safety.”
any new laws will only give more access to important data to corporations who are known to do bad things with it.
that does not make it worth it. my opinion would change if there was a legit large inrush of charges using exiting laws that then did nothing to help, then one could argue we need more law. but thats just not the case today.
Right, so the law is pointless, since there is already a thousand different ways to control what children see on the Internet.
So that means that kids can't buy computers?
Can't buy a cheap used raspberry pi or old laptop/desktop in order to set up as a server?
I don't think there would be any difficulty with a kid setting up a computer, as in most juristictions the parents are responsible for their childrens' actions until they are adults themselves. So the oarents would still be responsible for what the kid did with the computer in the same way they often are now.
So then the law is pointless as implemented, since parents can already do this. Which leads to the conclusion that there must be some other motivation
So these "os reporting age bands" laws are useless then.
Cause either the parents are being responsible, at which point there are many parental tools for network and device control.
Or they aren't being responsible, and the kid can easily bypass it or just buy their own device.
These age band laws basically work in the opposite way to the usual parental controls. Rather than having to install and maintain the control software and having the filtering at the client end of the connection, parents need only set a flag and filtering will occur at the source end of the connection.
Will these laws provide perfect protection that eliminates the need for parental oversight of childrens' internet access? No. Will they help stop kids accidentally stumbling into unsuitable content, reducing harm overall? Yes. As a parent, one of the things I worry about is my kids browsing sites such as youtube. Even if they're using it for research for school projects, I can never be certain it wont prompt them to watch an unsuitable video. With a simple "this user is a child, don't show them anything unsuitable" flag, I wouldn't have to spend so much energy monitoring everything and could spend more energy talking to them about what they're actually watching.
One of the key parts of the Californian law is that if the client machine sends the flag, the service must treat it as authoratative, and should not use other means of checking. That is good news, as it means there is no incentive for sites to integrate more intrusive measures such as third parties scanning givernment issued ID.
because its designed to feed surveillance data to Palintir, which allows governments all over the west to monitor any dissident movements, or relatives of "dissidents" against right wing governments. dont know of any computer system requiring your ID/ or birthday, you can always fake a birthday.
right now the biggest threat to conservative governments is anyone "left" of them.
What is a computer? My microwave has a computer in it. My car. My printer. My smartwatch. My TV. My treadmill. My security cameras. Many many things have little embedded systems running linux. Some are Internet connected, some aren't. This feels terribly invasive for something that allegedly protects kids (doubtful). What if i don't have any kids in my household? Would this have stopped Trump and his friends? How about the government focus on real problems instead of requiring cameras be installed on my toaster and a credit card to be able to watch TV.
Because I don't give a shit what your kids do on the Internet, and there are already plenty of tools for you to curate the experience for them.
As others have said
It has nothing to do with age checking, protecting the children, or security. NOTHING.
That’s one of the main things to me. The argument jumps directly to drivers license / DOB collection, but makes no conclusions about how it would protect children. It is OVERTLY, 100%, about feeding lists of targets to the pedophiles that run the biggest tech companies.
Having a gatekeeper behind what you can use on your own hardware is always bad.
On the one hand, it is a privacy nightmare.
On the other hand, those laws are so badly written, they will apply to things you would never consider an issue. E.g. a security camera, a router, a NAS. For each of them, the law applies, because they have an OS, they are attached to a network, and they have logins. Think about it, and it basically applies to any network enabled device.
While an international cabal of rich white men participate in a pedophile club run by america/israeli rich white other men, we need to ensure that the youth of today don't prematurely access "racy" pictures. Make it make sense.
Show us your ID, then. Or even just your age. Now your children too.
Don't want to? That's why.
So
- Unenforceable
- Inaccurate
- Over-reaching
- PII not protected
What's wrong with it then? By the numbers, it seems everything is wrong with it.
When you go order something from Amazon, you're using about 15-20 computers in a row; probably more. PROVE you have the right. Yes, the server farm you're using to make an order is included, and it's a lot of machines.
Who pays to make sure Ticketmaster server farm is 'used' by age-appropriate customers and the code to check that is installed and maintained? Why, you, of course. The order panel at the burger joint? You, eventually. Toll ticket at Airport Parking? You're gonna love this. Guess what's in your cable box? Guess how often you'll have to have your face scanned just to turn on the TV? TV too. Fancy thermostat? There's a computer Nesting in there. Scan that face, bucko; on the new unit you have to buy because, dude, that and your microwave just became e-waste.
The list is unending. The implementation is shit. The data leak has already been shown with .. discord, right?
Lots of people are about to be born on 01-01-1900. I guess 01-01-2000 works now though. Man, I'm old.
Because parents are responsible for stuff their off-spring does and the government should not be needed to do that.
At the very most, provide tools to help parents (e.g. on device filtering etc. or require companies to provide APIs to facilitate the same goal)
Other than that: Fuck off of my phone.
How is your first reason an argument against OS-level check?
It's not needed, thar's the parents job. Not the OS' job
People keep saying this. Is it not within an operating system's purview to provide parents tools to configure what their kid can do with the system? Have parental controls been out-of-scope for all these OSes this whole time?
Whether it should be government-mandated is one question, but it seems more like this "it's the parent's job, not the OS's" has become a tagline that people just repeat rather than really thinking through it.
Is your expectation then that parents should sit over their kids' shoulder every moment that they access the internet? Are our tools not supposed to make that easier to handle?
At the very most, provide tools to help parents (e.g. on device filtering etc. or require companies to provide APIs to facilitate the same goal)
I thought that this is what you were getting at here, which is why I asked how this was an argument against values held locally on the device.
Whether it should be government-mandated is one question,
That:s my primary issue
Is your expectation then that parents should sit over their kids' shoulder every moment that they access the internet? Are our tools not supposed to make that easier to handle?
In a perfect world, I would want APIs and other integrations be made available that will do that and the parent will only need to press a button to allow/deny it.
Not really government mandated but voluntarily by a group that executes the vision of a parent, requested by the government (due to requests by the parental society but not because corps deciding they need/want more controllable elements) and the technical parties (e.g. OS devs) that can integrate the wish.
Unfortunately this will probably be a mandated integration requiring everyone, doesnt matter if a child is existing, to authenticate that they are truly legally able to access the device and/or ressource.
Great, now as a childless person I have to do those things because some were irresponsible and ruined it for everyone :/
I hope I could communicate my issue.
Whether it should be government-mandated is one question,
That:s my primary issue
That's my issue too. We're in agreement, but I just wanted to point out that the "it's the parent's job, not the OS's" doesn't communicate that and instead applies a blanket statement that actually undermines what you're saying you want.
The other guy is right when they say it applies to the check existing on the web-level. That is the issue, in my opinion, and I think people are just conflating that issue with the OS value's merit. Having a check at web level is actually what removes the responsibility and capability for parents to parent their children. Having it at the OS level makes it a tool for parents to use. They don't have to set it up, but the idea is that it makes it really easy for parents with zero computer prowess.
Again, should it be government mandated on the OS side? I strongly don't think so. But if anyone has a good solution to not mandate developers to respect the browser's report of the parental controls setting, I'd love to hear it (zero sarcasm, I don't want to have anyone breathing down my neck to implement this stuff either). The best I can think of is to take advantage of AI, but I can see why it could be unsavory. Should the browser itself carry a database of sites it has scanned and then use that to determine whether a site is safe? Should it query a user-owned model that's more customizable for the parent's tastes? Can we get that to run locally for everyone?
Whether it should be government-mandated is one question, but it seems more like this “it’s the parent’s job, not the OS’s” has become a tagline that people just repeat rather than really thinking through it.
People usually repeat it for calls for checks on online platforms, not just within the scope of OS - but its primarily stated because people, quite fairly, don't want to see websites having to shut down, or them losing access entirely, or losing access without handing over private data because of parents inability to control their childs access to the internet.
Sure. I think clearly this thread has been talking about the OS piece specifically. I wholly disagree with having some private company that collects IDs and makes the determination themselves. If instead your browser can just ask your device if you have parental controls enabled, then that removes the privacy concern entirely, as far as I know. Is there an extra data point for browser fingerprinting? Yeah, I guess. But I would also assume that anyone who cares to avoid this fingerprinting is going to not have parental controls enabled.
Essentially, I'm confused why the world gave up so quickly on parental controls (not really confused—the alternative provides more surveillance capability).
But even if it happened purely at the OS level, it would be laughably unenforceable at best.
Essentially, I’m confused why the world gave up so quickly on parental controls (not really confused—the alternative provides more surveillance capability).
I can easily imagine a piece of software parents can download, for free, that if installed would basically function akin to a virus on someone's computer - it blacklists much of the internet and is updated and maintained by a company that updates the allowed sites and banned sites regularly. It could not be turned off. If it crashes, is ended by force, it automatically reloads - and any attempts to remove it sends emails or text messages to the owners (the parents) who would know something is up. It could be turned off only by the parent putting in a specific password to disable it, and if they forgot, they would have to phone the company to get it reset.
Any responsible parent would install this on the phones and computers of their kids and it would do everything they need.
One thing I said before is the question of what is the research on this, and how do we know child internet safety is actually a problem? I don't know the statistics on this, and I haven't done much studying on it yet. So I will admit that I have been operating under the premise that this is an issue to begin with. Someone mentioned routers with parental blocks. Aside from being able to easily disconnect from the network (inevitability for kids because it's easy and they have plausible deniability, in my opinion), if child internet safety is currently an issue, then clearly there is something about it that isn't working.
But even if it happened purely at the OS level, it would be laughably unenforceable at best.
Don't get me wrong, it would still require another component whether that be a requirement for websites to query the OS via the browser, or a database of "bad" websites.
Now, if you want there to be an app that handles this, that's your opinion and I respect that. Personally, I would rather it be built into the OS. Least of all because already-on-your-device is easier than something parents need to research and download on their kids' devices. More significantly, if this kind of capability becomes an expectation for your general usage OSes to have, then that's less incentive for some company to come in and try to capitalize off of it and charge $12.99 per month, and then still have incentive to collect and sell data on which sites are being visited. I mean, you can be reasonably sure that Microsoft is gonna do that too, but that would be another reason to switch to a Linux distro that doesn't do that.
I meant there would be no way to stop any OS from just waving users through and automatically converting their account into an 'adult account', or just asking users "Are you 18 yes/no". How many variations of Linux are there now?
More significantly, if this kind of capability becomes an expectation for your general usage OSes to have, then that’s less incentive for some company to come in and try to capitalize off of it and charge $12.99 per month, and then still have incentive to collect and sell data on which sites are being visited. I mean, you can be reasonably sure that Microsoft is gonna do that too, but that would be another reason to switch to a Linux distro that doesn’t do that.
I'd be in favour of the government commissioning and funding this and making it free-to-access for parents.
I meant there would be no way to stop any OS from just waving users through and automatically converting their account into an 'adult account', or just asking users "Are you 18 yes/no". How many variations of Linux are there now?
Right, but in this case, the parental controls just wouldn't be doing their job. I mean, you're right—there's nothing you can do about that. But if I'm turning on a setting to enable a parental control and it doesn't enable the parental control, then I'm 1) complaining about Microslop in the case of Windows, or 2) switching my kids to a different distro in the case of Linux. Again, I'm against the idea of government-mandated on the OS side. I'm undecided on the website side of things.
I'm gonna transcribe a section of a comment I made in another post:
Upon setting up the device or account, it is the parent's responsibility to create a password or biometric or whatever to activate/deactivate the safety mode. No personal information required. It should be pretty easy. Are there technically ways for the kid to get around this? Yes, but that'd be breaking the trust. In the same way you'd deal with your kid sneaking out of the house, you deal with that separately. | https://programming.dev/comment/22589550
I'd be in favour of the government commissioning and funding this and making it free-to-access for parents.
That's interesting. I'm in America and, unless it's FOSS, I definitely 100% do not trust a government-commissioned application that needs to see and manage all of my home's network traffic in order to work. Especially not right now.
Right, but in this case, the parental controls just wouldn’t be doing their job. I mean, you’re right—there’s nothing you can do about that. But if I’m turning on a setting to enable a parental control and it doesn’t enable the parental control, then I’m 1) complaining about Microslop in the case of Windows, or 2) switching to a different distro in the case of Linux. Again, I’m against the idea of government-mandated on the OS side. I’m undecided on the website side of things.
Well if it's not mandated (on the OS side that you refer to) then sure.
That’s interesting. I’m in America and, unless it’s FOSS, I definitely 100% do not trust a government-commissioned application that needs to see and manage all of my home’s network traffic in order to work. Especially not right now.
I mean it would be opt-in. Me and you wouldn't ever get it and websites and developers wouldn't be burdened by it. That's the point.
No problem with your excerpt there either.
I see the numerous websites having to close down because they can't/won't do the integration.
I mean look at YT.
The stupid COPPA law prevents me from reading funny comments under cartoon intros because youtube couldnt be arsed to prevent kids from using the regular youtube app instead of the "youtube kids" app.
Even some meme clips are barred because youtube thinks they are "for kids" (lmao) (Example. Ironically those videos, when shared, don't have a tracking id in the url and some of the quick access share options like for whatsapp are not available, only the internal share options by the OS)
Another example that grinds my gears on YT:
- Mini player is deactivated, because supposedly kids could watch the forbidden sauce in a minimized video while the parent couldnt see wht it was.
- Adding to playlists is forbidden. But why??? What is so dangerous about being able to add a video to a playlist? Just deny kids to watch a playlist if it's not 100% populated with "made for kids" or something.
- Commenting is disabled. Even if the account is known to be a verified adult account.
All of these just because some USA state needed to extend their reach across country borders because they are headquartered there.
Just restrict it to USA-IPs or something. ლ(ಠ益ಠლ)
No. As soon as you're sending in your official ID your entire online presence will be tracked to your ID by the government, Google, Meta and the likes. Privacy is totally gone by then...
top 98 comments