hekate/microsoft-systemd-findings-public
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
microsoft-systemd-findings-.../12-legislative-update.md
hekate 5850d38f9a Public release, findings
2026-03-23 06:01:08 +00:00

173 lines
7.6 KiB
Markdown
Raw Permalink Blame History

# Legislative and Community Update (as of March 23, 2026)
## systemd Status: birthDate Field Remains
- PR #40954: birthDate field still in systemd codebase. No second revert attempted.
- PR #41179: Community revert closed by Poettering on March 19. Status: permanently rejected.
- Issue #40974: ageGroup alternative (age brackets instead of exact dates) - closed without implementation.
- Community revert patch: Published as [GitHub Gist](https://gist.github.com/jeremytregunna/d9609bcdb287f0da206c58cfa20defa4) for distros that want to strip the field independently.
The situation has been in a holding pattern since March 19.
---
## Federal Legislative Developments
### COPPA 2.0 - Passed Senate (March 2026)
| Field | Detail |
|---|---|
| **Status** | Passed Senate unanimously, early March 2026 |
| **Coverage** | Ages 13-16 |
| **Key provisions** | Bans targeted advertising to minors, creates dedicated FTC enforcement division |
### KOSA - Advanced
| Field | Detail |
|---|---|
| **Status** | Advanced through committee |
| **Requirements** | Risk assessments, restricted default settings for minors, algorithm disclosure |
### App Store Accountability Act - Passed House Committee
| Field | Detail |
|---|---|
| **Status** | Passed House Energy and Commerce Committee |
| **Requirements** | App stores must implement age assurance and send age signals to developers |
### KIDS Act - Advanced to Full House Floor
---
## State Legislative Developments
### California AB-1043 (Signed)
| Field | Detail |
|---|---|
| **Status** | Signed October 13, 2025 |
| **Effective** | January 1, 2027 (full compliance July 1, 2027) |
| **Requirements** | OS providers must prompt for birth date/age at account setup |
| **Age brackets** | Under 13, 13-15, 16-17, 18+ |
| **Method** | Self-reported (no ID/biometrics) |
| **Penalties** | $2,500 negligent / $7,500 intentional per "affected child" |
| **Legal challenges** | EFF building constitutional challenge; no lawsuit filed yet |
### Colorado SB26-051 (Advancing)
| Field | Detail |
|---|---|
| **Status** | Passed Senate Third Reading March 3, 2026 (28-7) |
| **Effective** | January 1, 2028 if enacted |
| **Age brackets** | Under 13, 13-16, 16-18, 18+ |
| **Open-source exemption** | Co-author Sen. Matt Ball suggested this is a "real possibility" after System76 lobbying |
### New York S8102A (More Stringent)
| Field | Detail |
|---|---|
| **Status** | Pending |
| **Key difference** | Explicitly forbids self-reporting - leaves allowed methods to AG regulations |
| **Penalties** | $10,000 per violation (vs. California's $2,500-$7,500) |
### Alabama (Signed)
Became the fourth state (after Utah, Louisiana, Texas) to sign age verification laws in February 2026.
### Active Legal Challenges
| Case | Status |
|---|---|
| **CCIA v. Brown (Utah SB142)** | Enforcement blocked pending injunction hearing |
| **CCIA v. Paxton (Texas)** | Preliminary injunction granted Dec 23, 2025 |
| **AB-1043 challenges** | Expected before Jan 1, 2027; EFF building case |
Sources:
- [Fortune - Social media companies scrambling (Mar 18)](https://fortune.com/2026/03/18/kosa-kids-act-app-store-accountability-act-minors-age-verification/)
- [IAPP - COPPA 2.0, KOSA advanced](https://iapp.org/news/a/coppa-2-0-kosa-among-18-children-s-online-safety-bills-advanced-by-us-house-subcommitte)
- [Roll Call - Kids online safety bills (Mar 6)](https://rollcall.com/2026/03/06/kids-online-safety-bills-move-forward-from-senate-house-panel/)
- [Colorado SB26-051 bill page](https://leg.colorado.gov/bills/SB26-051)
- [New York S8102A](https://www.nysenate.gov/legislation/bills/2025/S8102/amendment/A)
- [EFF - AB-1043 analysis](https://www.eff.org/deeplinks/2026/03/ab-1043s-internet-age-gates-hurt-everyone)
---
## Distribution Updates
### Ubuntu / Canonical
- VP Jon Seager: "reviewing internally with legal counsel," "no concrete plans"
- Community Discourse post ["Ubuntu must not implement OS-level age verification"](https://discourse.ubuntu.com/t/ubuntu-must-not-implement-os-level-age-verification-or-age-signaling-in-any-form/78253) gaining significant attention
- Dylan Taylor's draft PR to ubuntu-desktop-provision: not merged
### Fedora
- Project Leader Jef Spaleta proposed local-only approach: file in `/etc/`, local D-Bus API, no telemetry
- Nothing shipped. Discussion at [Fedora Discussion](https://discussion.fedoraproject.org/t/california-age-verification/181968)
### Debian
- Aaron Rainbolt cross-posted age verification discussion to `debian-devel` (March 1, 2026)
- No official project position formed as of March 23
- Discussion ongoing on `debian-devel` and `debian-legal`
### Arch Linux
- PR #4290 (archinstall): Still locked, awaiting organizational stance and legal counsel
- Related [Issue #4313](https://github.com/archlinux/archinstall/issues/4313) argues the field is "ineffective, non-compliant, and introduces unnecessary data collection"
### Ageless Linux
- Active and growing in visibility, early-stage
- Created by John McCardle as civil disobedience
- Currently a script applied to existing Debian installation (not standalone ISO)
- Maintains [Distro Compliance Tracker](https://agelesslinux.org/distros.html)
- Featured by It's FOSS, Linuxiac, jwz, Hackaday, GovInfoSecurity
- Roadmap Q3 2026: Debian-based Netinstall ISO, Milk-V Duo S device image, Flatpak-based "Ageless Store"
### System76
- CEO Carl Richell published blog opposing mandates
- Met with Colorado co-author Sen. Matt Ball - open-source exemption "real possibility"
- Actively lobbying Colorado legislature
### freedesktop
- Closed the controversial XDG age verification interface proposal (March 10, 2026)
- xdg-desktop-portal PR #1922 (age range portal by KDE's David Edmundson) remains as draft
---
## News Coverage Since March 21
### Major Outlets
| Outlet | Coverage |
|---|---|
| **Slashdot** | "SystemD Adds Optional 'birthDate' Field" (Mar 21) |
| **The Register** | 4 articles (Mar 6, 10, 13, 16) covering OS age checks, System76, opinion pieces |
| **Phoronix** | System76 comments, Colorado open-source exemption |
| **Linuxiac** | systemd birthDate support, freedesktop closure |
| **It's FOSS** | systemd feature, Ageless Linux, distro responses |
| **LWN.net** | OS age verification (paywall), investigation of forces behind bills |
| **Hackaday** | California's problematic attempt (Mar 5) |
| **Lunduke Substack** | systemd age verification + r/Linux censorship |
| **OSTechNix** | Deep dive on systemd userdb birthDate |
| **Sam Bent** | "The Engineer Who Tried to Put Age Verification Into Linux" |
| **GovInfoSecurity** | "How Old Are You? Linux Grapples with New Age Check Rules" |
### Ars Technica
Could not be confirmed - domain blocks automated crawlers.
---
## Valve / SteamOS
No public statement specifically addressing OS-level age verification or AB-1043 compliance for SteamOS. GDC 2026 announcements focused on hardware (Steam Machine/Steam Frame), not software age verification.
## SUSE / Red Hat / IBM
No public statements found regarding OS-level age verification. SUSE's European focus may insulate it from immediate US state law pressure.
Sources:
- [Slashdot - systemd birthDate](https://linux.slashdot.org/story/26/03/21/0424203/systemd-adds-optional-birthdate-field-for-age-verification-to-json-user-records)
- [System76 - Phoronix](https://www.phoronix.com/news/System76-Age-Verification-Laws)
- [Colorado exemption - Phoronix](https://www.phoronix.com/news/Colorado-Maybe-Exclude-OSS)
- [It's FOSS - Ageless Linux](https://itsfoss.com/news/ageless-linux/)
- [Sam Bent investigation](https://www.sambent.com/the-engineer-who-tried-to-put-age-verification-into-linux-5/)
- [LWN - OS age verification](https://lwn.net/Articles/1062521/)
- [LWN - Forces behind the bills](https://lwn.net/Articles/1062779/)
Reference in a new issue View git blame Copy permalink