Skip to content
  • Hjem
  • Seneste
  • Etiketter
  • Populære
  • Verden
  • Bruger
  • Grupper
Temaer
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Kollaps
FARVEL BIG TECH
  1. Forside
  2. Ikke-kategoriseret
  3. A small set of people are merging changes to various Linux components to make sure every application knows your birth date.

A small set of people are merging changes to various Linux components to make sure every application knows your birth date.

Planlagt Fastgjort Låst Flyttet Ikke-kategoriseret
127 Indlæg 64 Posters 0 Visninger
  • Ældste til nyeste
  • Nyeste til ældste
  • Most Votes
Svar
  • Svar som emne
Login for at svare
Denne tråd er blevet slettet. Kun brugere med emne behandlings privilegier kan se den.
  • k3ym0@infosec.exchangeK k3ym0@infosec.exchange

    @wwahammy can’t we fork it prior to that commit and maintain a separate fork?

    hopeless@mas.toH This user is from outside of this forum
    hopeless@mas.toH This user is from outside of this forum
    hopeless@mas.to
    wrote sidst redigeret af
    #109

    @k3ym0 @wwahammy

    Distros (which package systemd) can choose to revert the patch that went in before building and packaging, which is quite manageable.

    We have to wait and see which ones will clean it out or not.

    1 Reply Last reply
    0
    • wwahammy@social.treehouse.systemsW wwahammy@social.treehouse.systems

      @artemis I don't know why.

      And I'd say "why are people complying at all?".

      hweimer@fediscience.orgH This user is from outside of this forum
      hweimer@fediscience.orgH This user is from outside of this forum
      hweimer@fediscience.org
      wrote sidst redigeret af
      #110

      @wwahammy @artemis

      I think this preemptive compliance has a lot to do with a lot of low-level open source development now being a regular day-job at a large tech company. So, you have people writing code who are embedded in an infrastructure with managers, performance targets, and the corporate culture associated with that, and where compliance with whatever the corporate hierarchy demands is the norm.

      This is a very different situation when you compare that to entrepreneurs and academics like Phil Zimmermann and djb, who didn't preemptively comply with export control laws.

      1 Reply Last reply
      0
      • mahadevank@mastodon.socialM mahadevank@mastodon.social

        @wwahammy apart from security fixes I don't see any earth-shattering reason to improve these modules, so is a security-fix only maintainable version possible?

        simon_brooke@mastodon.scotS This user is from outside of this forum
        simon_brooke@mastodon.scotS This user is from outside of this forum
        simon_brooke@mastodon.scot
        wrote sidst redigeret af
        #111

        @mahadevank @wwahammy If you're prepared to do the work, it's possible.

        #OpenSource is maintained by people who do the work, mostly unpaid, mostly unthanked.

        mahadevank@mastodon.socialM 1 Reply Last reply
        0
        • wwahammy@social.treehouse.systemsW wwahammy@social.treehouse.systems

          In case anyone is unclear, since I hear he's also campaigning on this Linux age-gating trash:

          Bryan Lunduke is a fascist hatemonger. He represents the absolute worst in free software and I believe he should be ostracized from any and all parts of our community. He wants software freedom for himself and in the abstract but despises individuals expressing their freedom. He believes in a software freedom that is hollowed out and missing love.

          rriemann@chaos.socialR This user is from outside of this forum
          rriemann@chaos.socialR This user is from outside of this forum
          rriemann@chaos.social
          wrote sidst redigeret af
          #112

          @wwahammy unless people have ample proof on what he believes in I suggest that they moderate their tone. This looks like a hate campaign to me.

          Some people only wanna implement/support laws they like. That's not how laws work.

          The cyberspace is not independent.

          markotway@mastodonapp.ukM 1 Reply Last reply
          0
          • smn@l3ib.orgS smn@l3ib.org

            @artemis @wwahammy this isn't complying in advance, it's complying with the law. Which passed unanimously through the California assembly and senate and was signed into law by Gavin Newsom in 2025. It's not going to be repealed.

            Open source projects do not have the type of budget that allows them to merely ignore the law and shrug off fines and legal fees.

            jpetazzo@hachyderm.ioJ This user is from outside of this forum
            jpetazzo@hachyderm.ioJ This user is from outside of this forum
            jpetazzo@hachyderm.io
            wrote sidst redigeret af
            #113

            @smn @artemis @wwahammy

            When I read about it a few months ago, I had the impression that OS vendors needed to not only offer a way to do age verification, but also guarantee that the age verification would be reasonably foolproof (e.g. with ID verification). Apple/Google/Microsoft can do that; Linux distros can't. Assuming that my impression was correct, and that the law wasn't modified before being voted (two bold assumptions for sure), I don't see how that systemd comedy is going to help if bad actors decide to sue Linux distros for non-compliance 🤔

            1 Reply Last reply
            0
            • simon_brooke@mastodon.scotS simon_brooke@mastodon.scot

              @mahadevank @wwahammy If you're prepared to do the work, it's possible.

              #OpenSource is maintained by people who do the work, mostly unpaid, mostly unthanked.

              mahadevank@mastodon.socialM This user is from outside of this forum
              mahadevank@mastodon.socialM This user is from outside of this forum
              mahadevank@mastodon.social
              wrote sidst redigeret af
              #114

              @simon_brooke @wwahammy what would be the most important module to protect in your opinion? I'll try and fork a version out to codeberg

              1 Reply Last reply
              0
              • wwahammy@social.treehouse.systemsW wwahammy@social.treehouse.systems

                A small set of people are merging changes to various Linux components to make sure every application knows your birth date.

                This is being done rapidly by people with questionable justifications and being merged with no youth and few marginalized people involved.

                https://gitlab.freedesktop.org/accountsservice/accountsservice/-/merge_requests/176#0b07c0cc4d49be119f65cdb2037440f56eed647a

                david_chisnall@infosec.exchangeD This user is from outside of this forum
                david_chisnall@infosec.exchangeD This user is from outside of this forum
                david_chisnall@infosec.exchange
                wrote sidst redigeret af
                #115

                @wwahammy

                If I’m reading this PR correctly, it doesn’t comply with the California law, which requires the OS (some system component, such as systemd) to have the date of birth but provide only a 2-bit signal to the application and not their date of birth. The law is designed to provide a simple ‘user is over 18’ signal for all adults and to not permit apps to see their date of birth. There are issues if an app can poll the 2-bit signal over time, because then they can observe when it changes and infer the date of birth. But California already has a GDPR-like law that they would likely be infringing in this case (they do not have a need to that information and collecting it without consent would place them in violation).

                1 Reply Last reply
                0
                • bohwaz@mamot.frB bohwaz@mamot.fr

                  @wwahammy
                  Also this is most likely illegal under gdpr as collecting personal data that is not required for the system to work is illegal. Only necessary data should be collected. So they just made systemd illegal in Europe. Good job.

                  simon_brooke@mastodon.scotS This user is from outside of this forum
                  simon_brooke@mastodon.scotS This user is from outside of this forum
                  simon_brooke@mastodon.scot
                  wrote sidst redigeret af
                  #116

                  @bohwaz @wwahammy It's actually worse than that. I've just been reading the UK #GDPR guidance regarding holding age data on children. It's bizarrely complex, but, essentially, children under 13 cannot legally give consent to their age data being held.

                  So yes, you can legally hold age data on adults, provided they consent; but you can't on children, unless their parent consents, and that can't just be 'someone who said they were the parent'.

                  https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/childrens-information/children-and-the-uk-gdpr/what-are-the-rules-about-an-iss-and-consent/

                  1 Reply Last reply
                  0
                  • wwahammy@social.treehouse.systemsW wwahammy@social.treehouse.systems

                    A small set of people are merging changes to various Linux components to make sure every application knows your birth date.

                    This is being done rapidly by people with questionable justifications and being merged with no youth and few marginalized people involved.

                    https://gitlab.freedesktop.org/accountsservice/accountsservice/-/merge_requests/176#0b07c0cc4d49be119f65cdb2037440f56eed647a

                    C This user is from outside of this forum
                    C This user is from outside of this forum
                    cjmalone@en.osm.town
                    wrote sidst redigeret af
                    #117

                    @wwahammy

                    > Nobody is a fan of these laws, but not following the laws has huge implications in any project that would like to have any company contribute to it and puts the maintainers in a position where they are unnecessarily liable.

                    Ignoring laws is a key and vital part of living in society.

                    1 Reply Last reply
                    0
                    • wwahammy@social.treehouse.systemsW wwahammy@social.treehouse.systems

                      In case anyone is unclear, since I hear he's also campaigning on this Linux age-gating trash:

                      Bryan Lunduke is a fascist hatemonger. He represents the absolute worst in free software and I believe he should be ostracized from any and all parts of our community. He wants software freedom for himself and in the abstract but despises individuals expressing their freedom. He believes in a software freedom that is hollowed out and missing love.

                      P This user is from outside of this forum
                      P This user is from outside of this forum
                      patricus@gts.posix.live
                      wrote sidst redigeret af
                      #118

                      @wwahammy explain to me what did he do? he's against the stupid age verification shit too.

                      1 Reply Last reply
                      0
                      • frumble@chaos.socialF frumble@chaos.social

                        @artemis @smn @wwahammy What if you are Californian? Could get you in legal trouble.

                        patrick@gruene.socialP This user is from outside of this forum
                        patrick@gruene.socialP This user is from outside of this forum
                        patrick@gruene.social
                        wrote sidst redigeret af
                        #119

                        @frumble @artemis @smn @wwahammy If you are Californian lobby hard to change a dangerous law.

                        1 Reply Last reply
                        0
                        • rriemann@chaos.socialR rriemann@chaos.social

                          @wwahammy unless people have ample proof on what he believes in I suggest that they moderate their tone. This looks like a hate campaign to me.

                          Some people only wanna implement/support laws they like. That's not how laws work.

                          The cyberspace is not independent.

                          markotway@mastodonapp.ukM This user is from outside of this forum
                          markotway@mastodonapp.ukM This user is from outside of this forum
                          markotway@mastodonapp.uk
                          wrote sidst redigeret af
                          #120

                          @rriemann
                          That's literally how laws work. If the people disagree with them, they revolt, and get bad laws struck off. There are many many examples of this through the ages.

                          By supporting them, you become the problem.
                          @wwahammy

                          rriemann@chaos.socialR 1 Reply Last reply
                          0
                          • bohwaz@mamot.frB bohwaz@mamot.fr

                            @wwahammy
                            Also this is most likely illegal under gdpr as collecting personal data that is not required for the system to work is illegal. Only necessary data should be collected. So they just made systemd illegal in Europe. Good job.

                            tseitr@mastodon.sdf.orgT This user is from outside of this forum
                            tseitr@mastodon.sdf.orgT This user is from outside of this forum
                            tseitr@mastodon.sdf.org
                            wrote sidst redigeret af
                            #121

                            @bohwaz @wwahammy this is the best comment in this thread, it is even discussed in the merge request that date of birth is PII

                            1 Reply Last reply
                            0
                            • smn@l3ib.orgS smn@l3ib.org

                              @artemis @wwahammy this isn't complying in advance, it's complying with the law. Which passed unanimously through the California assembly and senate and was signed into law by Gavin Newsom in 2025. It's not going to be repealed.

                              Open source projects do not have the type of budget that allows them to merely ignore the law and shrug off fines and legal fees.

                              jadedarko@hachyderm.ioJ This user is from outside of this forum
                              jadedarko@hachyderm.ioJ This user is from outside of this forum
                              jadedarko@hachyderm.io
                              wrote sidst redigeret af
                              #122

                              @smn it is only the law in California

                              projects should simply add a disclaimer "this product is not legal in regions that require OS level age verification" like they used to for the bundled codecs

                              the US isn't the entire world and people from there need to stop pushing their bullshit onto everyone else

                              1 Reply Last reply
                              0
                              • wwahammy@social.treehouse.systemsW wwahammy@social.treehouse.systems

                                In case anyone is unclear, since I hear he's also campaigning on this Linux age-gating trash:

                                Bryan Lunduke is a fascist hatemonger. He represents the absolute worst in free software and I believe he should be ostracized from any and all parts of our community. He wants software freedom for himself and in the abstract but despises individuals expressing their freedom. He believes in a software freedom that is hollowed out and missing love.

                                P This user is from outside of this forum
                                P This user is from outside of this forum
                                patricus@gts.posix.live
                                wrote sidst redigeret af
                                #123

                                @wwahammy also, linux is missing love too. accessibility stack lags behind even NVDA 2016.x

                                1 Reply Last reply
                                0
                                • markotway@mastodonapp.ukM markotway@mastodonapp.uk

                                  @rriemann
                                  That's literally how laws work. If the people disagree with them, they revolt, and get bad laws struck off. There are many many examples of this through the ages.

                                  By supporting them, you become the problem.
                                  @wwahammy

                                  rriemann@chaos.socialR This user is from outside of this forum
                                  rriemann@chaos.socialR This user is from outside of this forum
                                  rriemann@chaos.social
                                  wrote sidst redigeret af
                                  #124

                                  @markotway @wwahammy

                                  How about targeting with revolts politicians and not opensource developers?

                                  1 Reply Last reply
                                  0
                                  • wwahammy@social.treehouse.systemsW wwahammy@social.treehouse.systems

                                    A small set of people are merging changes to various Linux components to make sure every application knows your birth date.

                                    This is being done rapidly by people with questionable justifications and being merged with no youth and few marginalized people involved.

                                    https://gitlab.freedesktop.org/accountsservice/accountsservice/-/merge_requests/176#0b07c0cc4d49be119f65cdb2037440f56eed647a

                                    tofuhuehnchen@fedi.atT This user is from outside of this forum
                                    tofuhuehnchen@fedi.atT This user is from outside of this forum
                                    tofuhuehnchen@fedi.at
                                    wrote sidst redigeret af
                                    #125

                                    @wwahammy I wish them scabies and arms too short to scratch themselves!

                                    1 Reply Last reply
                                    0
                                    • jadedarko@hachyderm.ioJ This user is from outside of this forum
                                      jadedarko@hachyderm.ioJ This user is from outside of this forum
                                      jadedarko@hachyderm.io
                                      wrote sidst redigeret af
                                      #126

                                      @konomikitten the vast majority of people (over 95%!) do not live in the US

                                      the US *is* an asinine overseas country passing bullshit laws

                                      1 Reply Last reply
                                      0
                                      • wwahammy@social.treehouse.systemsW wwahammy@social.treehouse.systems

                                        A small set of people are merging changes to various Linux components to make sure every application knows your birth date.

                                        This is being done rapidly by people with questionable justifications and being merged with no youth and few marginalized people involved.

                                        https://gitlab.freedesktop.org/accountsservice/accountsservice/-/merge_requests/176#0b07c0cc4d49be119f65cdb2037440f56eed647a

                                        nik@toot.teckids.orgN This user is from outside of this forum
                                        nik@toot.teckids.orgN This user is from outside of this forum
                                        nik@toot.teckids.org
                                        wrote sidst redigeret af
                                        #127

                                        @wwahammy How many youth were involved in the considerations you made when building YOUR opinion on the matter?

                                        1 Reply Last reply
                                        0
                                        • jwcph@helvede.netJ jwcph@helvede.net shared this topic
                                        Svar
                                        • Svar som emne
                                        Login for at svare
                                        • Ældste til nyeste
                                        • Nyeste til ældste
                                        • Most Votes


                                        • Log ind

                                        • Har du ikke en konto? Tilmeld

                                        • Login or register to search.
                                        Powered by NodeBB Contributors
                                        Graciously hosted by data.coop
                                        • First post
                                          Last post
                                        0
                                        • Hjem
                                        • Seneste
                                        • Etiketter
                                        • Populære
                                        • Verden
                                        • Bruger
                                        • Grupper