Linux devs are fighting the new age-gated internet

TL;DR

Prime Big Deal Days · Oct 6–7Offer from Amazon

Get the latest gadgets delivered free — and shop member deals

• Fast, free delivery on millions of items
• Access to Prime Big Deal Days deals on October 6–7
• Prime Video, Amazon Music and more included

Start your free Prime trial →Free trial for eligible customers · Cancel anytime

As an affiliate, we earn on qualifying purchases.Hide

Linux developers, including System76 CEO Carl Richell, successfully lobbied Colorado lawmakers to exempt open-source OS from age-gating laws. The laws, similar to California’s AB 1043, threaten open-source principles and pose compliance challenges.

Linux developers, led by System76 CEO Carl Richell, have successfully persuaded Colorado lawmakers to exempt open-source operating systems from a new age-gating law, SB26-051, which aims to require age verification on devices accessing the internet.

In January, Colorado introduced SB26-051, a bill mandating device-based age verification to restrict access to certain content, primarily targeting commercial platforms like iOS and Android. Richell and other open-source advocates argued that such laws threaten the core principles of open source, including user privacy, transparency, and freedom to learn and experiment. After weeks of advocacy, Richell testified before the Colorado House on April 23rd, emphasizing that open-source systems like Linux should be exempt to preserve their educational and developmental value. The bill was passed on May 1st with an exemption for open-source OS, reflecting successful lobbying efforts.

Meanwhile, similar laws are under consideration in other states, such as Illinois and New York. California’s AB 1043, enacted in 2023 and effective January 2027, requires operating systems to collect user ages during setup, raising concerns among open-source developers about compliance and privacy. Unlike commercial giants, open-source projects often lack resources for implementing robust age verification, and the open nature of their code makes enforcement complex. Some developers, like those behind MidnightBSD, have responded with outright bans for residents of certain states, citing legal and ethical conflicts.

Why It Matters

This development highlights a fundamental conflict between emerging internet regulation and the ethos of open-source software. As laws aim to enhance child safety through age verification, they risk undermining user privacy, open development, and the freedom to modify software. For the broader tech community and millions of open-source users, these laws could set precedents that threaten the accessibility and independence of open-source projects.

Furthermore, the legal and technical challenges faced by open-source developers could influence how future regulations are crafted, potentially prompting legislative adjustments or exemptions for open-source systems. The outcome of these debates will shape the future landscape of internet regulation and open-source innovation.

Background

Legislation targeting age verification on digital devices has gained momentum in several US states. Colorado’s SB26-051 was introduced in January and passed in May after advocacy from open-source advocates. California’s AB 1043, enacted in 2023, set a precedent by requiring age collection during device setup, sparking concerns about enforcement and privacy. The laws reflect a broader push for online safety but clash with the principles of open-source development, which prioritize transparency, user control, and minimal data collection.

“Everyone should have access to the ability to create with a computer. Open-source software makes that possible. It ensures that everyone, regardless of age or background, can learn, experiment, and build at the most fundamental level.”

— Carl Richell, CEO of System76

“This is security theater, not improved child safety. Age verification mandates on open source systems create new privacy risks and are easily circumvented.”

— Michael Dolan, SVP of strategic programs at the Linux Foundation

“A local API or a new age field might be the easiest solution for compliance while minimizing privacy impacts.”

— Jef Spaleta, Fedora Project leader

“Until we have a better plan, we modified our license to exclude residents of California from using MidnightBSD for desktop use, effective January 1, 2027.”

— MidnightBSD developers

What Remains Unclear

It remains unclear how widespread compliance efforts will be across the open-source community and whether more projects will adopt similar bans or technical workarounds. The legal landscape is still evolving, and the full impact of these laws on open-source development is yet to be seen.

What’s Next

Legislators in other states are considering similar laws, and open-source communities are preparing responses, either through technical adjustments or advocacy. Monitoring upcoming legislative sessions and developer reactions will be key to understanding how the open-source ecosystem adapts.

Key Questions

Will open-source operating systems be able to comply with age verification laws?

It is uncertain. Many open-source projects lack resources for full compliance, and technical or ethical conflicts may prevent adherence. Some projects are considering exemptions or technical workarounds.

Could these laws lead to bans or restrictions for users in certain states?

Yes. As seen with MidnightBSD, some projects have already responded by restricting access for residents of states with strict laws, citing legal conflicts.

What are the privacy concerns associated with age verification in open source?

Age verification often requires collecting personal data, which conflicts with open-source principles of minimal data collection and user privacy. Implementing verification can introduce security vulnerabilities and data risks.