Hacker News
Objections to systemd age-attestation changes go overboard
kelseyfrog
|next
[-]
If you don't like those things then use another distro or create your own, branch a browser, and create your own Internet. I welcome that. Until than, don't say the contradictory phrases of " parent your kids," and resist any of the infrastructure to actually accomplish that.
stevenalowe
|next
|previous
[-]
GrayShade
|root
|parent
|next
[-]
> Some of this has been fueled by a misinformation campaign that has targeted the systemd project and Taylor specifically, resulting in Taylor being doxxed and receiving death threats.
I see.
rasz
|root
|parent
|next
[-]
maybe we should complain
nine_k
|root
|parent
[-]
It's only a problem when the OS insists on recording your private information to let you access your private account.
pinkmuffinere
|root
|parent
|previous
[-]
I think we can agree this is overboard
tzs
|next
|previous
[-]
1. To modify account creation so that in the scenarios where the law applies (account is being created for a child who is the primary user of the device) to ask for the age and/or birthdate of the child.
2. A way for applications to ask for the age range of the user ([0, 13), [13, 16), [16, 18), [18-infinity)).
Implicit is to store enough information from #1 to support #2.
The way I would store that information is by creating a directory, say /etc/age_group, and in that creating one file named after each age range. These files would be owned by root and not group or world readable.
On creating an account this applies to add an access control list (ACL) entry for that account to the appropriate file in /etc/age_group that allows that user to read it.
Then for #2 the way applications can check is by simply checking which files /etc/age_group it can open.
This should be more portable than the other ways I've seen proposed. POSIX access control lists are included I believe on every major Linux distribution (and also MacOS, FreeBSD, and maybe other BSDs).
This would give application writers on most Unix and Unix-like systems a common way to check if they are on a system that implements the California law (does it have /etc/age_group?) and a common way to check age group.
nine_k
|root
|parent
[-]
I think it's exactly how such a system should work: apps, sites, etc should declare an age limit, and the user's OS should decide if it's going to give the user access to them. This approach is opposite to having the user to prove their age (and worse, the legal identity) to the web site, app, etc.