Statehouses across America are churning out age verification mandates that drill straight into operating systems. Linux distributions—those volunteer-built bastions of free software—now face shutdowns or forced surveillance. Big Tech cheers from the sidelines. And a federal bill could seal the deal nationwide.
California’s AB 1043, signed into law, demands that every operating system sold or distributed there collect user ages by 2027. Apps must query an ‘age signal’ from the OS or app stores before granting access. No signal? Treat the user like a child. Developers, even for offline tools, scramble to comply. Open-source projects without centralized accounts or revenue? They’re cornered. WebProNews lays it bare: this forces surveillance code into software, raising First Amendment alarms since code counts as speech.
Illinois isn’t far behind. SB 3977 targets ‘online services accessible by minors,’ a phrase broad enough to snag forums, blogs, and Linux repos. Penalties loom for non-compliance: fines per violation, liability for harms. Open-source maintainers, lacking ID-scanning budgets, might geo-block the state or fold. Conflicts with Illinois’ own Biometric Privacy Act add irony—mandate facial scans while banning them elsewhere. WebProNews calls it a machine that could swallow FOSS whole.
System76 CEO Carl Richell pulls no punches. ‘Liberty has costs, but it’s worth it,’ he writes. His firm, maker of Pop!_OS Linux laptops, sees these bills shifting blame from social media giants to OS makers. Meta, facing lawsuits over addictive designs for kids, lobbies for ‘safe harbors’—comply with any approved gate, dodge liability. Decentralized Linux? Essential for freedom, Richell argues. Centralized gates breed control. WebProNews quotes him: ‘A centralized platform designed to control the activity of the user creates the environment where the centralized platform provider can themselves then be controlled by higher powers.’
But Colorado offers a glimmer. Amendments to its age attestation bill exclude open-source OSes, apps, code repos like GitHub, and containers like Docker. System76’s Richell shared the draft on Mastodon: success from talks with Sen. Matt Ball. First state to carve out FOSS. It matters. Most bills don’t distinguish volunteers from billion-dollar corps. WebProNews; The Register.
Distros react. Zorin OS refuses outright. MX Linux awaits court fights. Parrot OS, security-focused, vows porous compliance if forced—satisfy the letter, let users bypass. Debian debates impacts. AlmaLinux watches upstream RHEL, calls California’s law a mess. Fedora ponders. No unified front. Enforcement? Unclear for global mirrors and forks. Phoronix.
Big Tech’s fingerprints everywhere. Meta spent $20 million lobbying in 2024. Bills share template language: broad ‘covered platforms,’ verification via ID, biometrics, or attestation, safe harbors for platforms. BOTE Project tracks it—nearly identical across states. Platforms offload to app stores and OSes. Snap, X push verification there. Result? Incumbents with data troves thrive; small fry die. Surveillance bonus: databases ripe for breaches, subpoenas. Discord’s 2025 leak exposed 70,000 IDs. WebProNews.
Federal escalation. H.R. 8250, the Parents Decide Act, introduced April 2026 by Rep. Josh Gottheimer (D-NJ) and cosponsored by Rep. Elise Stefanik (R-NY), mandates OS providers verify ages at setup, share via APIs. Mirrors California. Hits every device: PCs, phones, smart fridges. Linux? Decentralized nightmare. Distros lack ‘providers’ for queries. Fines crush volunteers. PC Gamer; GamingOnLinux.
Verification methods vary. Self-attest in California—lie freely. New York’s SAFE for Kids Act eyes biometrics or government ID for devices like smartwatches. Bypass kids anyway; harms privacy. Richell: Educate for ‘digital abundance,’ don’t gate. EFF warns of chilled speech, data risks. WebProNews.
Open-source ethos clashes hard. Code as speech—mandates compel changes, per precedents like Bernstein v. DOJ. Volunteers code for freedom, not checkpoints. States ignore: apply to all ‘accessible by minors.’ Blogs, wikis, Mastodon instances? Swept in. Chilling effect pre-enforcement—devs self-censor.
Politicians frame as child safety. Bipartisan wins. Opposition? Labeled pro-groomer. But real fixes? Algorithm transparency. Ban addictive designs for kids. Data limits. Not this. Big Tech dodges suits while building moats.
Linux fights back. Petitions against Colorado’s original. Distro statements. Mastodon posts. Yet momentum builds—Louisiana HB 570 effective July 2026; Illinois HB 5511 passed House. Texas, Utah, New York advance.
What next? Courts. NetChoice eyes challenges. FOSS might geo-fence states, fragment internet. Or fork ‘lawful’ branches—porous, as Parrot plans. Users? VPNs, lies, offshore installs. Enforcement toothless for code anyone compiles.
America’s open web hangs. States chase safety, hand keys to giants. Linux, symbol of resistance, tests the line. Watch Colorado—if exemptions stick, copycats follow. Federal? Brace.
WebProNews is an iEntry Publication