Fork time? Maybe all the anti-systemd zealots were right all along…

  • CrackedLinuxISO@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    1 hour ago

    Has anyone even looked at the PR? Why is there such a big stink about adding an optional birthday field to a JSON schema? It’s opt-in and can’t be validated in any way.

    That’s like saying OpenSSL is the thin end of an anti-encryption wedge because they provide FIPS compliant modules. Or complaining that it puts your privacy at risk when you generate an SSH key and it asks for your address.

    The problem is the laws getting passed, not with software that gives people a choice about whether to comply.

  • SayCyberOnceMore@feddit.uk
    link
    fedilink
    English
    arrow-up
    0
    ·
    3 hours ago

    Just think of all those Azure and AWS VMs needing age verification as they’re spooled up, destroyed and receated every few minutes…

  • brucethemoose@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    4 hours ago

    …Practically, what does this even mean for a systemd user like me?

    What app would use this? And If anything actually uses the field, can’t I just enter a random date, like I have across the internet forever?

    • YiddishMcSquidish@lemmy.today
      link
      fedilink
      English
      arrow-up
      0
      ·
      4 hours ago

      Self reporting has long been honored as the gold fucking standard for honesty! How dare you sully that with your very discrete scrolling to a random year, and not even bothering to select a date! Our data mining overlords will be displeased.

    • Hugging Stars@programming.dev
      link
      fedilink
      arrow-up
      0
      ·
      4 hours ago

      They implemented part of the the low level works needed to implement birth date verification. Commercial distros like Ubuntu, RHEL and SteamOS might use it for law compliance. It’ll very likely be as easy to bypass as it can be since no one really wants this.

      • brucethemoose@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        4 hours ago

        You mean tied to IDs or something?

        Commercial services would’ve just implemented that anyway. And yeah, likely with “absolute bare minimum effort.”

        I’m still a bit confused. This thread is acting like this is a slope to systemd distros requiring an ID check, if I’m reading it right.

        • Hugging Stars@programming.dev
          link
          fedilink
          arrow-up
          0
          ·
          3 hours ago

          You mean tied to IDs or something?

          Anything goes, ID is one way to do it.

          This thread is acting like this is a slope to systemd distros requiring an ID check, if I’m reading it right.

          The post itself is phrased like that for engagement.

  • Cease@mander.xyz
    link
    fedilink
    arrow-up
    0
    ·
    6 hours ago

    It’s so hilarious that the most recent thing that’s happened on this shitty PR is a request for Claude to review their code.

  • luciferofastora@feddit.org
    link
    fedilink
    arrow-up
    0
    ·
    6 hours ago

    Y’all are making a mountain out of nothing. Adding a data field alone has absolutely no effect unless:

    1. Entering it is forced
    2. That entry is somehow verified (which would be the invasive part)
    3. The systems accessing userdb actually use it for anything (which would require it to be filled out and verified to be anything but performative)

    As it stands, it’s a performative gesture to avoid law enforcement crackdown, which I think is perfectly reasonable for a private person with limited funds to fight a legal battle with. That doesn’t mean they can’t also fight that battle privately, but expecting volunteers to put their necks on the line over adding data field seems rather entitled to me.

    If Gnome decided to implement age verification (beyond just “enter your date and please don’t lie”), using that field, the blame for that would fall on Gnome.

    This is more like adding a field in the cookie of an adult website to store whether the user has clicked “Yes, of course I’m 18”, without even implementing the disclaimer for the user to click that button, let alone actual age verification.

      • luciferofastora@feddit.org
        link
        fedilink
        arrow-up
        0
        ·
        5 hours ago

        Nope. I’m John Doe, living in Nice Try, Atlantis, and my email is “who@car.es”. But I draw the line at being asked for my birthday (which is 1970-01-01).

        The userdb already has fields for other information. Nobody enforces putting anything there, nor verifies the contents. Why should DoB be different? And why should that be on the userdb?

        • Skullgrid@lemmy.world
          link
          fedilink
          arrow-up
          0
          ·
          4 hours ago

          Because this design does not come from the project, it is bowing down to a fascist funded movement.

    • Ulu-Mulu-no-die@lemmy.zip
      link
      fedilink
      English
      arrow-up
      0
      ·
      6 hours ago

      is perfectly reasonable for a private person with limited funds to fight a legal battle with

      Are you saying corporations like Red Hat sponsoring the development of systemd are thinking of “poor private devs” of whatever distro when taking such a decision than impacts the majority of distros?

      • luciferofastora@feddit.org
        link
        fedilink
        arrow-up
        0
        ·
        6 hours ago

        Red Hat probably could afford to go to court over those laws. Maybe should, too. Maybe just passively ignore them until someone drags them to court for it. But all of that would be independent of this change.

        impacts the majority of distros?

        And just what is that impact?

        “Here, you have a space to write stuff down.” So what? If I’ll never read it or verify the contents, what difference does it make?

        • Ulu-Mulu-no-die@lemmy.zip
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          5 hours ago

          And just what is that impact?

          That every distro will inherit a field containing a birth date, whether they want it or not.

          “Here, you have a space to write stuff down.” So what?

          That “stuff” is a personal information that not everyone is legally equipped to deal with. In EU there are specific laws protecting storage and usage of personal information.

          Your "stuff"can potentially create more problems than the ones it tries to solve, assuming good intentions.

          • luciferofastora@feddit.org
            link
            fedilink
            arrow-up
            0
            ·
            5 hours ago

            That “stuff” is a personal information that not everyone is legally equipped to deal with.

            You mean like email address, real name, location? Because those fields exist already. I’m not aware that they have ever caused any issues, even though real name and location should be more critical in a doxxing or surveillance context than “just” the date of birth.

            I assure you, I don’t have my email, real name or location stored in my userdb. Nobody makes me enter them. Nobody cares. Nobody would verify if I did. What’s stopping me from entering 1970-01-01 as my DoB, if I enter anything at all?

            If I’m the one storing, transmitting, querying and processing PII, I’m responsible for it. If my distro were to require email verification, proof of identity for the real name, records of my place of residence or employment to ensure the location is accurate, that would be an issue, and that would make the vendor liable for handling that data.

            That is what the GDPR and related laws are actually concerned with, not the exact format or place they’re stored. Otherwise, you’d have to ban me from creating text files: I might store someone’s phone numbers in there.

            • Ulu-Mulu-no-die@lemmy.zip
              link
              fedilink
              arrow-up
              0
              ·
              4 hours ago

              Because those fields exist already

              I’ve been using Linux for many years and not even once I’ve seen those info being requested by the operating system.

              Otherwise, you’d have to ban me from creating text files

              There’s a huge difference between YOU putting your info by your own accord wherever you want (look at what people do on Facebook) and an operating system requesting those.

              In case you didn’t notice, this whole ordeal is pushed by Meta to avoid being accountable for the shit they do on their platforms, they’re trying to shift the responsibility to operating systems of all things, and that’s not acceptable.

              • luciferofastora@feddit.org
                link
                fedilink
                arrow-up
                0
                ·
                4 hours ago

                being requested by the operating system

                Is it though? As best as I could tell, this PR is literally just adding the field next to the others, not requesting shit.

                In case you didn’t notice, this whole ordeal is pushed by Meta to avoid being accountable for the shit they do on their platforms, they’re trying to shift the responsibility to operating systems of all things, and that’s not acceptable.

                Absolutely. I just disagree that this particular addition (particularly considering all the fuss about making sure it doesn’t show up in logs and dumps and what not) is a problem. I don’t think this is the hill that battle should be fought on. Adding or not adding it to systemd doesn’t make the OS / distro built on top of it any less responsible for their handling of that data.

                It does provide a standard and (somewhat) central place to implement the security aspects of it though.

    • Liketearsinrain@lemmy.ml
      link
      fedilink
      arrow-up
      0
      ·
      2 hours ago

      It does not help that non insignificant amounts of systemd criticism comes from Lunduke and gang, often ignoring the actual technical problems with systemd and turning into culture war.

      I don’t mean you, just my thoughts.

    • eldavi@lemmy.ml
      link
      fedilink
      English
      arrow-up
      0
      ·
      6 hours ago

      i’m going to start dyeing mine so that people won’t just keep ignoring me like some old man yelling at the neighborhood kids to get off his lawn. lol

    • Ulu-Mulu-no-die@lemmy.zip
      link
      fedilink
      English
      arrow-up
      0
      ·
      6 hours ago

      Guilty as charged xD

      I know the debate around systemd is going on for quite some time, I understood the basic reasoning behind it but I don’t have the technical knowledge required to truly decide for myself, so I just didn’t pay too much attention to it and followed what my distro of choice does.

      The good thing about this “new development” is that it’s not just a tech debate anymore, it has such wider implications that it’ll be much easier for people to decide where to be.

  • balsoft@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    8 hours ago

    This seems to be an opt-in, user-supplied field that apps can use to implement parental controls easier. If you’re gonna do birth dates at all, this is the way.

    But IMO it should be more granular: there should be fields for WWW access, social media access, sex/nudity/violent content, and apps should respect those individually. Then parents can choose what is appropriate for their child at their development level.

  • jarfil@beehaw.org
    link
    fedilink
    arrow-up
    0
    ·
    8 hours ago

    QUESTION: if I run my own system with local accounts, full root access, and no remote accounts… why should I care about whether systemd “MAY BE ABLE” to store someone’s date of birth?

    Sounds to me like, for all I care, they could add fields for ethnicity, religion, d size, political orientation, colonic maps, or whatever else they want.

    If it’s to build systems shared with underage family members, schools, or other public system… I personally DGAF.

    • chaoticnumber@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 hours ago

      Because the loss of control is never done in one move. It degrades, slowly. It is a slippery slope.

      Today its this, next year something else that is slightly more controversial but, same as this, will likely be adopted.

      5 years down the line law comes in with KYC - Lennert, that shitweasel, implements it, same as this. It blocks your services without activation. What then? Will you be more upset then?

      What about a few years after that when you browse some website that is against the “administration” and you get flagged, next morning ICE drags you out of bed, kills your dog and you dissappear?

      Will you give a shit then?

      Maybe this is all exaggerated, but so was saying that ICE would off people in the streets a few years ago, yet its reality, today. The world isn’t what it used to be, you got to fight, constantly, otherwise your freedoms get eroded.

    • skyline2@lemmy.dbzer0.comOP
      link
      fedilink
      arrow-up
      0
      ·
      8 hours ago

      If the whole story was the addition of this change with no other context, I’d agree. But if you read the PR description you’ll see its more than that. The laws in question are specifically called out. This suggests that whether or not the legal interpretation of compliance changes (the law could require more than just DOB entry, aka DOB verification with government ID), systemd is planning to comply rather than join the legal battle against these invasive requirements.

      • jarfil@beehaw.org
        link
        fedilink
        arrow-up
        0
        ·
        7 hours ago

        Yes, I get that they may want verification with government ID… but unless they do it at a firmware level, anything above a FOSS Linux kernel on my own unlocked hardware, is fully under my control.

        So far, it sounds to me like “age verif theatre” as applied to single user “jailbroken” systems. If they added this on a locked down Android system, as a requirement for network access (note: this is an actual proposal being floated around) then that would be of some concern… but systemd? 🤨

        • partofthevoice@lemmy.zip
          link
          fedilink
          arrow-up
          0
          ·
          4 hours ago

          Theatre is all you need for proof of concept. Later it can be reinforced by making it a requirement for access to banking websites et al.

  • Soot [any]@hexbear.net
    link
    fedilink
    English
    arrow-up
    0
    ·
    9 hours ago

    Why would anyone on Linux, having free choice of all Linux OSes, choose one that actively compromises your privacy?

    This is why Linux should never be a corporate, paid-for ecosystem. The nerds that keep all this shit running for free will not be interested in maintaining spyware OS.

    • Ulu-Mulu-no-die@lemmy.zip
      link
      fedilink
      English
      arrow-up
      0
      ·
      8 hours ago

      Problem is, most distros use systemd, if they accept this implementation, distros will inherit it.

      I don’t know what it would mean for distro maintainers to revert this change, but I guess it wouldn’t be easy.

      I’m personally just happy sysvinit distros still exist, hopefully sysvinit won’t cave like systemd seems to be doing.

      • Soot [any]@hexbear.net
        link
        fedilink
        English
        arrow-up
        0
        ·
        7 hours ago

        Very true, and this is a good argument for the importance of diversity in everything Linux.

        The fact that there are distros not using it at least means there’s room to fuck off to those if this gets out of hand.