The linked post argues that Illinois HB5511 drags Linux and other open operating systems into state-mandated age signaling. The law does not require passport scans or face scans. It requires an operating system on an internet-enabled device to expose a self-declared age bracket such as under 13, 13 to 15, 16 to 17, or 18 and up by January 2028, so apps, app stores, and sites can apply rules for minors. Those downstream rules matter too. The bill targets “addictive feeds” for minors, meaning personalized feeds based on user or device data, while allowing chronological feeds, direct search results, subscriptions, private messages, and user-directed filtering.
The useful discussion landed on two points. First, a lot of people think the article headline overstates the current law. This is declaration, not verification. No
ID check is in the text. Even several critics of the bill said that distinction is real and practically important, especially compared with Texas-style website ID checks. Second, almost nobody trusted that distinction to stay stable. The dominant view was that once the
OS is legally required to carry an age signal and platforms are legally required to care about it, lawmakers have created the plumbing for stronger identity checks later. That fear was reinforced by the broad scope of “operating system provider,” the awkward fit for headless servers, virtual machines, containers, embedded devices, and community Linux distributions, and the fact that mainstream vendors with an Illinois presence could implement the mechanism in shared components that then spread by default.
The other strong thread was enforcement. Several commenters pushed back on the idea that decentralization or open source governance magically defeats state power. Courts can punish people and entities under their jurisdiction even if they cannot stop the code from existing worldwide. The practical target is not every
BitTorrent mirror or hobby distro. It is Apple, Google, Microsoft, IBM, Red Hat, app stores, OEMs, and any project or distributor with enough legal and commercial surface area to squeeze. A minority defended the law as a workable parent-set device flag that is still far better than uploading ID to every site. But the broader takeaway was that Illinois is trying to solve a social media problem by pushing obligations down into the computing stack, and once that pattern is normalized it becomes much easier to demand more from operating systems than they should ever have to know about their users.
linuxstans.com