I mean yea. If you don’t make a good faith effort to implement this age attestation page and api to allow apps to pull from it. Then yes. You would be liable.
You could of course decide to not provide to residents of California and Colorado. No one is forcing you to provide for either of these states.
Rivalarrival@lemmy.today 3 days ago
And if I make a good faith effort, but it doesn’t work right, that’s a $2000 penalty. Every time that snot-nosed, unsupervised kid opens an app.
Yes, that’s exactly what Microsoft and Google want. They don’t want my FOSS OS competing with their commercial offerings.
Archr@lemmy.world 3 days ago
No… The law literally says that if you make a good faith effort then you are not liable.
Also the 2500$ is only for negligent violations.
Look, I don’t want linux to leave Cali. I have primarily used linux for the past 8 years and have no desire to use windows anymore than I have to. But, as you said, the linux community throwing their hands up and deciding to exit Cali and Colorado is just playing right into Microsoft’s desires.
Rivalarrival@lemmy.today 3 days ago
It used to be that my liability was to the people using my code. If I code badly, they won’t use it, and I might be blocked from contributing to a project. That was the worst penalty that I faced for providing bad code.
Now, I might have to argue against a lawyer claiming my mistakes are negligence, and my efforts are in less than good faith, with financial penalties should they prevail.
They merely need to point to my opposition to this law as evidence that I am not acting “in good faith” to support it.
Throwing up our hands and exiting California and Colorado is playing into Microsoft’s desires. It is also the only rational response should this law go into effect as planned. Which means the proper course of action is to denounce this idiot law, not lend it our support or rationalize the harm it causes.
Katana314@lemmy.world 3 days ago
Most practitioners of data security are aware of the severe dangers of fingerprinting users, and that is a hardline issue. Thus, in order to maintain their security practices, their only choice is to not collect this sort of info on users at any level. If they’re delivering a security product with a built-in vulnerability, they’re not delivering a security product. It’s much better to just surrender one state until it invents sanity.