That is really going to depend on what your actual risk is. There are a decent number of articles and videos out there that go into what journalists have to do and… they are generally ahead of the curve on stuff like that.
But what people SHOULD do is to gain an understanding of what is actually going on. This entire debacle REALLY feels like a mix of people being mislead as to what the California legislature actually is (whether for Views or more nefarious reasons) combined with making it abundantly clear that they know absolutely nothing about their current risks.
Like, you telling pornhub you are over 18 is not telling PornhubCorp anything they don’t already know from all the other cookies and fingerprints you are carrying everywhere. Hell, a lot of services are dedicated to tracking by IP to get around incognito mode and even caching to get around VPNs (although, most don’t have to bother since people have been trained to just put EVERYTHING through a vpn so that it doesn’t matter in the first place). They are literally just ticking a checkbox in the hope of not getting blocked by more payment processors.
So if you truly care about protecting your age? Have multiple devices. Learn how to split your traffic based upon device to get around many fingerprinting techniques. Figure out where to sit at Starbucks so that you have your back to a wall but don’t look like a pervert. And so forth.
Rather than freaking out and throwing tantrums because people are trying to inform you about how little a self-reported age at the OS level that can be requested matters.
MissesAutumnRains@lemmy.blahaj.zone 5 hours ago
Can I ask you to explain your point, “age doesn’t matter, your digital footprint carries over?” You mention solutions to protect yourself from the digital footprint carry over, but this law would just make it easier to overcome those solutions.
Now instead of having to figure out the various unique patterns of accessing the internet to determine info about you, you just tell them your age (or that you’re an adult, whatever) on those systems directly.
I also think it’s a bit disingenuous to call ‘this is the first step towards something worse’ a slippery slope when that is exactly how the creeping erosion of privacy has gone in the US historically, but especially the last few decades.
You acknowledge that a lot of people don’t fully understand how to protect themselves (and offer solutions that require more money, time, and education to accomplish) and in the same breath that is why it’s okay that we make data collection easier.
I know this probably comes across as accusatory, but I really don’t mean it that way. I’m genuinely trying to understand what your perspective is.
NuXCOM_90Percent@lemmy.zip 5 hours ago
I… didn’t say that? Not sure if you replied to the wrong person?
But I’ll try to respond to what I can?
Assuming we are referring to the California legislature (I believe most/all of the US legislature if on the same grounds. The proposed EU "framework"s are very different), there is no requirement for third party verification.
It is literally the same check we already have. “Enter a random ass date that is more than 18 years ago”. This doesn’t “overcome” anything and, arguably, is a good law to get on the books so that you can say “Something is being done” before all the legislature and “frameworks” that want to be built around third party verification and “digital passports” do gain traction.
All of this is already happening and HAS already happened. You know all those stories about how google knows you are pregnant before you miss your first period? You know how you can quite often just click “verify you are human” and it processes without making you generate training data?
Hell, you know how targeted ads are a thing?
All of that is the same thing. It is about building profiles that tend to be so ridiculously specific that it isn’t even “This user connecting from Norway actually lives in the US and is from Cleveland” and is more “Oh, this is Oswald Harvey using his nordvpn subscription. He tends to favor the endpoints that are 25% down the list”
Both of which speak towards why people need to educate themselves to understand what information is already out there.
Yes? I am sorry that protecting your privacy takes effort? I am sure that if you pay a random sponsor on an LTT video that they’ll claim to do everything for you?
Like… I really don’t know what to tell you?
MissesAutumnRains@lemmy.blahaj.zone 4 hours ago
Oh whoops, if I did, my bad. That’s what I was understanding your comment about “it’s literally the same check we already have” to be. You’re saying there are already age checks for certain sites (and analysis of your web traffic and associated data being sold) and that this is no different, if I understand correctly. It is worth pointing out that while the California law requires no verification, the New York law potentially requires more than just a declaration of age. It’s worse elsewhere in the world.
Right, but you see how this is also a bad thing right? Given that the FBI has now spoken about buying this data and uses it to target people, I would think that we would all want better privacy protections, not fewer.
No, I am saying that. I was saying that calling this a slippery slope doesn’t feel like it is based in the history of privacy erosion. I’d love to learn more about the original sin in all of this, but just because it isn’t the first step doesn’t mean we shouldn’t fight against consolidated, government-mandated privacy violations, right?
I think you’re misunderstanding me. I’m not complaining that it’s difficult. I’m asking why we don’t try and just fix the problem instead of letting something like this slide by because there are other, similar issues.
NuXCOM_90Percent@lemmy.zip 3 hours ago
Correct-ish.
I would amend that to be “All of this information is already out there and you provide it, without thinking, often multiple times per day”. But with the added caveat that this ONLY changes if a third party verification is required.
To my knowledge (and skimming what I can find), the New York bill also does not require third party verification. At least, as of 2025-S8102A.
But yes, fully agree regarding the rest of the world. People get EXTRA pissy if you point out the EU isn’t magically doing exactly what they want it to do and always siding with “consumers” but… the frameworks and legislature being pushed through there are deeply alarming.
Do not expect companies (and company adjacent) orgs to protect your rights.
But also? The FBI doesn’t need to “buy this data”. They can just buy the same marketing data everyone already has on them (unless you go above and beyond to obfuscate that).
And this legislature has absolutely zero bearing on any of that.
No, it is not. Like I pointed out above: We always say “parents should watch what their kids are watching so that I can keep getting my goon on with tiktok” and all that nonsense. And do you know what the first step to ACTUALLY protecting kids online is? That’s right. Restricting accounts based on age.
Adding a user provided birthdate to your account in systemd is no more dangerous than having a field for location or phone number. Having an API to fetch this from the OS IS concerning but is also very much in that realm of "This genuinely makes browsing the internet easier"as, depending on implementation, your computer can auto-verify you so you don’t have to wipe the lube off your hand when you change sites.
And… its almost like those of us on open source OSes can maybe consider a way to go even farther with controlling what gets sent…
Correct. But I would bet my bottom dollar that at least a few of the folk insisting this is the evil US (fair) forcing their will upon the world don’t realize their own governments might actually even be ahead of the game. Like apparently a bunch of live service games disabled chat in the UK in the past day or two?
Again, that privacy already eroded away years ago. Pretending otherwise is just lying to yourself and increasing your own risks.
The door to your home fell off and all your windows are shattered. Does it make ANY sense to freak out that your ex still has a key to your front door?
And that is why… it is more than a bit tinfoil hat but I really do wonder how much of this “outrage” is being intentionally stoked to distract from the very real concerns. If you actually care about your privacy then you need to educate yourself on what you should have been doing for years now. And consider getting on that.
Yes, let’s try to fix it. Complaining about a single field being added to a user profile (that already has user provided location, phone number, email, etc) ain’t it.
Focusing on the third party verification component… is part of it.
But also understanding that all of this is out there and never coming back is more important.
One of the biggest con jobs facebook has ever done is to pretend that they let you delete your account. And they do. Except… not really. Because User 1234 who has the real name field of “Fred Jones” was deleted. But User 1235 “Daphne Blake” isn’t and she has lots of pictures of her and Fred. And Old Man Wilkinson also has pictures of his home that some meddling potheads raided last month. So removing metadata from THEM would violate their digital rights.
So (simplifying), User 1234’s “real name” field is indeed voided. But their profile remains the same so all associations with Daphne and Shaggy and all the mansions remain the same. Same with the knowledge that some blonde haired d-bag with an ascot went to school with Red Herring. And that he is related to Skip and Peggy Jones. And that his name is suspected to be “Fred Jones” for the purposes of making sure to protect his identity in case someone registers as him and can’t provide ID to prove that.
But folk just fixate on “Delete your profile so that zuckerberg can’t control you!” and ignore all that.
Because understanding things is hard.