alt Hacker NewsI once heard someone suggest that this should be on the OS level and I'm slowly coming around to the idea. There should be some kind of OS level flag that can easily broadcast to products that a child is using the device. No ID verification required, the parent is responsible for setting it, and all downstream applications are regulated to respect it, If applicable to the product. This removes the incredibly invasive ID verification, and places responsibility on the people responsible for the minor. Companies like meta then can be sued not for failing to detect children (this is, evidently, not working on any platform trying to enforce this currently), but instead can be judged in a black and white manner (i.e. is the child version of meta too predatory to children?)
Replies
Building this functionality into an operating system is an extremely slippery slope to even further centralized corporate and government authoritarian control of people doing what they want with the personal computing devices that they own and possess.
I firmly believe that tech companies being responsible for parenting our children is a deeply misguided response to a failing society and overworked parenting generations.
I benefitted greatly from early access to computers and the full scale of their capabilities. It was a constant issue in my family limiting screen time, and who knows what the exact rules should be for everyone. For me it was a dynamic ruleset I was actively involved in the development of.
I could make compelling arguments to my Mom, that will not be the case with Meta, or Apple, or Anthropic.
Accepting "OS level" age validation is surrendering to a system meant to protect the industry, not our kids future. And while there are serious conversations we should be having about how to control technology use, it should be about parental controls and sane defaults, not age validations and legally restricted access by providers.
I hate how even the most progressive-minded people on most fronts are falling into this trap because big tech has failed them and they are angry at it all.
Apple verified me by the age of my account. Claude asked to use the age verification when I opened it on my iPad. Haven’t been asked for any other kind of age verification by Anthropic.
Personally, I'm not in love with the idea that something harmful to children is totally okay for adults. If social media is that corrosive to young people, maybe we should take a look at that and make it less corrosive for everyone.
Some kind of "child lock" on the device makes more sense to me; a parent or whatever can child lock the device before handing it off, no need to collect images of the child in question and store them in some big pile at a private company.
Doesn't this break if the child uses a VPN, or some other software to spoof? For this to really work Windows would have to lock down all HTTP, and really all networking, only allow approved software/browsers, etc. Is there a reason this wouldn't be the case?
The problem is that it would be a client side identity verification mechanism and won't work for websites.
As an example this would means that if this exists in iOS, everytime a safari loads a webpage it has to send this additional verification identifier as a header or a query param to the web server that serves the request and based on that the web server deny the request if the identifier is present (that means a minor is trying to access the web page).
But this client side identifier can easily be bypassed via a proxy that strips the identifier from the request because not matter it's configured in the OS of the device, ultimately request would just goes out as HTTP and that can be manipulated. That's why it has to be a server side verification of the age/identification.
California passed a law AB-1043 that requires every OS developer to add age verification on the OS level.
https://www.eff.org/deeplinks/2026/03/ab-1043s-internet-age-...
> There should be some kind of OS level flag that can easily broadcast to products that a child is using the device.
Anything like that should be configured by the parents. Your child is your responsibility. I shouldn't have to take a picture of my passport just because someone is a neglectful parent.
I want to go back to having an IQ test to use the Internet.
I think the appeal here for parents is it’s a single point to configure. It’s not perfect, but perhaps better to configure one device than every account individually. I’m game for it.
That's very reasonable but doesn't help build the surveillance society sadly and therefore will not be legislated
Was that someone Mark Zuckerberg?
This is almost right, but it shouldn’t be “is a child using the device?” It should be “is this a child-locked device?”
There should be a children’s Internet, just like there are children’s libraries, and child-locked devices should give access to it. Adults should be able to use the children’s Internet to see what’s there and children should be able to use the adult Internet when supervised by parents and teachers.
Technically, the only thing cooperating websites need is an http header indicating that the client is a child-locked device. Websites can disallow creating accounts or logging in from child-locked devices when they’re only appropriate for adults. There can be laws prohibiting advertising on the children’s Internet, etc, and legit websites will have to follow them. At no point does a website need to know a child’s age or anything else about them. Vendors selling devices are responsible for not selling unrestricted devices to children, but that’s easier than making every website do it.
Since the Internet is still a dangerous place, for non-cooperating websites, child-locked devices do still need the usual whitelists and/or blacklists.