Video summary

Windows Is Getting An ID Check (Linux Isn't)

Main summary

Key takeaways

News and Commentary

Overview

The video discusses California’s “Digital Age Assurance Act” (signed in October, effective January 1), which would require Windows PCs to perform age checks during setup, then make that age information available to apps.

The presenter argues this is a major privacy shift: it moves an “age gate” question from individual websites/services (which each collect ID differently) into the operating system layer, potentially centralizing and propagating sensitive age/identity-linked data.

Core claims about what the law changes (and why it matters)

  • Windows setup will ask for a birthday/age bracket (e.g., 13–15, 16–17, 18+), and the OS will provide that result to apps.
  • Apps and services previously handled age verification separately, creating many “drawers” (multiple vendors storing sensitive ID data, with varying security quality).

  • The presenter acknowledges the law’s motivation: reducing scattered ID copies across services could improve security. However, they argue it creates a new problem: the OS (and therefore the account ecosystem tied to it) becomes the “front desk” that knows user entry/eligibility decisions.

  • A key argument is that, on Windows, the age signal can be tied to identity because Windows setup requires Microsoft account sign-in and recent builds reduce local-account bypasses. The presenter does not claim identity linkage is explicitly mandated, but argues the “plumbing” and default architecture make it likely.

Linux exemption: what happened and the presenter’s explanation

  • The video highlights that Linux distributions were exempted from the same requirement.
  • The presenter says the exemption passed the California Senate unanimously (as described) and is on the governor’s desk.
  • Rather than attributing this to lawmakers “liking Linux,” the presenter’s analysis is that the law requires someone responsible to comply, and open-source licensing/multi-fork distribution makes enforcement harder:
    • Open-source OS providers can be modified and redistributed.
    • There isn’t one single company with full control.
    • As a result, there’s no clear entity to sue/hold accountable for forcing the age-check behavior into every variant of the software.

Supporting example: age checks as “workarounds magnet”

The presenter references rollouts in the UK and Australia:

  • When age checks are enforced, there is an immediate spike in VPN adoption.
  • There are appeals and political pushback, including:
    • A large petition in the UK
    • Discussions of fines
  • In Australia, platforms are expected to detect VPN use, but the presenter claims proposals evolve toward requiring age checks in whatever layer users route around—potentially creating deeper enforcement loops.

Takeaway: Moving age checks to a centralized layer (like an OS) makes workarounds harder. VPNs mainly help users avoid being asked in the first place; OS-level checks can be harder to bypass the same way.

“Not a magic Linux escape hatch”

The presenter explicitly disputes a misconception: Linux won’t automatically let users avoid age verification everywhere.

Instead, the narrow but important difference is:

  • With Windows, the OS can provide the age signal to apps/services.
  • With Linux, the OS isn’t legally compelled to provide that age verification data in the same way—so the “OS-as-holder-and-distributor” part is removed.

Tradeoff / expansion of scope

Another major point (as described by the presenter) is that the same California law also expands age verification responsibilities to:

  • Browser providers
  • Website operators

The EFF characterizes this as “net expansion”—increasing the number of places where age-verification frameworks apply, rather than simply reducing the issue to a narrower OS-only requirement.

What to watch next (uncertainty)

The presenter notes the exemption and law status may depend on the governor’s decision (with Newsom referenced as not yet signing the exemption at the time of recording).

If the exemption does not hold, the presenter warns the requirement could apply broadly across distributions/DSOs they mention.

Conclusion / main message

The video’s central warning is that California is effectively creating two legal categories of computing:

  • Windows users may face an OS-level age-check workflow embedded into an account ecosystem.
  • Linux users may avoid that specific OS-level mechanism due to open-source enforceability issues.

The presenter argues this shifts the privacy risk from many individual services “holding copies” to potentially one system/platform that knows and distributes the age eligibility signal.

Presenters or contributors

  • The video narrator/presenter (no name provided in the subtitles)
  • Buffy Wixs (California assembly member mentioned as authoring and amending AB1856)
  • Gavin Newsom (governor referenced)
  • ProtonVPN (referenced via reported signup spike)
  • Jimmy Wales (referenced commenting on VPN-related proposals; Wikipedia founder)
  • Microsoft / Discord / Steam (organizations referenced; not presenters)

Original video