Disclaimer: These are my personal views and do not represent any organization or professional advice.

Mon, 09 Mar 2026 20:25:16 +0200

Age Verification: Open Source Cannot And Will Not Prevent It

The pervading opinion online seems to be that open source operating systems, Linux distributions and the Linux kernel itself will somehow circumvent or disobey legal requirements and external pressure to add age verification and proof of identity mechanisms.

There is a naive belief that distributions will "stick it to the man" and refuse to comply. In the short term this may be true. However, as more countries pass laws and as software and websites start using OS, distribution, desktop and browser level verification mechanisms, every distribution will be forced to fall in line. Most will likely cave in at the slightest application of pressure.

People incorrectly conflate Open source with freedom and the assumption is made that these projects will protect the user's privacy and put the user first. In reality, open source simply means the source is open. Nothing about it inherently prevents or precludes age verification or proof of identity mechanisms from being added.

In fact, open source becomes an argument for their inclusion as developers will simply tell downstream users to disable the mechanism, spoof it or in the case where it is not configurable, to patch it out.

The same goes for the Linux kernel. When hardware level verification comes to exist in products, companies will inevitably write kernel drivers and a common kernel subsystem/interface for the verification mechanism will be created. This will of course be configurable so no logical argument can be made for its existence.

The whole tech stack from top to bottom will eventually include what everyone is today laughing off as a joke. Funny enough, discussions have already begun across various Freedesktop, distribution and software issue trackers about creating it and as the majority of system-level development is done by corporations, the laws, whatever they may be, will be complied with.

The internet and personal computer usage as a whole is undergoing massive change and no one is in a position to defy it. It doesn't matter if you're anti-freedesktop (systemd, dbus, logind, udev, polkit, etc) or use an alternative software stack. As a citizen of the world, you will be affected.

Sure, in the short term as a user, you can protest, complain, disable, spoof and patch out these mechanisms but what happens when your bank, government, online stores, games and social media require you to verify your identity to access their services? You will fall in line, open source or otherwise.

—Dylan Araps