Revert "userdb: add birthDate field to JSON user records

49 pointsposted 13 hours ago
by smartmic

61 Comments

jlund-molfese

12 hours ago

It rubs me the wrong way that the person opening this PR says "we have decided not to implement OS-level age attestation" when they seem to have no prior involvement with systemd, and it's clearly not their call to make.

I wouldn't go so far as to call it astroturfing, but it's the same thing that's irksome about anyone claiming to speak on behalf of a group they actually have no involvement in. Feels like someone trying to score cheap points.

tomth

12 hours ago

Age verification through the OS could make parental control much easier. Just set the age of your child on a given system with your own account, and apps and websites can signal what the minimum age is, and then the OS can decide to block it or not. Could be very privacy friendly compared to the current online methods, like what Discord did.

Of course, I'm not in favour of actual verification of the age attribute. And I've heard the slippery slope arguments. But if I were a parent this would be great.

Problem with setting up parental controls currently is that it takes some effort and knowledge of these tools, not every parent has that. I mean, even people who do, are usually chaotic in the digital domain, like for example, (re-)using very bad passwords. So why expect people to do better with parental controls?

noosphr

12 hours ago

What age should I put for my daemon accounts?

idle_zealot

an hour ago

A reasonable implementation of this would make the age field optional, and only set it on interactive user accounts. An app that requests the age field and gets no response grants access. i.e. it's not set up to restrict access unless a user is explicitly set up as a child, in which case you're obligated to deny access to sensitive content.

slg

12 hours ago

Just yesterday I finally got tired of all the browser security warnings and decided to buy a domain name and set up SSL in my local network. I spent like 10 minutes flummoxed by why my reverse proxy couldn't get a new cert from Let's Encrypt until I looked in the logs to see that Let's Encrypt refused because the account my reverse proxy had been using since I set it up had the email address as "admin@hostname" because this was all for my own personal use and my local reverse proxy doesn't need an actual email address, it just needed some value for some entry in some database.

This is my long-winded way of saying, "Who cares?" Give it whatever age you want. When people object to these type of initiatives for political reasons, they should state the political argument for why they are bad. But rebelling against them for practical technical reasons always seems a little silly to me and can end up being counterproductive when it shifts the conversation away from the central issue.

Daviey

an hour ago

56 years and 81 days. If you get this reference I tip my hat.

sph

2 hours ago

useradd —-system flag shouldn’t ask for one

subscribed

9 hours ago

666 years. It's in the name :)

tomth

12 hours ago

Just 01-01-1970 :)

kej

12 hours ago

Sure, as something parents opt into and where the local OS is the place where age and content rating are compared it could be a useful parenting tool. As something that lets big social media companies shift responsibility onto everyone else and opens the door for more user tracking and targeted advertising, it's not doing me or my kids any favors.

Kim_Bruning

12 hours ago

We could set some sort of standard, eg using the <meta> tags on web pages to set an age bracket? (or better, include actual fine grained content warnings like PEGI provides?) , now the parents can control what the kid sees; or even the kids themselves at times, which is probably much closer to what is desirable.

furyofantares

11 hours ago

Legislating it in the OS takes power away from parental controls.

What you actually described, however, is websites and apps reporting information about their content to the OS. That would indeed give more power to parental controls. But what's being legislated is reporting age range to platforms.

tomth

11 hours ago

Doesn't make much of a difference, the former is just slightly more privacy friendly than the latter. Which is preferable of course, but no big difference compared to reporting an age bracket to platforms.

I also don't see how it takes anything away, you could still set stricter policies with those tools, or more mild ones if you set the age to 18.

furyofantares

11 hours ago

Sure, if it's not verified then parental controls could skip the feature entirely and still do whatever blocking they want as normal. This is a terrible argument that it doesn't take anything away from parental controls. It's literally pushing the decision away from parental controls onto the platforms and legislators, with an opinion that it should be based on specific buckets and content that have been legislated, and now parents and developers have to think about both the local blocking and remote blocking matrix.

Maybe I actually like the defaults for some age range blocking and want to make an exception. So, what, parental controls that would like to support this now must implement lying to each app or website individually?

skydhash

10 hours ago

If OS report age to platforms, the platform can target specific brackets like age[9-13] during christmas without the parent being the wiser. If the platform were required to provide age rating for their content, you (as the parent) may have a higher visibility on what they're pushing to a specific age group.

We have age rating for movies and games and the labels are very easy for parents to discern what to buy for their kids. It would be easier to set preferences on an accounts like steam to filter out games with nudity and brutality, than to let steam know that the user is a 14 year old child.

furyofantares

10 hours ago

My guess is this is why Meta spent billions lobbying for age verification legislation. They don't want parents making decisions about which content to block or allow for their kids. The form they want this to take is that they get some buckets to optimize engagement within.

badgersnake

12 hours ago

You probably shouldn’t have kids if you’re not prepared to look after them.

tomth

12 hours ago

I would agree when it comes to the most basic real-world skills, but even then you cannot prohibit it. When it comes to digital skills, no, you cannot expect everyone to understand it. Even when it comes to GUI tools. It's just not realistic.

exe34

12 hours ago

ban the selling or providing of general purpose computing to children. we can already do it with alcohol and cigarettes.

any parents caught providing such things to their children go on a register and have mandatory courses on parenting.

denkmoon

12 hours ago

Sounds like a great way to stunt development. Alcohol and cigarettes are unambiguously harmful to children. Computing is not so unambiguous, it has a lot of benefits. How many of us here would lead very different lives if we were treated that way?

exe34

3 hours ago

did you miss the word "general"?

you can provide gimped versions. micro controllers, school laptops that don't go places they shouldn't go, gimmicky age checks on anything they can use outside of adult supervision.

tomth

12 hours ago

This could be an option with children under the age of 12. Maybe only let them use a computer or gaming console in the living room, or something like that.

exe34

3 hours ago

that's exactly what I'm referring to, see my new post on this same sub thread.

Xylakant

12 hours ago

There's really a wide range between "not looking after kids" and "watching them every second." Unlike the physical world, digital items allow kids to transition from a totally safe space to an unsafe space within seconds.

For example, I can have my kid do whatever he wants in his room. I know what's in there and while he may have the occasional stupid idea, it's all fundamentally safe.

But even a tablet breaks that barrier. It's entirely safe for him to listen to music and stories and I want him to be able to do that unsupervised. But solid control over content on Spotify isn't a thing. The catalog contains things that I consider not appropriate for him. And they've lately been adding vidoes to the feed and while I know he tries hard to resist, they deliberately push videos further and further up. So we're back to "I can turn on the story for you and you can listen.", which is super stupid and could be much better if I had solid controls that I can trust.

Yes, I know I can talk to him about not watching the videos. How can an 8 year old compete with the combined effort of the Spotify team paid to make him watch videos? That's just not feasible.

apublicfrog

8 hours ago

If Spotify doesn't give you the controls you want... Don't use Spotify?

If my local park had a series of rotating knives and the council refused to do anything about it, I wouldn't let my kids go down there, supervised or not.

I agree parenting in the digital world is harder. You either learn how to do it to your standard or you don't allow the child to be part of that world if you are incapable or don't want to.

wasting_time

13 hours ago

If anything, the POSIX passwd specification should be updated to include age instead of introducing yet another dependency on systemd for something that affects the entire ecosystem.

rebolek

12 hours ago

No, do not poison passwd, let systemd choke on this.

jmclnx

12 hours ago

If you have to have age, then I agree /etc/passwd is the best place.

But that means a user's birth date will be public viewable, for some people that would be an issue. In my opinion. bdate should not be stored anywhere in Linux or any UNIX type system. Linux and the BSD should ignore these laws completely and we move on from this.

I still do no understand why the Linux Foundation is not chiming in. By keeping quiet all the LF is doing is reinforcing the perception that LF is fully owned by "Big Tech".

1718627440

12 hours ago

Also a user account is not necessarily a person. Most of those on my machine, certainly aren't.

subscribed

9 hours ago

GECOS fields are mandatory. You may just ignore them for your daemons.

tzs

11 hours ago

I don't know about the similar bills, but the California one only applies to the accounts of children.

noosphr

12 hours ago

Systemd has gone from a technical cancer for Linux systems to a political one.

If only every major distribution didn't break backwards compatibility to play with the cool kids.

Time to get back to programs that do one thing and do it well.

9dev

12 hours ago

Have fun debugging your brittle init scripts. All my systemd servers are working flawlessly, have done so for years, and will continue to do so.

The Linux ecosystem would be such a vastly more enjoyable place if you people would take all that energy you put into that petty fight over systemd into something productive.

noosphr

12 hours ago

I'm on OpenBSD.

Seeing Linux drama at this point is just entertainment.

The inferior technology stack pushed by big tech and defended by people who know better has been something else.

You'll take my software freedom from my cold dead hands.

1718627440

12 hours ago

I already considered trying a BSD, but the GNU parts are the things I have no problem with and confound myself. So BSD might not be the answer, when it's the non-GNU parts of my GNU/Linux install that annoy me.

noosphr

12 hours ago

The GNU parts of GNU/Linux were written the way they were so the FSF wouldn't get sued by AT&T. Come to the dark side and see what software can be when written for programmers instead of lawyers.

asveikau

11 hours ago

I like *BSD, I have like 4 machines in my home running Free or Open, but no, this is not why GNU has the personality it does.

I feel a lot of it is the way it is because in the pre-linux era, it was common to run GNU tools on commercial Unix, and so it absorbed many options, flags, syntaxes etc. from those various systems that it needed to be drop in replacements for. In the old school Unix wars of SysV vs BSD, it wound up with more of a SysV personality.

1718627440

11 hours ago

Any suggestions for which BSD I should try?

I currently like Debian, because of the stability and them removing unwanted features and integrating software with the OS. I mostly run a 10years+ laptop.

asveikau

7 hours ago

I got into OpenBSD first and I like it a lot.

These days FreeBSD is my go-to. I find it faster whenever I've done do comparisons. ZFS is really interesting.

OpenBSD is way more opinionated. Stuff might randomly break or get removed release to release. Sometimes that's justifiable. But it's possible to get tired of tracking all those changes.

noosphr

11 hours ago

I got into OpenBSD purely for the politics. It has the most unapologetic hacker ethos from the 90s. It is also the most toxic of the BSDs and the least likely to suffer from a hostile takeover.

k_roy

11 hours ago

Trying to act superior with your oft-broken OS.

“Inferior technology stack”. Didn’t I just read a few days ago about pf queues just now breaking 4Gbps? Look me up, I’ve written a lot about high speed networking.

How are those containers working out for you? Have you heard about these things called VMs? Which I moved on from like 8 years ago?

Not to mention ole Theo likes to alienate you folks at every possible opportunity, even when it doesn’t matter to the core philosophy of openbsd.

I mean, you do you, but at least demonstrate an ounce of intellectual integrity about it.

skydhash

11 hours ago

Not GP, but I'm running OpenBSD on a laptop, not in a datacenter. I have a small Alpine VM that I often forget about. I also have Debian 12 on a Mac Mini and while it's systemd, it could be OpenRC for all that I care about it.

I can see a case for systemd on a server, but have never seen the point on user-facing distro.

k_roy

10 hours ago

> I have a small Alpine VM that I often forget about

“vmm” is a toy compared to kvm/libvirt.

> I also have Debian 12 on a Mac Mini and while it's systemd, it could be OpenRC for all that I care about it.

I assume Intel? I haven’t paid attention to Linux on Macs in a long time. But I love Devuan for this reason.

k_roy

11 hours ago

I’m not even arguing against systemd or not.

I’m just stating that Linux being technologically inferior because of something-something corporate overlords is… silly

flykespice

11 hours ago

> The inferior technology stack

How so "inferior"? It's a proven techonology widely adopted by major linux distros that has been practical for everyone wanting to manage their system.

Give me your alternative of "superior" technology.

1718627440

12 hours ago

I think the init-replacement part of systemd is only a small part of the complaints.

9dev

12 hours ago

Yes. I know. And Poettering was mean in an online comment.

sprash

12 hours ago

The original rc-style sysvinit scripts of arch were neither brittle nor buggy. Everything could be configured with "rc.conf" and writing own services was dead simple. All of this was possible with many orders of magnitudes of less complexity.

Ferret7446

7 hours ago

They were absolutely brittle. sysvinit losing processes (it thinking a service is either dead or not incorrectly) is common

cluckindan

12 hours ago

Well said. systemd is against the UNIX philosophy and shouldn’t be the default.

exe34

12 hours ago

sadly this is a revert. I wish they would go all in, and encourage everyone to move off.

noosphr

12 hours ago

It is a rejection of a revert.

From the comment closing the revert by Poettering:

>It's an optional field in the userdb JSON object. It's not a policy engine, not an API for apps. We just define the field, so that it's standardized iff people want to store the date there, but it's entirely optional.

exe34

3 hours ago

oh right, that's great then, let the Titanic maintain course!

monksy

12 hours ago

Richard Stallman stikes again about his statements on free and open systems. (With those you can fork and remove nonsense)

3eb7988a1663

12 hours ago

Poster failed to add that camelCase was obviously a bad call.

crooked-v

12 hours ago

The "we have decided not to" in the initial post is weird. Was this somebody trying to, what, gaslight the maintainers into changing their mind?

pixelmelt

12 hours ago

It sounds weird because Claude wrote it

badgersnake

12 hours ago

It would be a surprise to everyone if systemdb did the right thing.

isatty

12 hours ago

Yep: they won’t.

bradleyy

12 hours ago

While disappointing, Poettering is essentially a "wrong decision machine" so I don't know what anyone would expect.

And the author of the PR came in a little hot, which probably didn't help.