System76 Takes a Stand Against Age Verification Laws

System76, the Linux hardware company, just published a public statement opposing age verification laws. It hit 498 points on Hacker News, which tells you the nerve it struck.

Their argument: mandatory age verification for internet access requires building identity verification infrastructure that will inevitably be abused, breached, or expanded far beyond its original purpose. The cure is worse than the disease.

I think they're right. And I think this debate matters a lot more for the AI era than most people realize.

The Argument for Age Verification

The argument is straightforward and emotionally compelling. Kids are accessing harmful content online. Parents can't keep up. Technology should help protect children. Requiring age verification is a reasonable safeguard.

This is the kind of argument that wins in legislatures because it's hard to argue against "protect the children" without sounding like you don't care about children.

Why System76 Is Pushing Back

System76's counter-argument is technical, not philosophical. They're not saying kids should access harmful content. They're saying the proposed mechanism creates more harm than it prevents.

Age verification at scale requires one of two things: a centralized identity database that every website checks against, or client-side identity credentials that users present to websites. Both options are terrible.

A centralized database is a single point of failure and a surveillance gold mine. It creates a complete record of every website every person visits. It will be breached. It's not a question of if but when.

Client-side credentials are better in theory but require a national digital