• azuth@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    46
    ·
    2 days ago

    (b) If an application last updated with updates on or after January 1, 2026, was downloaded to a device before January 1, 2027, and the developer has not requested a signal with respect to the user of the device on which the application was downloaded, the developer shall request a signal from a covered application store with respect to that user before July 1, 2027.

    (f) “Developer” means a person that owns, maintains, or controls an application.

    1798.503. (a) A person that violates this title shall be subject to an injunction and liable for a civil penalty of not more than two thousand five hundred dollars ($2,500) per affected child for each negligent violation

    So a developer of a FOSS application that gets installed on a device on California via a 3rd party app store (maybe F-droid) must have implemented a query to the OS for this data. Even if the app does not actually provide any inappropriate content or actually any content.

    Nor does it matter if he is involved in the distribution of the app to California, a FOSS app redistributed via a 3rd party (F-droid maybe) would make the developer subject to this.

    • InFerNo@lemmy.ml
      link
      fedilink
      arrow-up
      21
      ·
      1 day ago

      As a developer who can’t control who distributes their software, I would simply change my license to exclude residents of California until this blows over, just to avoid the fine.

    • kadu@scribe.disroot.org
      link
      fedilink
      arrow-up
      8
      ·
      edit-2
      1 day ago

      So a developer of a FOSS application that gets installed on a device on California

      would make the developer subject to this.

      And they’re going to do what exactly to a developer that doesn’t live in California? I won’t add any kind of age verification to my bioinformatics projects and I’ll keep issuing releases. Are they going to nuke Brazil? Block GitHub in California?

      • azuth@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        22 hours ago

        Since it’s a civil case I doubt they could enforce payment on people outside the US. I am not sure if they can collect from people in the rest of the US but they probably can.

        I suppose not complying with a court order could result in criminal charges. Brazil will not extradite you but you will not be able to visit the US.

        • kadu@scribe.disroot.org
          link
          fedilink
          arrow-up
          1
          ·
          16 hours ago

          you will not be able to visit the US.

          That’s fantastic news, so I win and keep winning in that case. Great, no age verification on my software.

    • TheLazyNerd@europe.pub
      link
      fedilink
      arrow-up
      12
      ·
      1 day ago

      According to (f), the user is officially the developer of a FOSS application:

      • The user is the owner of the binary. (Although with copyright restrictions)
      • The user often maintains the application by installing updates. (In FOSS applications updates are rarely forced)
      • The user controls the application, as FOSS gives users control.

      In some cases (such as the Arch User Repository or the Gentoo distribution), the developer does not even give the user an application but merely source code. The user creates the application.

      • azuth@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        22 hours ago

        There is no mention of binaries in either f or c. Possession of binaries does not constitute ownership of an application, ownership of software means holding the copyrights.

        But even if we abuse this definition we simply make whoever installs the application liable. In a lot of cases that would be a parent. It could also be the user since the law doesn’t state they can’t be the same person.

          • azuth@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            9 hours ago

            That’s your opinion. It’s wrong. There even are applications that do not have binaries at all. There is no reason to believe the legislators would not want them covered by this law, it certainly does not say so.

            It also does not make a difference, owner of the copyright of a binary is the owner of the copyright of the source code. Compiling does not remove the copyright of the source code author as the binary is clearly derived from the source code. The person who compiles the source code does not even get any copyright since it’s not a creative process.

            You are not helping FOSS by trying to portray the law as FOSS friendly when it isn’t. Unfortunately the law rarely is FOSS friendly if not due to hostility due to indifference/ignorance on the part of the legislators.

            • TheLazyNerd@europe.pub
              link
              fedilink
              arrow-up
              1
              ·
              8 hours ago

              That’s your opinion. It’s wrong.

              Only facts can be right or wrong.

              Anyway, I know there are applications that don’t have binaries, but most do. I am not a lawyer, but if I’m not mistaken, source code is under U.S. law protected by the first amendment while binaries are not.

              Also, it doesn’t matter who owns the copyright. The laws specifies “a person that owns, maintains, or controls an application”.

              I am not saying that the law is FOSS friendly. I am saying that the law does not cover all FOSS software despite it being the clear intend of the lawmakers to cover all software. In such cases it will have to be decided by courts (I believe courts still have this function for state laws), whether it also applies to FOSS software.

              What I am saying is that the lawmakers clearly do not understand the topic they are trying to regulate.

              • azuth@sh.itjust.works
                link
                fedilink
                English
                arrow-up
                1
                ·
                6 hours ago

                Only facts can be right or wrong.

                Opinions (such as that the Earth is flat) can obviously be wrong. Facts cannot. Look up the definition of fact.

                Anyway, I know there are applications that don’t have binaries, but most do. I am not a lawyer, but if I’m not mistaken, source code is under U.S. law protected by the first amendment while binaries are not.

                You admit applications are not necessarily binary, the law does not mention binary or source code or anything like that where it defines applications. You are just grasping at straws to justify an indefensible position, that whoever possesses a binary is it’s owner.

                Which is obviously untrue. Ownership of software means ownership of it’s copyright. It’s been made very clear in the last decades that you (legally) don’t even own software that you pay for. You own a license to use the software.

                You cannot argue, in good faith at least, that this is what is intended by the law. First it would be spelled out and secondly it would mean that for all applications, not just FOSS ones, the people paying the fines would be the users, $2500 for each app they install that’s in violation. Which is obviously not what’s intended.

                I am not saying that the law is FOSS friendly. I am saying that the law does not cover all FOSS software despite it being the clear intend of the lawmakers to cover all software. In such cases it will have to be decided by courts (I believe courts still have this function for state laws), whether it also applies to FOSS software.

                Unfortunately it does since it does not discriminate. If anybody that can be effectively prosecuted (i.e. US/California resident) takes your advice and takes it to court, he is getting fucked.

                What I am saying is that the lawmakers clearly do not understand the topic they are trying to regulate.

                No shit. That does not mean FOSS software is not affected. You also do not understand the topic or choose to not understand it because it’s spells trouble for FOSS. But pretending everything is ok does not make it so. FOSS projects either need to implement it or make sure they isolate themselves from US/California jurisdiction.

          • azuth@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            10 hours ago

            Copyleft is not a legal term. It’s a term for (foss) licenses that require users to keep the same terms when redistributing software. Such licenses do not actually transfer copyright. I fail to see how this would exempt foss developers.

      • InFerNo@lemmy.ml
        link
        fedilink
        arrow-up
        3
        ·
        1 day ago

        AUR works with binaries too, it creates an arch compatible package but that can be from source or massaging an existing package designed for a different distro (like .deb).