California’s Digital Age Assurance Act (AB 1043), approved by Governor Newsom in October 2025, sets out a statewide age assurance framework for operating systems and app stores. It requires o…
And this one doesn’t appear to be anything more than an age tied to the user account of your OS. Simple to move around.
I think the concept is that when a parent sets up a device for their child, they’ll enter the child’s age during the setup process, not giving the child an opportunity to lie about it.
But, yeah, there will be numerous ways around it, for sure.
Factory reset the device and redo the setup with a different age.
Run a VM inside the device and set up the VM with a different age so they can access restricted content from within the VM.
High possibility of nefarious online services/apps being developed that take the age string sent by your OS/browser to websites, intercept it, and change it before sending it out. (And probably track you while doing so.)
Simply access smaller and/or international websites that don’t ask your OS/browser for your age.
Find adult content on websites/services (like Roblox) that are supposedly child-friendly, but have poor content moderation and a lot of adult content.
… just to name a few obvious ones.
Also … I really wonder if developers will think to increase the user’s age over time or not.
Like… If you enter your age as 16, then use the device for 5 years, will it update your age to 18 after two years and therefore change it to an ‘over 18’ age string?
And what about just creating another user account under the same OS? I guess the parents could password lock access to other accounts and keep a child account from being able to create a new one, but I’ve met parents and their lack of basic technical understanding.
I think the concept is that when a parent sets up a device for their child, they’ll enter the child’s age during the setup process, not giving the child an opportunity to lie about it.
But, yeah, there will be numerous ways around it, for sure.
Factory reset the device and redo the setup with a different age.
Run a VM inside the device and set up the VM with a different age so they can access restricted content from within the VM.
High possibility of nefarious online services/apps being developed that take the age string sent by your OS/browser to websites, intercept it, and change it before sending it out. (And probably track you while doing so.)
Simply access smaller and/or international websites that don’t ask your OS/browser for your age.
Find adult content on websites/services (like Roblox) that are supposedly child-friendly, but have poor content moderation and a lot of adult content.
… just to name a few obvious ones.
Also … I really wonder if developers will think to increase the user’s age over time or not.
Like… If you enter your age as 16, then use the device for 5 years, will it update your age to 18 after two years and therefore change it to an ‘over 18’ age string?
And what about just creating another user account under the same OS? I guess the parents could password lock access to other accounts and keep a child account from being able to create a new one, but I’ve met parents and their lack of basic technical understanding.