Mastodon says it doesn't 'have the means' to comply with age verification laws
Decentralized social network Mastodon says it can’t comply with Mississippi’s age verification law — the same law that saw rival Bluesky pull out of the state — because it doesn’t have the means to do so.The social non-profit explains that Mastodon doesn’t track its users, which makes it difficult to enforce such legislation. Nor does it want to use IP address-based blocks, as those would unfairly impact people who were traveling, it says.
Mastodon says it doesn't 'have the means' to comply with age verification laws | TechCrunch
Decentralized social network Mastodon says it cannot comply with age verification laws, like in Mississippi and elsewhere, and says it's up to individual server owners to decide.Sarah Perez (TechCrunch)
like this
UnderpantsWeevil
in reply to Lee Duna • • •like this
Rozaŭtuno, aramis87 e tiredofsametab like this.
hisao
in reply to UnderpantsWeevil • • •moseschrute
in reply to hisao • • •hisao
in reply to moseschrute • • •irelephant [he/him]
in reply to hisao • • •hisao
in reply to irelephant [he/him] • • •irelephant [he/him]
in reply to hisao • • •hisao
in reply to irelephant [he/him] • • •WhyJiffie
in reply to irelephant [he/him] • • •peoplebeproblems
in reply to hisao • • •Arguably though, at some point they'll just say "if we can't read your traffic, you can't use the Internet."
Which still isn't a problem, as I'm sure we can come up with a means to encrypt traffic to make it look entirely legitimate. But it's going to take a while.
einlander
in reply to peoplebeproblems • • •Mitch Effendi (ميتش أفندي)
in reply to einlander • • •Jason2357
in reply to einlander • • •Soggy
in reply to Jason2357 • • •Jason2357
in reply to Soggy • • •AnUnusualRelic
in reply to einlander • • •sexy_peach
in reply to AnUnusualRelic • • •cyborganism
in reply to sexy_peach • • •sexy_peach
in reply to cyborganism • • •chicken
in reply to sexy_peach • • •sexy_peach
in reply to chicken • • •So what do you propose? People who aren't able should set up nodes?
Also if wifi mesh is our last hope, oof
I say that as a freifunk participant
chicken
in reply to sexy_peach • • •Yeah. What I propose is getting more people involved and caring about freedom preserving technologies before it gets to that point. A tiny minority of somewhat more tech literate people are not going to be magically immune to authoritarian checkmate scenarios through technical solutions alone.
AnUnusualRelic
in reply to chicken • • •For the last 20+ years, I've been trying to get people to understand the point of free and open formats with pretty much zero success. For the most, they just don't care if somebody else owns all they data. Maybe if something really bad was to happen to them or a loved one as a result, they'd change their mind. Then I'd get to tell them "that's what I've been telling you for literally decades", but what would be the point?
Not technical people will never get it.
chicken
in reply to AnUnusualRelic • • •chicken
in reply to hisao • • •hisao
in reply to chicken • • •In my experience, if you have anything but "Network: OK" status (for example, "Network: Firewalled"), it's not working properly. If you're behind a VPN, you need to port-forward and properly configure a port in I2P config/settings. Another sign that it's misconfigured is 0 participating tunnels. This is how properly configured I2P network statistics looks like with high internet bandwidth:
::: spoiler spoiler

:::
chicken
in reply to hisao • • •WhyJiffie
in reply to chicken • • •ezyryder
in reply to hisao • • •apftwb
in reply to ezyryder • • •ezyryder
in reply to apftwb • • •sylvieslayer
in reply to hisao • • •IllNess
in reply to UnderpantsWeevil • • •If this really about protecting kids, they could've done opt in blocking at the ISP level. Just a few new fields with ISPs and they have products that can take care of this already.
This is really about tracking every little thing you do online.
like this
wagesj45 likes this.
Alexstarfire
in reply to IllNess • • •Mitch Effendi (ميتش أفندي)
in reply to UnderpantsWeevil • • •All my IT and InfoSec friends have called me alarmist for suggesting even the possibility of a GFW of America, but every day that passes, it looks more and more likely to happen, doesn't it?
Start practicing circumvention techniques now, y'all, while it's still legal and cheap to do so. Learn amateur radio. Learn Meshtastic. Learn all the different censorship-resistant VPN technology out there. Host your own websites or services for friends, family, or your community. It doesn't make it impossible, but it does make it hard, and fascism is nothing if not lazy.
Bane_Killgrind
in reply to Mitch Effendi (ميتش أفندي) • • •TrackinDaKraken
in reply to UnderpantsWeevil • • •I've just been assuming that was the goal all along.
Fifteen years ago, I said on Reddit, "The U.S. is trying to become like China before China can become like the U.S." Of course, I got buried.
StarryPhoenix97
in reply to TrackinDaKraken • • •I've been saying some combination of China and Russia personally. It's easier to parallel now after China took over Hong Kong. Those poor kids fought so hard.
People need to understand the fascists were watching those instances too and they learned from them. The last 15 years have been like a road map for how to handle dissent and protests in a way that keeps you in power.
hatsa122
in reply to UnderpantsWeevil • • •Its already happening in Spain. Everyday there is a football match from the spanish league (thats from Friday to Monday, both included) LaLiga orders the ISPs to shutdown everything that uses Cloudflare under the pretext that the shady websites that offers pirated football use their services, killing easily 1/3 of the national traffic for like 4-6h.
Why the ISPs comply?
- The biggest ISP of the country (Movistar) also happens to be the main one that showcase legal football.
How is this legal?
- The judge that authorised this and the president of LaLiga have been friends since forever.
Eventually this will go the European court where they will rule this was illegal and anti-constitutional all along and give a Spain a fine (the the citizens have to pay), and revoke this bullshit, but untill then we are screwed. Nothing will happens to LaLiga, the judge, or Movistar, fucking privileged and corrupted bastards.
CommanderCloon
in reply to hatsa122 • • •Tuxophil
in reply to hatsa122 • • •humanoidchaos
in reply to Tuxophil • • •Yeah, the soccer industry is full of some of the scummiest people on earth.
There's a lot of money to be made off of idiots who don't know any better for doing pretty much nothing.
biofaust
in reply to hatsa122 • • •Whoa whoa whoa! Callate chico!
You copied this from us Italians where we have the friend of Berlusconi providing the State with a censorship system (the Piracy Shield), allegedly exactly for the same reason since 2023.
Let's give the right Fascists what is theirs.
birdwing
in reply to hatsa122 • • •Gravitywell
in reply to Lee Duna • • •Last time i checked "states rights" didn't mean the right to impose your laws on people or businesses running out of other states.
If anyone from Mississippi wants to use our services I'm totally ready to ignore any and all laws that don't acknowledge to sovereignty of the net.
Steve
in reply to Gravitywell • • •Alexstarfire
in reply to Steve • • •gedaliyah
in reply to Lee Duna • • •Sprawl
in reply to gedaliyah • • •humanoidchaos
in reply to Sprawl • • •iglou
in reply to Sprawl • • •Gigasser
in reply to Sprawl • • •DarkSideOfTheMoon
in reply to gedaliyah • • •I think the instance owner would be responsible, but what if the instance is out of the state?
Unless the instance owner is on a visa, with a criminal record they could get him. But otherwise it’s hard to be enforced.
Maybe they could ask the app stores to ban apps in that states. Something like that
Also states could ask ISP blocking the main instances.
MudMan
in reply to Lee Duna • • •So in this whole embarrassing dick measuring contest Eugen was wrong and Mike Masnick was right, then. Turns out "real decentralization" or not, Masto/Fedi's structure doesn't do anything to bypass this nonsense.
This is not new. People constanty claim AP and Fedi have benefits or features just for being decentralized that they absolutely do not have, but I have to admit I'm kinda shocked that Eugen will do that exact thing without any more self-awareness than the average Masto user. He should know better.
Die4Ever
in reply to MudMan • • •Well even if mastodon.social complies, there are many many other instances to choose from, from all different countries
and even other similar platforms like Sharkey or Mbin that work with Mastodon
MudMan
in reply to Die4Ever • • •It doesn't matter, though. They all have the same choice to make: comply, shut down in that territory... or be fined an insane amount.
Eugen argued... well, pretty much what you are arguing now. The question Bluesky guy posed to him is what Mastodon.social would do and how would the presence of smaller instances prevent the issue, especially for instances without the resources to comply at all in the first place.
Eugen did not respond to that, but Mastodon.social just did, and the answer is... Mastodon.social will do the same thing as Bluesky and so will every other instance.
Because of course it's pretty obvious that having a decentralized platform doesn't help with stupid regulation, because stupid regulation applies to every instance. There's no reason decentralization would bypass a blanket requirement unless the legal requirement has carved an exception for smaller platforms (and even then there's a question of what counts as a platform in that scenario).
And the thing is... I'm okay with you not having though that through, but Eugen certainly must have. Right? I mean, they had a pretty well thought out answer for Techcrunch in 24 hours, they must have given it some thought. It's an unforced communication error.
Die4Ever
in reply to MudMan • • •Those are not the only choices... not everyone can/will be fined (example: Pirate Bay)
Why are we focusing on mastodon.social? I'm not even a fan of mastodon.social. I'm not really interested in their original discussion either. Honestly I kinda hope mastodon.social does comply or lock users out so that users spread out more to other instances instead. But they aren't even close to the majority of the Fediverse anyways.
There are plenty of instances hosted in different countries that won't care about this law, or you can self host.
You do know that Eugen developed the Mastodon software, right? He's not advocating for mastodon.social, he's advocating for Mastodon.
I'm just talking about the Fediverse. Sure ATProto can theoretically avoid this too but they don't have as many choices for instances, if any at all that are outside the US and federated with Bluesky? And it seems like self hosting is much harder.
MudMan
in reply to Die4Ever • • •We are focusing on mastodon.social because you jumped on a thread about mastodon.social confirming they won't be complying with Mississippi's age verification law, which in turn is a follow up to coverage of Bluesky doing the same thing. And also because Eugen Rochko jumped into that announcement to claim that Bluesky stepping away from that territory was an example of how Fedi's wider decentralization was an advantage, even though it turned out to no be an advantage at all.
Why would we be talking about anything else? That's literally the topic. You may be looking for a different thread. If anything, the uncontrolled impulse to talk about the ways in which AP is more decentralized than AT whether that's relevant to the conversation or not is the exact communication mistake Eugen made. Which makes doing that again even weirder.
To be clear, it doesn't matter where your instance is hosted. Mastodon.social is not hosted in Mississippi, either, it's hosted in Berlin. You're still taking on a TON of potential liability if you don't comply with their age verification or block that territory from access if the law stays in the books, just like you're risking a ton of liability if you breach GDPR even if your site isn't in the EU.
Die4Ever
in reply to MudMan • • •The title says Mastodon, not mastodon.social, and it appears that Eugen was talking about the Fediverse or Mastodon, not mastodon.social specifically (hence the word decentralization, the discussion was not centralized on mastodon.social).
I think people are mixing up the discussion between Mastodon vs mastodon.social too much. Eugen and his non-profit are the developers of Mastodon, so it makes sense for them to be talking it up.
That quote from the article does NOT say mastodon.social
There are other countries... watch and see how many instances just ignore the law, there will be many in the Fediverse.
I mean Pirate Bay is still running lol, so yeah I think decentralization works
MudMan
in reply to Die4Ever • • •No, the article is about Mastodon.social's nonprofit following up with an official statement after not responding when approached about the original report.
Eugen himself was just shitting on Bluesky, his entire comment was that Bluesky leaving showed "why true decentralization is important". Ironically, that whole pissing match ended up hinging about how much Eugen was focusing on Bluesky rather than their protocol, too. Turns out to be a popular deflection and it turns out to not change anything practical.
You are retroactively trying to reinterpret the subject matter here to save face and I'm too tired right this minute to entertain it. We don't have to have a conversation, man, no hard feelings, but if you insist on having one here I'd appreciate if it wasn't about something else entirely.
Die4Ever
in reply to MudMan • • •Are you talking about Mastodon gGmbH? joinmastodon.org/de/about
github.com/mastodon
The company behind Mastodon
joinmastodon.orgMudMan
in reply to Die4Ever • • •Yeah, Mastodon gGmbH also hosts mastodon.social, as far as I can tell. Or... I mean, at least that's the address and company info they show in mastodon.social's about page (not Mastodon, but mastodon.social, there are two separate About pages, both reference Mastodon's gGmbH's address).
The one thing I'll give you is that the statement they issued is talking about Mastodon software overall not having the technical tools to comply with the law in the first place and are explicitly refusing to comment on what mastodon.social will specifically do about it.
Which is irrelevant because, one presumes, if the answer was to build the tools to be able to comply with the age verification law they would have said that and put them into the Mastodon software, not just kept them exclusively for mastodon.social.
Korhaka
in reply to MudMan • • •MudMan
in reply to Korhaka • • •Yeah, well, remind me not to do business with you under any circumstances.
Self hosting is cool and all, but if you think decentralized networks and services are a get out of jail free to bypass regulations applying to their centralized counterparts you shouldn't be hosting decentralized networks and services.
For one thing if you have no understanding of legal compliance I don't want you to store any of my data at all.
Korhaka
in reply to MudMan • • •MudMan
in reply to Korhaka • • •If you run a social media platform that hosts American users they actually might.
Same as the bar for whether GDPR applies to you isn't whether your server is physically in the EU, it's whether you're processing data from EU users. Or, in fact, how you're supposed to get explicit permission from EU users to host their data anywhere outside the EU in the first place.
Now, I'm not a lawyer in Mississippi, so I'm not gonna give you legal advice, but I would definitely look into it if I'm setting up a public instance. The same way I'd be looking into what compliance things I need to do to host people's data, both due to GDPR and due to other privacy laws around the world. It's one thing to set up for friends and family, but if you're hosting data from outsiders you probably need to understand what you're doing.
I've also not looked into what happens if you are sharing data with a noncompliant server in a restricted territory (so someone is self hosting in Mississippi and then federating with your server elsewhere). I don't think the legislators who wrote this dumb rule know, either. They clearly haven't thought that far ahead. Common sense dictates that the outside server would be fine and it'd be the local server's problem to be compliant. I presume that's what Bluesky is counting on (i.e. that someone will set up a local instance and act as an ingest bridge for them without it having to be them). Then again, you have British legislators now claiming that all VPNs need to have age controls, so I am not taking common sense for granted when it comes to these things.
Korhaka
in reply to MudMan • • •MudMan
in reply to Korhaka • • •Yeah, see, I'm not a lawyer, but I am confident enough that "committing crimes in another country remotely is safe" is absolutely terrible legal advice. Don't do that. I am confident enough in my understanding of legal matters to issue that recommendation.
I mean, I've given Rochko crap here for not thinking things through when he incorrectly suggested more decentralization would make Masto behave differently than Bluesky in this issue. I don't for a second assume he meant "because fuck it, fine me if you can, USA" or I would be giving him way more crap and closing my Masto account just in case for good measure.
katy ✨
in reply to Lee Duna • • •finitebanjo
in reply to katy ✨ • • •Sprawl
in reply to finitebanjo • • •rapchee
in reply to finitebanjo • • •humanoidchaos
in reply to katy ✨ • • •monogram
in reply to katy ✨ • • •mrdown
in reply to monogram • • •monogram
in reply to mrdown • • •limer
in reply to Lee Duna • • •lambalicious
in reply to limer • • •Goodlucksil
in reply to lambalicious • • •Danitos
in reply to lambalicious • • •Your answer seems so out of touch with reality. It feels equivalent to suggesting a depressed person to simply don't be sad.
Moving out to a different state is not easy, either because of family, job, money, studies, life or any other situation.
humanoidchaos
in reply to Danitos • • •BarneyPiccolo
in reply to lambalicious • • •lambalicious
in reply to BarneyPiccolo • • •You want to put those "more enlightened people" at risk of being Gestapo'd or killed? We need them where they can actually do a net positive effect!
First clean up the shit in Texas (or any other fascist shithole) and make it livable, then live there.
Pat_Riot
in reply to Lee Duna • • •