3D Printing
3D printing community organizes against California law that would restrict sales to state-approved models to prevent printing gun parts
Cybersecurity
UK spy agency releases malware-blocking gadget for HDMI and DisplayPort cables
Cybersecurity
AI cloud company Vercel breached after employee grants AI tool unrestricted access to Google Workspace
Tech Industry
UK navy tracked three Russian submarines near undersea cables, damage would 'have serious consequences,' Putin warned
Cybersecurity
Iran claims US exploited networking equipment backdoors during strikes
Cryptocurrency
Tennessee bans crypto ATMs that have become 'payment portal of choice for scammers'
Cybersecurity
CanisterWorm, a persistent malware worm, uses time zone to identify and wipe Iranian machines for no apparent reason.
PC Gaming
Denuvo promises countermeasures against the recent hypervisor-based DRM bypasses
Tech Industry
Local political revolts threaten to derail US data center projects
Big Tech
Microsoft facing $2.8 billion UK lawsuit for overcharging 60,000 businesses using Microsoft Server on other clouds
Wi-Fi Routers
TP-Link seeks to secure conditional approval from FCC following router import ban
Servers
Maine governor vetoes bill that bans large new data centers
Wi-Fi Routers
Amazon Eero and Leo routers gain FCC Conditional Approval for US sales
Wi-Fi Routers
Here’s what the FCC ban on foreign-manufactured routers actually means for consumers
Get Tom's Hardware's best news and in-depth reviews, straight to your inbox.
Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsorsYou are now subscribed
Your newsletter sign-up was successful
Trending- 🔥TH Premium Deal
- Where to buy AMD's 9950X3D2
- Intel Xeon 600
- RAM Combo Deals
- DLSS 5
- Bartlett Lake
- RAM Shortage
- Software
- Security Software
- VPN
Utah first state to hold websites liable for users who mask their location with VPNs — law goes into effect, designed to prevent bypassing age checks
Senate Bill 73 holds websites liable for users who mask their location.
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
Utah's Online Age Verification Amendments, formally Senate Bill 73, take effect on May 6, making the state the first in the U.S. to explicitly target VPN use as part of age verification legislation.
Signed by Governor Spencer Cox on March 19, the controversial law establishes that a user is considered to be accessing a website from Utah if they are physically located there, regardless of whether they use a VPN or proxy to mask their IP address. It also prohibits covered websites from sharing instructions on how to use a VPN to bypass age checks.
NordVPN has called the law an "unresolvable compliance paradox" and a "liability trap," arguing that it holds websites responsible for identifying users whose tools are specifically designed to be unidentifiable. The EFF warned that the legal risk could push sites to either ban all known VPN IPs or mandate age verification for every visitor globally.
Article continues below You may like-
California introduces age verification law for all operating systems, including Linux and SteamOS — user age verified during OS account setup
-
GrapheneOS refuses to comply with new age verification laws for operating systems
-
Dutch authorities allegedly seize VPN server without a warrant
The law is also technically flawed, given that it assumes that a web provider can reliably detect VPN traffic and determine a user’s true physical location — they can’t. IP reputation databases such as MaxMind and IP2Proxy can flag traffic from known datacenter IP ranges, but commercial VPN providers rotate addresses constantly, and residential VPN endpoints are largely indistinguishable from standard home connections. Autonomous System Number analysis can catch traffic originating from datacenter networks, but can’t identify a personal WireGuard tunnel running on a cloud VPS, for example, which routes through the same infrastructure as ordinary web hosting.
The only detection method that reliably identifies VPN protocol signatures is deep packet inspection, which analyzes traffic at the network level, not system- or app-level. China's Great Firewall and Russia's TSPU system deploy DPI via ISPs, but a website operator can’t because it requires access to network infrastructure that sits between the user and the server, not on the server itself.
Meanwhile, setting up a personal WireGuard instance on any major cloud provider takes minutes, meaning the law will be more likely to negatively impact non-technical users who rely on commercial VPN services for legitimate privacy: journalists, people living under authoritarian regimes, political dissidents, and abuse survivors, among others.
Utah isn’t alone in trying to legislate the impossible into being. In the UK, the House of Lords — Parliament’s secondary chamber — voted 207-159 in January to ban VPN services for under 18s, with those amendments now due to be debated in the House of Commons. VPN use jumped by more than 1,400% on the first day of age verification enforcement in July last year. Meanwhile, France’s digital affairs minister, Anne Le Hénanff, has said that VPNs are “next on my list.” Wisconsin considered similar VPN provisions earlier this year but scrapped them due to heavy backlash.
To date, the only countries that have made progress in blocking VPN traffic with some success are authoritarian regimes with ISP-level surveillance.
Follow Tom's Hardware on Google News, or add us as a preferred source, to get our latest news, analysis, & reviews in your feeds.
Get Tom's Hardware's best news and in-depth reviews, straight to your inbox.
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. TOPICS Internet See all comments (12) Social Links NavigationContributorLuke James is a freelance writer and journalist. Although his background is in legal, he has a personal interest in all things tech, especially hardware and microelectronics, and anything regulatory.
VPN
Dutch authorities allegedly seize VPN server without a warrant
3D Printing
California sues websites hosting 3D printed gun files
3D Printing
Colorado law could force surveillance for 3D printers to prevent use for making gun parts
3D Printing
California bill would restrict 3D printer sales to state-approved models to prevent printing gun parts
Big Tech
US Supreme Court says ISPs aren’t liable for their users’ piracy
Cybersecurity
Hong Kong border agents and police can demand device passwords, including from US citizens, under penalty of imprisonment
VPN
Dutch authorities allegedly seize VPN server without a warrant
VPN
Florida sees 1,150% increase in VPN usage due to Pornhub block
VPN
Get Five Years of Ivacy VPN for $0.99 Per Month
VPN
Patriot Admits to Swapping Parts on VPN100 SSD, Performance Unaffected
VPN
NordVPN (Mostly) Blames Hosting Provider for Data Breach
VPN
State-Sponsored Chinese Group Hacks Enterprise VPN Servers
PC Building
TechTuber builds a PC big enough to live in
Maker and STEM
Nvidia accelerates end-of-life for some Jetson AI processors due to memory shortages
Software
Suspected YouTube interface bug spikes RAM usage above 7 gigabytes, users report lag, frozen tabs
Artificial Intelligence
Anthropic in early talks to buy DRAM-less AI inference chips from UK startup
Search Engines
Popular 90s search engine ‘Ask Jeeves’ finally bites the dust
Artificial Intelligence
Chinese court rules companies can't fire workers just because AI is cheaper
- Zaranthos Reply
- Arkitekt78 Reply
- das_stig Reply
- tntdyno Reply
- Bone61 Reply
- John musbach Reply
- MrN8 Reply
- TechieTwo Reply
-
Hooda Thunkett
This literally isn't about kids, it's overreach by certain states (and governments ) that want to control and spy on literally everything anyone does.
It's EXACTLY what totalitarian/authoritarian governments do.Bone61 gets it. "Give us full authority to jail all of those people you're afraid of so I can protect you," says every single tyrant ever, before getting the power to jail everyone that disagrees with them on anything. Reply - hwertz Reply
- View All 12 Comments