this post was submitted on 13 Sep 2023
135 points (95.3% liked)

Lemmy.World Announcements

30304 readers
5 users here now

This Community is intended for posts about the Lemmy.world server by the admins.

Follow us for server news 🐘

Outages πŸ”₯

https://status.lemmy.world/

For support with issues at Lemmy.world, go to the Lemmy.world Support community.

Support e-mail

Any support requests are best sent to info@lemmy.world e-mail.

Report contact

Donations πŸ’—

If you would like to make a donation to support the cost of running this platform, please do so at the following donation URLs.

If you can, please use / switch to Ko-Fi, it has the lowest fees for us

Ko-Fi (Donate)

Bunq (Donate)

Open Collective backers and sponsors

Patreon

Join the team

founded 2 years ago
MODERATORS
 

Lately we have been dealing with a few abusive members from Feddit.nl and we were unable to get in touch with the instance administrator.

Part of the problem is the instance's open registrations which do not require you to enter an e-mail address during signup. This in combination with an inactive admin is a recipe for abuse.

We hope this is only temporary but we have to do this to protect our users.

Edit: we use fediseer, have a look https://gui.fediseer.com/instances/detail/lemmy.world

Edit 2: We got in touch with the Feddit.nl admin. Email requirements were added to the sign-up process and we're setting up a communication channel. So that means we are federating with Feddit.nl again!

top 26 comments
sorted by: hot top controversial new old
[–] tedvdb 61 points 2 years ago* (last edited 2 years ago) (1 children)

Good to be back! πŸ˜… πŸ₯³

[–] antik 22 points 2 years ago (1 children)

It's funny that this post on feddit.nl has 20 upvotes. It doesn't catch up once the federation starts again. I thought it would tbh

[–] Quacksalber@sh.itjust.works 1 points 2 years ago (1 children)

Nope, in order to not overload lemmy servers, the lemmy software does not federate pre-(re)federation content. That is one reason why I find it a bit ridiculous to wield the biggest stick you have, defederation, so freely.

[–] antik 2 points 2 years ago* (last edited 2 years ago)

I think in the case of an instance being spammed with csa material we are allowed to use all the sticks at our disposal - and in this case it was actually the only stick we had. And once we got in touch with TedVDB we refederated.

He's now also in the chat room where most Lemmy instance admins hang out. I'd say that's a positive for everyone in the end.

[–] Blaze@discuss.tchncs.de 4 points 2 years ago* (last edited 2 years ago) (1 children)

Thanks for the transparency, sad to hear as always to see a country specific instance to go unmanaged

Edit: I guess a few people will miss !trendingcommunities@feddit.nl from @freamon@endlesstalk.org

[–] freamon@endlesstalk.org 3 points 2 years ago (1 children)

New home: !trendingcommunities@endlesstalk.org

Will probably post to both for a while, until we have some kind of resolution.

[–] PriorProject@lemmy.world 4 points 2 years ago (1 children)

With the refrigeration, which do you consider the canonical community to follow now? You mod both, right? Are you going to keep the bit posting to both?

[–] freamon@endlesstalk.org 5 points 2 years ago

Love what re-federation got auto-corrected to.

The canonical community is the one at feddit.nl, since it has all the history and I don't really think it's .nl's fault that someone used it to attack .world.

The bot's due to make one more post at endlesstalk (to announce that the problem is over) and then I'll think about what to do with the community (probably delete it)

[–] BitingChaos@lemmy.world 1 points 2 years ago (4 children)

Part of the problem is the instance's open registrations which do not require you to enter an e-mail address during signup.

How is this even a thing? Why would the Lemmy software even allow operation like this?

[–] ccunning@lemmy.world 1 points 2 years ago

Last I checked, even Reddit allows signups without an email address…

[–] Asudox@lemmy.world 1 points 2 years ago

Lemmy is open source. Everyone can modify it to fit their needs.

[–] SpliceVW@lemmy.world 1 points 2 years ago (3 children)

Let's be real - an email address doesn't really stop much of anything. Anyone can really easily spin up new email addresses freely.

[–] CoderKat@lemm.ee 1 points 2 years ago (1 children)

Sadly yeah. We absolutely should use email signup because it filters our the absolute lowest effort bots, but it does nothing against higher quality bots or humans. Not only can you easily spin up new emails on the fly, but many emails allow ways to make the email appear unique (eg, Gmail ignores dots and anything after the + sign), there's plenty of temporary email services with a variety of domains, and if you own a domain, you can trivially create unlimited emails until they catch on and ban the entire domain.

Inactive admins are also an issue, but if malicious users are determined enough, it doesn't matter that much how active an admin is. An active admin can mostly help by making IP banning an option (imperfect, but will work on many humans) and can temporarily turn on approvals to make it easier to weed out low hanging fruit. Nothing will work against someone determined enough, but could at least reduce how many instances they can turn to.

[–] itsdavetho@lemmy.world 1 points 2 years ago (1 children)

Personally I don't think anything will stop anyone determined to bring this type of harm to the community, there's an endless list of workarounds. These communities need a larger network of moderators across timezones

[–] sab@lemmy.world 1 points 2 years ago

Nope, but it will stop the less determined ones.

With no email verification, you can pretty much create dozens of fake accounts per second - as fast as the API can handle.

[–] antik@lemmy.world 1 points 2 years ago (1 children)

Sure. But we changed our sign-up policy recently. Users are now informed during sign-up that temporary email accounts are banned.

We have another announcement regarding this soon.

[–] ttmrichter@lemmy.world 1 points 2 years ago

How do you define a "temporary email account"?

I'm reminded of old games that insisted you couldn't sign up with an email provider and had to use an ISP email ... which kinda screwed over the literally BILLIONS of people whose ISPs don't give email addresses...

[–] Corkyskog@sh.itjust.works 0 points 2 years ago (1 children)

Yeah I still don't have an email associated with my reddit account. Which shocks people... although I haven't logged on in months, so maybe it's now required for legacy accounts

[–] MakeItCount@lemmy.world 1 points 2 years ago

it's not required globally but some subs require it to be able to post

So far only /r/formula1 does for me

[–] cley_faye@lemmy.world 1 points 2 years ago

Because anyone running it can decide to do it this way. That's how code works; you can edit it. Even if the option wasn't there, if any instance admin wants that to happen it's easy to do.

[–] PrinceHabib72@lemmy.world 1 points 2 years ago

Stuff like this is going to kill the momentum of the fediverse. I'm a reddit refugee, my main account started on vlemmy.net (because it had a policy to not defederate from anything), and when that went poof, I moved to feddit.nl (because it has a policy to not defederate from anything). I believe it is MY prerogative, and no one else's, to decide what I am or am not allowed to see. I curate my own feed by blocking or subscribing to instances I don't or do want to see, respectively.

Regardless of any of this, however, I am now unable to view any content on .world without this account, due to actions entirely outside of my control. Since hosting my own instance is out of the question for me, my options are: find a third instance with a no-defederation policy that hasn't been defederated itself from major instances, have multiple accounts and browse each instance individually, stop browsing altogether, or go back to reddit. As distasteful as the last option is, it's tempting. I know the impulse will be to tell me "good riddance", but I am posting this because I know there are others like me that are tired of instance hopping and trying to find somewhere that doesn't try to police our browsing and also isn't defederated from major instances.

For the record, I don't want a no-defederation instance because I want to browse Nazi or pedo instances. I want a no-defederation instance because I have a principled objection to others telling me what I can or cannot view.

[–] ekZepp@lemmy.world 1 points 2 years ago
[–] nero@lemmy.world 0 points 2 years ago (1 children)

Sucks to see my home countries instance isn’t being moderated properly

[–] antik@lemmy.world 0 points 2 years ago* (last edited 2 years ago) (1 children)

Vinden wij ook hoor

Edit: we think so too

Better learn dutch now for when it becomes our instance's primary language once @ruud, @quinten and I pushed out the other admins.

[–] chrundle@lemmy.world 0 points 2 years ago (1 children)

Can't wait for GEKOLONISEERD

[–] antik@lemmy.world 0 points 2 years ago

GEKOLONISEERD.world