Lately we have been dealing with a few abusive members from Feddit.nl and we were unable to get in touch with the instance administrator.
Part of the problem is the instance’s open registrations which do not require you to enter an e-mail address during signup. This in combination with an inactive admin is a recipe for abuse.
We hope this is only temporary but we have to do this to protect our users.
Edit: we use fediseer, have a look https://gui.fediseer.com/instances/detail/lemmy.world
Edit 2: We got in touch with the Feddit.nl admin. Email requirements were added to the sign-up process and we’re setting up a communication channel. So that means we are federating with Feddit.nl again!
I love it!
99.999999% of the time I see a giant image I block the user because they’re annoying…
That shit is just too perfect tho
deleted by creator
That has got to be the best meme with Daleks I’ve seen in quite a long time.
Kudos!
Fantastic!
And so a lemmy legend was born
Thanks for the transparency, sad to hear as always to see a country specific instance to go unmanaged
Edit: I guess a few people will miss !trendingcommunities@feddit.nl from @freamon@endlesstalk.org
You can still go to the instance and read it, subscribe to it from a non-defederated instance, or even create an account there directly.
Let’s also hope it’s only temporary.
That assumes that it’s not abandoned like rammy.site was, if you don’t know rammy.site was a general purpose Lemmy instance a while back which was abandoned by its admin and then some right-wing grifters decided to hijack it and use it to spread hatred. Similarly to this situation they also got defederated, though much more widely then in this case.
The biggest problem is that because they were abandoned eventually the server crashed or the VPS got discontinued or something and now it’s gone. If you go to the URL now you get SSL errors and for a while it was showing up as
410 gone. So with Feddit.nl even though you can go and view the contents on it right now if it’s abandoned it will likely meet a very similar fate in the near future. Meaning that the community is on it are doomed and will either die or have to migrate elsewhere.
Sucks to see my home countries instance isn’t being moderated properly
Well .world is also managed partly from NL :-)
Fair point, i’ll be patiently waiting for the dutch takeover ;)
You, still waiting for it:
Ik had geen idee.
Don’t tell our plans…
Mama, dieser Mann sprich aber ein lustiges deutsch :)
Ahh the dialect of East-Holland is almost a different language
Opflikkern waus.
- jk ly
Dat is altijd nog ‘koekwaus’ voor jou. 😋
Can’t wait for GEKOLONISEERD
GEKOLONISEERD.world
Please use “I N G E P O L D E R D” as its not quite as racist as “GEKOLONISEERD”.
For the people not in the know, the Dutch like to meme about the warcrimes in Indonesia and Africa and when they speak dutch in a comment section they make joking gestures to the time of colonization, like its a good thing, or something to take lightly. Quite frankly colonizing isnt funny in any shape or form and I, another dutch person feel ashamed and sorry for whoever took offense to the comment above. Not of all of us are like this.
Our history books mostly skip over the warcrimes done in indonesia and how bad the slave trade is, but its luckily improving.
For the guy above me;
Warcrimes of the Dutch in Indonesia:
https://youtu.be/8T3JZljI7A4?si=XvLOhL-m2VHkxByN
How the dutch turned south africa into a racist country:
https://youtu.be/Mi93LjuQbMM?si=1La19-xJ-JsBXLpZ
Over half a million people got ripped away from their families and traded by the Dutch in the 1800s;
https://www.statista.com/chart/22057/countries-most-active-trans-atlantic-slave-trade/
This is why I think it shouldnt be taken lightly. Its like a german joking about the time their ancestors murdered millions of jews and bringing it up whenever they see another German in a comment thread.
Its like a german joking about the time their ancestors murdered millions of jews and bringing it up whenever they see another German in a comment thread.
Das tun wir tatsächlich nicht aber der Grund warum dein Fahrrad weg ist ist dass deine Mutter mir das aus Dankbarkeit geschenkt hat nachdem ich sie gefickt hab.
I remembered just enough of my school German to understand some of that but not enough to not wonder about someone’s mom taking their bicycle for “thank-work”, apparently 🤔
Translate says " actually don’t but the reason your bike is gone is because your mother gave it to me out of gratitude after I fucked her."
Je kan het hele ijsselmeer inpolderen met die muur tekst die je hebt geschreven
Go for it. Dutch seems easy. I learned the chorus to Super Max! in like thirty minutes.
I made an account on feddit.nl to spread the load for Lemmy.world back in June. Good thing I keep switching between them both anyway.
Hopefully this is solved soon!
Maybe it’s just a coincidence, but it seems like everytime .world defeds from a problematic instance, it’s almost immediately smashed with DDOS attacks.
The beauty of lemmy as I see it though IS the federation, if .world is down no worries, I’ll just browse on sopuli.xyz or any of the multitude of other instances :) we are like a sexy hydra of positivity.
You guys are very transparent and that’s great. Thanks for keeping us in the loop.
It’s one of great things about this instance… having a look into whether or not services are in alignment with my values goes a long way in supporting such an endeavor.
They’ve already replied with the reasons, but - for future reference - if you want to see specifics of things like this, a censure is often posted to https://fediseer.com. .world’s censure of .nl is here
Updated the original post. FYI You can click on the fediseer endorsement emblem that is in the Lemmy World sidebar. That will take you here: https://gui.fediseer.com/instances/detail/lemmy.world
Thanks for all you do!
Somewhat related: any word on re-enabling image uploads? I understand completely why you had to do it, just wondering if there’s a roadmap?
Image uploads had an issue a while ago but should be working. Which client are you using?
Oh, sorry I haven’t tried in a while. Looks like it’s back up! Thanks!
Nice self portrait btw
Hiya! Question, is there a way we can see this sort of information ourselves as well? Namely, reports and admin activity logs.
What’s to stop an instance, then a collection of instances and so on from claiming others aren’t being actively moderated in order to censor?
Not making any accusations obviously, just a thought I had while reading.
I mean, it’s easy to go over to feddit.nl and see they only have one admin who has not been active in almost two weeks.
Full transparancy: the abuse we were dealing with from that instance was vote manipulation and worse, csam. Especially in the case of csam we can not wait for days for a reaction.
Users. That’s why it is mentioned there is no email required during sign-up. They create an account in seconds, make a post and then delete their account.
You guys are doing good work!
Thanks for doing this. I’ve not had to see any of it because you guys are on top of dealing with it. (Although I also don’t sort posts by new, so I probably wouldn’t see those posts before they got removed anyway.)
Were they the source of the csam attack posts the other week when we removed picture uploads temporarily?
No those were from our own instance and is the reason we closed open registrations. We are working on a different solution more on that later.
The modlog for the entire instance is available in a link at the bottom and the sidebar on the main page. Everything should be there.
Thank you!
Well that’s disappointing, but glad the lemmy.world team are making sure they are on top of it and keeping transparency with all that you do. Thank you.
Part of the problem is the instance’s open registrations which do not require you to enter an e-mail address during signup.
How is this even a thing? Why would the Lemmy software even allow operation like this?
Back when I signed up for reddit, you didn’t need an email and they warned you if you lost your password you’d be locked out of your account until you regained it and they would not offer support to reset it
I liked that. I don’t want to have to submit my email for everything just to interact
One of the reasons I have my own email domain and random email addresses for certain services.
Catch all? I love it so damn much since I got it. Bitwarden added it on the fly and now I got disposable email addresses for anything I can think of, it’s so, so perfect!
Hi, is this only for the web interface or something? Is this available for the android interface?
You can access it from the android Bitwarden app. Go to the password generator. Where it says “What would you like to generate?”, tap Password and select username in the popup, then click OK. After that, it gives you an option to use a different emails when it generates the email address to use for the account you’re setting up.
And then there’s those of us who don’t use email for all practical purposes. I haven’t sent an email in anger for a donkey’s age; the only reason I have an email at all is because of all the people in North America who think email is the wave of the future.
Let’s be real - an email address doesn’t really stop much of anything. Anyone can really easily spin up new email addresses freely.
Sadly yeah. We absolutely should use email signup because it filters our the absolute lowest effort bots, but it does nothing against higher quality bots or humans. Not only can you easily spin up new emails on the fly, but many emails allow ways to make the email appear unique (eg, Gmail ignores dots and anything after the + sign), there’s plenty of temporary email services with a variety of domains, and if you own a domain, you can trivially create unlimited emails until they catch on and ban the entire domain.
Inactive admins are also an issue, but if malicious users are determined enough, it doesn’t matter that much how active an admin is. An active admin can mostly help by making IP banning an option (imperfect, but will work on many humans) and can temporarily turn on approvals to make it easier to weed out low hanging fruit. Nothing will work against someone determined enough, but could at least reduce how many instances they can turn to.
Personally I don’t think anything will stop anyone determined to bring this type of harm to the community, there’s an endless list of workarounds. These communities need a larger network of moderators across timezones
Nope, but it will stop the less determined ones.
With no email verification, you can pretty much create dozens of fake accounts per second - as fast as the API can handle.
Yeah I still don’t have an email associated with my reddit account. Which shocks people… although I haven’t logged on in months, so maybe it’s now required for legacy accounts
it’s not required globally but some subs require it to be able to post
So far only /r/formula1 does for me
Hah, I replied higher up in the comments that when I signed up for reddit, I also didn’t need an email address and I think that particular one never required setting one
Newer accounts definitely did and I used different emails for those accounts
They somehow managed to force me to add my email. I don’t remember how.
Sure. But we changed our sign-up policy recently. Users are now informed during sign-up that temporary email accounts are banned.
We have another announcement regarding this soon.
How do you define a “temporary email account”?
I’m reminded of old games that insisted you couldn’t sign up with an email provider and had to use an ISP email … which kinda screwed over the literally BILLIONS of people whose ISPs don’t give email addresses…
Lemmy is open source. Everyone can modify it to fit their needs.
Because anyone running it can decide to do it this way. That’s how code works; you can edit it. Even if the option wasn’t there, if any instance admin wants that to happen it’s easy to do.
Last I checked, even Reddit allows signups without an email address…
In case anyone’s wondering, you can use the old.reddit.com interface to sign up without an email.
I only ever used old.reddit.com. Didn’t realize that option was limited to to the old interface
Last time I signed up, even new one allows you to leave email empty.
That’s true but they annoy you with a persistent banner to add an email address later on. But it’s working nonetheless.
Cuz we’re on an anonymous forum basically?
With the nature of the recent attacks I think it makes perfect sense to take strong precautions necessary to protect the community. Can always refederate when/if the admin gets ahold of the situation.
For sure. We reached out before too but we can not sit around and wait when it’s about this stuff.
Lemmy.world is still down often because DDOS attacks???
No we’re talking about spam attacks. Trolls posting nsfw images to communities
It seems like the user who posted the csam has been banned, does that mean the admin/mod is active again?
What defines an “abusive member”?
CSAM post
Thank you for defederating with them; I can’t unsee the horrible auto play video that showed up on my feed. Some people are really sick
I haven’t seen anything and not sure what CSAM is. What was it?
CSAM stands for child sex abuse material. I’m going to leave it at that.
Eck… Okay thanks
You certainly buried the lead, Jesus Christ. Thanks for staying on top of all this and being transparent.
Fun fact, it’s buried the lede not lead. Weird right! The more you know :-D
Lede vs lead is always a weird dichotomy to me, because the whole purpose of lede is that it isn’t supposed to be a word, right? I did some journalism in high school and I believe we were taught that lede was purposely not a word so that you could write “lede goes here” as a placeholder, and you’d be reminded of it because spell check would flag it.
So I’m never sure which to use, because it feels like using it in common discussion defeats the purpose haha. Either way though, you are right yeah.
They mean the same thing, more or less. Lede is just journalist slang for the story’s introduction, or lead.
"Origin of lede
First recorded in 1950–55; altered spelling of lead (in the journalism sense “short introductory summary”), used in the printing trades to distinguish it from the homograph lead (in the sense “thin strip of type metal for increasing the space between lines of type”)"
I appreciate the transparency, but isn’t posting that fediseer link just the same as posting collection of CSAM instances, and thus unwanted in any possible way?
You can also go to the “instances” page of every lemmy instance and get the same information. There is no way to block instances secretly.
Oh no, not my beloved neighbors :(
