Lately we have been dealing with a few abusive members from Feddit.nl and we were unable to get in touch with the instance administrator.
Part of the problem is the instance's open registrations which do not require you to enter an e-mail address during signup. This in combination with an inactive admin is a recipe for abuse.
We hope this is only temporary but we have to do this to protect our users.
Edit 2: We got in touch with the Feddit.nl admin. Email requirements were added to the sign-up process and we're setting up a communication channel. So that means we are federating with Feddit.nl again!
With the refrigeration, which do you consider the canonical community to follow now? You mod both, right? Are you going to keep the bit posting to both?
That assumes that it's not abandoned like rammy.site was, if you don't know rammy.site was a general purpose Lemmy instance a while back which was abandoned by its admin and then some right-wing grifters decided to hijack it and use it to spread hatred. Similarly to this situation they also got defederated, though much more widely then in this case.
The biggest problem is that because they were abandoned eventually the server crashed or the VPS got discontinued or something and now it's gone. If you go to the URL now you get SSL errors and for a while it was showing up as 410 gone. So with Feddit.nl even though you can go and view the contents on it right now if it's abandoned it will likely meet a very similar fate in the near future. Meaning that the community is on it are doomed and will either die or have to migrate elsewhere.
Maybe it's just a coincidence, but it seems like everytime .world defeds from a problematic instance, it's almost immediately smashed with DDOS attacks.
The beauty of lemmy as I see it though IS the federation, if .world is down no worries, I'll just browse on sopuli.xyz or any of the multitude of other instances :) we are like a sexy hydra of positivity.
It's one of great things about this instance.. having a look into whether or not services are in alignment with my values goes a long way in supporting such an endeavor.
Nope, in order to not overload lemmy servers, the lemmy software does not federate pre-(re)federation content. That is one reason why I find it a bit ridiculous to wield the biggest stick you have, defederation, so freely.
They've already replied with the reasons, but - for future reference - if you want to see specifics of things like this, a censure is often posted to https://fediseer.com. .world's censure of .nl is here
Well that’s disappointing, but glad the lemmy.world team are making sure they are on top of it and keeping transparency with all that you do. Thank you.
Back when I signed up for reddit, you didn't need an email and they warned you if you lost your password you'd be locked out of your account until you regained it and they would not offer support to reset it
I liked that. I don't want to have to submit my email for everything just to interact
And then there's those of us who don't use email for all practical purposes. I haven't sent an email in anger for a donkey's age; the only reason I have an email at all is because of all the people in North America who think email is the wave of the future.
Yeah I still don't have an email associated with my reddit account. Which shocks people... although I haven't logged on in months, so maybe it's now required for legacy accounts
Sadly yeah. We absolutely should use email signup because it filters our the absolute lowest effort bots, but it does nothing against higher quality bots or humans. Not only can you easily spin up new emails on the fly, but many emails allow ways to make the email appear unique (eg, Gmail ignores dots and anything after the + sign), there's plenty of temporary email services with a variety of domains, and if you own a domain, you can trivially create unlimited emails until they catch on and ban the entire domain.
Inactive admins are also an issue, but if malicious users are determined enough, it doesn't matter that much how active an admin is. An active admin can mostly help by making IP banning an option (imperfect, but will work on many humans) and can temporarily turn on approvals to make it easier to weed out low hanging fruit. Nothing will work against someone determined enough, but could at least reduce how many instances they can turn to.
Because anyone running it can decide to do it this way. That's how code works; you can edit it. Even if the option wasn't there, if any instance admin wants that to happen it's easy to do.
I mean, it's easy to go over to feddit.nl and see they only have one admin who has not been active in almost two weeks.
Full transparancy: the abuse we were dealing with from that instance was vote manipulation and worse, csam. Especially in the case of csam we can not wait for days for a reaction.
Thanks for doing this. I've not had to see any of it because you guys are on top of dealing with it. (Although I also don't sort posts by new, so I probably wouldn't see those posts before they got removed anyway.)
With the nature of the recent attacks I think it makes perfect sense to take strong precautions necessary to protect the community. Can always refederate when/if the admin gets ahold of the situation.
I feel your frustration with "unable to get in touch with the instance administrator". I'm waiting for a response from @ruud and @MichelleG from 9 days ago regarding abusive members.
This was not about "abusive members" this was about a member having too many communities according to you. We both seem to have a very different definition of "abuse".
The user in question does have a lot of communities but he is very active and has different moderators who he manages. Also, when the moderators of these communities do well he transfers the community over to them. As recently as yesterday when he transferred !movies@lemmy.world and !marvelstudios@lemmy.world.
While he has a lot of communities he does a good job managing his communities and training moderators and is making our lives as admins easier. If someone has a lot of communities and doesn't do anything with them, that is squatting and we take action. I think we have a good track record of that.
So unless there is something we are missing I really would not call any of what the user in question did "abusive".
Lastly the best way to get someone to look at your problem is to use the report feature. The reason you got no reply in nine days is because there was no problem.
1st, great communication- No response because there is no problem. That's a terrific reason for instance administrators to ignore messages. I should have read their minds and known, geesh my bad. 2nd- I used the report feature on august 26th and did not receive a response until a week later. The response wasn't even a fix, it was just asking if I was still having a problem. So thats clearly not the best way to contact admins. That leaves @ ing admins on major posts to get a response. Its annoying, but so far the only effective way. Lastly, If a user creates dozens upon dozens of new communities, solely because they might become popular and then sits on them/isnt active in them, I would say thats an abuse of the system. I suppose we should all start registering any community that could potentially become big. Then when they do become popular, we can gatekeep who is worthy enough to mod them. Plainly, power-mods shouldnt be a thing.
I appreciate the transparency, but isn't posting that fediseer link just the same as posting collection of CSAM instances, and thus unwanted in any possible way?
Stuff like this is going to kill the momentum of the fediverse. I'm a reddit refugee, my main account started on vlemmy.net (because it had a policy to not defederate from anything), and when that went poof, I moved to feddit.nl (because it has a policy to not defederate from anything). I believe it is MY prerogative, and no one else's, to decide what I am or am not allowed to see. I curate my own feed by blocking or subscribing to instances I don't or do want to see, respectively.
Regardless of any of this, however, I am now unable to view any content on .world without this account, due to actions entirely outside of my control. Since hosting my own instance is out of the question for me, my options are: find a third instance with a no-defederation policy that hasn't been defederated itself from major instances, have multiple accounts and browse each instance individually, stop browsing altogether, or go back to reddit. As distasteful as the last option is, it's tempting. I know the impulse will be to tell me "good riddance", but I am posting this because I know there are others like me that are tired of instance hopping and trying to find somewhere that doesn't try to police our browsing and also isn't defederated from major instances.
For the record, I don't want a no-defederation instance because I want to browse Nazi or pedo instances. I want a no-defederation instance because I have a principled objection to others telling me what I can or cannot view.
I actually prefer that instances can do this, the whole point is to find one you more closely align with like old school forums. The ones they’ve done this to are either mass brigading, full of Nazis or sharing CSAM. They have every right to protect their users from that kind of stuff or make those decisions when they’re individuals paying to run an instance.
Until there’s a tool I can use to fully block instances myself (which I don’t see available) this is the way it’s run. Maybe the fediverse just isn’t for you? As someone who grew up using old school forums this is completely fine and expected. If I am running a website (or store) I have every right to manage it the way I see fit.
If defederation worked more like a shadowban, I would agree with you. .world defederating with feddit.nl could result in no one from .world seeing any content posted by anyone from .nl, but .nl can still see the content from .world. It's unfortunate that .nl couldn't participate anymore, but it's better than that community ceasing to exist.
Defederations as they exist now are like being in a restaurant. There are two employees, one makes the food, the other makes the drinks. It starts out with being able to order either, or both, right from the comfort of your table. However, the owner of the restaurant decides that he just doesn't care much for drinks, and kicks out the drink-maker. The drink-maker opens a new store across the street, but he does not serve food, only drinks, and the restaurant you started at doesn't serve drinks, only food. Yes, technically, you are still free to go across the street to get some drinks, or stay here for some food, but boy, wouldn't it be nicer if that owner never decided he didn't like drinks? Sure, not EVERYONE in the restaurant cares, but a pretty significant amount of them probably would. They might just go down the street to McReddits. Sure, the food there is pretty bad, but at least they can get both food and drinks without having to go across the street.
A user on there posted CSAM. Given that images federate too and that moderation over there seems to be lacking, do you not think it's unrealistic not to expect defederation?
I never said I didn't understand. I'm pointing out a problem that can, and I believe, will, lead to issues with user retention. If one is punished for the bad actions of someone on their instance that they have no control over, it will lead to frustration. I know this because it has happened to me twice now- once with vlemmy disappearing due to someone posting something bad that spooked the admin, and now feddit.nl because someone posted something bad that spooked these admins. I'm not saying it's not understandable, I'm merely saying that a problem exists.
I believe it is MY prerogative, and no one else’s, to decide what I am or am not allowed to see. I curate my own feed by blocking or subscribing to instances I don’t or do want to see, respectively.
What about abusive users that post in communities outside of their home instance? I think that's what we're talking about here. I can block instances, but there are communities in Lemmy.world that I enjoy and I appreciate the admins effort to keep abusive users out.
Each user can block other users. Moderators can block users. It can be handled the same way that other sites (yes, like reddit) do it. I'm also not opposed to defederation when it is essentially a single-user ban- for example, if there is an instance with no communities, no signup requirement, and has nothing but malicious bots- that's banning a bot farm, not "defederation" as it's commonly understood. But with something like this- where feddit.nl is actually a rather large instance- so many people are essentially being punished for absolutely no fault of their own.
There is a common thread in your complaints. This isn't a problem that's going to kill the fediverse it's a problem with instances without moderation. Turns out shitty instances that don't care about moderation are the same ones that "have a policy to not defederate from anything". Stop joining shitty instances that allow literally illegal content and you won't have that problem.
Yes, but I outlined my reasons for wanting no defederation. VLemmy was perfect- refused to defederate, actively moderated- until the issue with image federation spooked him. Also, saying "illegal content" is a bit meaningless on a globally distributed platform. On both instances- feddit.nl and VLemmy- many users outlined very similar rationale to me when the issue of defederation came up, and you and I both know that defederation is not used only for unmoderated instances. Lemmygrad is aggressively moderated and defederated from most instances because the owners find the political views expressed there distasteful, and that's not the only one.
It just introduces so much personal bias into the fediverse, where individuals who don't like Thing A defederates from instances that allow Thing A, cutting their entire instance off from it. Again, yes, you can join other instances, but that quickly gets annoying trying to find another instance that aligns with your Thing A-positive or neutral views. This is what I'm referring to when I say that it will kill the momentum- users getting frustrated and having to make multiple accounts to essentially dodge a completely unjustified ban (assuming they weren't the ones doing the Bad Thing that caused the defederation) will lead to burnout and lost user retention.
As I also said, there will certainly be an impulse to say "good riddance, we don't need them anyway", but I think it'll lead to more problems. The fediverse has existed as a small pocket of internet for a while. However, things don't shrink as easily as they grow. If lemmy continues to get time and money and resources poured into its development for an ever-shrinking userbase, it won't just go back to how it was. Growth is hard to undo.
For the record, I don’t want a no-defederation instance because I want to browse Nazi or pedo instances. I want a no-defederation instance because I have a principled objection to others telling me what I can or cannot view.
There are laws you know, claiming a fediverse server should work outside the law is idiotic and not at all principled.
having a 'principled objection' to others telling you that you can't see child sexual abuse tapes is very admirable and sounds much better
i doubt its going to change anything though, since 'principled objection' to laws doesnt actually stop said laws from applying to you, or the site youre using
You don't get to decide what others allow on their instances. It's regular people hosting these servers and these same people having to moderate and manage those instances. They are the ones who face backlash and the repercussions for what's posted on their servers so if they choose to make the decision to defederate to protect the instance community as a whole then that's their choice. Long story short, tough shit. Don't like things being defederated, create an account on a different server. Or better yet, create your own server than you can choose who you do or don't federated with and what happens on that server can be your own responsibility.
I think this issue could be addressed on the front end.
The reason you would want a server that is federated with everything is so you can access all content at once instead of switching between accounts on different instances. If you could log into multiple instances at once with a single username and see content from both in the same feed it wouldn't matter if they are defederated. I think this federation thing ought to be, as far as possible, transparent to the end user.
The way this currently works feels odd to me - it doesn't really behave like a decentralised Reddit, because your account is tied to a specific instance and the content you see depends on which instance you pick. It feels like an awkward middle ground between a centralized service like Reddit and just having a completely separate forum site for each community.
Feddit.nl rules explicitly state no illegal content, so it seems to be not so much inviting illegal content as a failure to moderate account creation and post content, like OP alluded to.
Sounds like you want a Distributed/Decentralized service like Nostr instead of a Federated service like Lemmy, you should join there instead, I'm sure you'd be right at home there.
I like it here on monero.town because we have a good admin and the requirements to get an account here are high enough to make someone jump through a few hoops. None of the super big instances like world, ml, or beehaw have reson to defederate us. Some smaller ones defederate us do to ideology but its not a big loss.
Dunno why you're being downvoted. Defederation feels like a gung-ho way of handling content moderation issues that centralized platforms would be able to directly solve.
It is a gung-ho way, but I understand why I'm being downvoted. People hear "I want to have the ability to view anything" or "I don't like being told what I can or cannot view on the internet" as "I want to view CSAM" or "I am actually a Nazi", which should result in an emotional reaction. It's just not what I'm saying.
What, doesn't that defeat the whole purpose of this FOSS platform? This should be and needs to be a place where people can come together to talk, chat, make friends.
This should not be a place paywalled by crypto, that will probably lead Lemmy down the path of X.
There are invite-based systems since the dawn of the internet, notably torrent trackers and closed forums, and mods can see who vouched for them. It's not worth it unless the community has something unique to offer (i.e. new blueray rips, non-public deals). Adding crypto to it doesn't add anything of value.