this post was submitted on 13 Jun 2023
25 points (96.3% liked)
Lemmy
2172 readers
6 users here now
Everything about Lemmy; bugs, gripes, praises, and advocacy.
For discussion about the lemmy.ml instance, go to [email protected].
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Malicious instances would need to be blocked by the instance you are registered to.
As for multiple accounts - couldn't the same thing be done on reddit? Just make a bunch of alts and self-inflate your own posts/comments.
These issues are as old as the internet and can only be mitigated, not prevented.
I'm 99% sure reddit does a lot of backflips to detect and prevent that. One casual bad actor can only burn up so many IP addresses or API keys in a short period, and I think there's some undisclosed/"secret" logic to it. It's like burglary - you can't stop it but you can cost the burglar sufficient time or money to deter them.
I haven't dug into Lemmy's code yet but I am curious what countermeasures against abuse are apart of federation. Signed, time-boxed tokens and IP addresses could be part of the protocol to mitigate abuse via federation.