this post was submitted on 16 Sep 2023
782 points (95.4% liked)
Lemmy.World Announcements
29157 readers
304 users here now
This Community is intended for posts about the Lemmy.world server by the admins.
Follow us for server news 🐘
Outages 🔥
https://status.lemmy.world
For support with issues at Lemmy.world, go to the Lemmy.world Support community.
Support e-mail
Any support requests are best sent to [email protected] e-mail.
Report contact
- DM https://lemmy.world/u/lwreport
- Email [email protected] (PGP Supported)
Donations 💗
If you would like to make a donation to support the cost of running this platform, please do so at the following donation URLs.
If you can, please use / switch to Ko-Fi, it has the lowest fees for us
Join the team
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
What has Discord anything to do with any attacks, or preventing any of them?
If lemmy is being attacked, mods need a platform to coordinate.
Discord has DDOS protection through their hoster, which was the primary means of attacks on lemmy.
Did the Matrix servers get attacked?
I can’t answer that, but my rebuttal would be these are targeted attacks, I don’t doubt they would attack matrix if lemmy was using it to coordinate.
Matrix is federated, supports private channels, encryption, and cryptographic user signatures. It's basically un-attackable (unless you open a channel to everyone).
The average user will not give a damn about any of the things you mentioned.
And tell me how to set up a matrix server that is invite only with one link instead of having to invite them all one by one?
Yes for most of the stuff matrix is good and I like it. But pretending it's s complete replacement for discord is simply not true.
Even besides that, which one is more popular do you think? Which one has the most reach and people are most familiar with? Most people don't care if it's foss or not, they'll use what everyone is using.
Ok... let me start by saying that I'm not trying to tell you what to do, just that I don't think those arguments are all that solid.
The topic was to coordinate in case of an attack, so you'd probably want to verify identities and avoid imposters, which Discord "kind of" does through things like its integrations with other ID services... but there's nothing like a good cryptographic signature. Discord has a "report raid" option for a reason, it isn't bulletproof.
Maybe.
A whole server, can be done, but why? A private space, or private room... I guess you still need to use a bot to invite from a link.
There are some bots out there with other interesting features though, like a "knock" option to let admins/mods know of join requests and accept/reject, or a setup where they use two rooms: one public, for everyone to join, with a bot that you can ask nicely for an invite to the private one.
Strictly speaking, all Discord features and more are possible via Matrix bots... but probably not yet available through a user friendly GUI, if that's what you mean.
Nowadays, either is a click away; whether the web UI, or some app in an app store.
Why would you need to verify identity’s to avoid imposters when this is set up ahead of time?
I’m user x here and user y there….
How is this so hard for you to comprehend?
If you think any of that matters (they’ve been attacked before… so I really don’t know why you think it’s not possible) you are hella naive.
And most of those apply to lemmy, and other federated communities, and guess what, all been attacked!
Except the private, encrypted, and verified identities parts. So essentially nothing other than being federated.
Lots of registrations are private, it’s a choice and some require email verification, arguably the same and agin, it’s a choice on your instance.
That... only partially mitigates the identity issue, it doesn't address the others.
How are they supposed to make announcements if the site is down?.. That was the whole point when there were so many attacks/site outtages.
There is this thing called "a status web page". Here, check the one for Lemmy.world: https://lemmy-world.statuspage.io/
Those were not working properly at that time of the DDOS attacks. I'm not sure if that's been fixed now or not tho.
We did fix it. We also updated the text at the top to clarify. It's only will post announcements if one of us is actively working on a outage. This keeps the noise down for small bilps in monitoring. We have https://dash.lemmy.world if you would like up to the second info.
Nice! Appreciate it.