this post was submitted on 06 Jul 2023

58 points (98.3% liked)

Asklemmy

44005 readers

823 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

Open-ended question
Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
Not ad nauseam inducing: please make sure it is a question that would be new to most members
An actual topic of discussion

Looking for support?

Looking for a community?

Lemmyverse: community search
sub.rehab: maps old subreddits to fediverse options, marks official as such
[email protected]: a community for finding communities

~Icon~ ~by~ ~@Double_[email protected]~

founded 5 years ago

MODERATORS

[email protected]

How easily can Lemmy be censored? (lemmy.ml)

submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]

46 comments fedilink hide all child comments

Being an old grandpa not that adept at tech, I don't know how Lemmy works. I mean, I know it's decentralized and it's supposed to be better than reddit, but still, how vulnerable is this platform from censors looking to block anything in here?

Are we invincible like those thepiratebay.org instances which jump up the more you try to censor them or are we basically like reddit. In other words, can I reliably access lemmy in China?

top 38 comments

sorted by: hot top controversial new old

[–] [email protected] 20 points 1 year ago (1 children)

A close cousin of Lemmy is Mastodon. If you consider Lemmy a federated version of Reddit, then Mastodon is a federated version of Twitter.

The largest Mastodon server is probably Truth Social, on which former president Trump posts his messages after being banned from Twitter.

Truth Social uses the same protocol as Mastodon of Lemmy: ActivityPub. The difference: the Truth Social administrators blocked the Truth Social server from sending out messages to or receiving messages from other servers. So it's a private Mastodon.

Bottom line: if you run your own Lemmy server you can block whatever server you want or none at all. And others can block your server if they want. If you create ab account at somebody else's Lemmy server, the administrator can decide to block other Lemmy servers.

If you use a Mastodon account, it's very easy to migrate to another server including your followers. Lemmy accounts do not appear to offer that functionality (yet?), but I expect a migration tool will be created in the future. So if an administrator decides to block another Lemmy server, but you don't like that, you might easily move to another server. As of yet, you can't however and need to create an account on another Lemmy server.

[–] stevehobbes 6 points 1 year ago* (last edited 1 year ago) (3 children)

As of yesterday, the largest is of course Threads. Not sure if it’s actually mastodon, I assume not, but it does use ActivityPub and is part of the fediverse.

Or maybe not as a lot of people have pointed out that it isn’t actually federated with anything yet, so maybe it isn’t activitypub.

[–] whileloop 11 points 1 year ago* (last edited 1 year ago) (3 children)

And, of course, it is (or will soon be) defederated by much of the Fediverse since we want nothing to do with Meta/Facebook.

[–] [email protected] 6 points 1 year ago

I pre-emptively defederated it from my instance.

[–] stevehobbes 4 points 1 year ago (1 children)

I mean maybe. Part of the beauty of this is that I also get to consume Threads content without being subject to any of their data collection outside of what I post and interact with. I can consume their content, they of course can consume mine, but they can’t actually track what I consume.

[–] TheDarkKnight 4 points 1 year ago (2 children)

I am skeptical about this. Not confronting your point nor offering a refutation but I am concerned about Meta collecting data on threads their users are participating in which may include user's messages outside of their instances. I don't know if this is a real potential or not, privacy experts may be able to weigh-in better but Meta's track record concerns me.

[–] Capricorny90210 5 points 1 year ago

A bit off topic ,but fun fact: I read that any site that uses Facebook analytics gets user data harvested. so even though you have no accounts with any meta products, you are, in theory, vulnerable to Meta data harvesting.

[–] stevehobbes 4 points 1 year ago* (last edited 1 year ago) (1 children)

No question they’re scumny. But because I’m not browsing their instance logged into their platform, they can’t see what i grab. Maybe they can fingerprint requests my client makes to load images, but the text of posts is going to be grabbed from the federated instance I’m logged into.

They won’t inherently be able to tell me from any other lemmy.world user I don’t think.

Of course anything I post that goes over there as part of federation will be tagged to my user, but they won’t be able to track me across the entire internet from that the way they can if I were logged into their service.

I don’t know the exact privacy implications but I do know that I haven’t accepted their privacy policy which certainly limits what they can do (because they haven’t gotten me to agree that they can do anything they want).

[–] TheDarkKnight 2 points 1 year ago

Ah that makes more sense. Thanks!

[–] kava 4 points 1 year ago

We'll have to wait and see what actually happens. People went and signed NDAs with Meta. It's up to the instance owners ultimately, and the big ones will inevitably start a cascading effect one way or the other.

My gut tells me we're gonna see federation with Meta

[–] [email protected] 2 points 1 year ago (1 children)

Threads isn't anything yet. It might use ActivityPub under the covers but we don't know because they've not attempted to connect to anything else yet.

[–] stevehobbes 1 points 1 year ago (1 children)

Oh interesting. I thought it was.

[–] [email protected] 3 points 1 year ago

Supposedly it might be in the future, we don't really know

[–] [email protected] 2 points 1 year ago (1 children)

Threads does not use activitypub yet.

[–] stevehobbes 2 points 1 year ago

Oh interesting, I thought I had read that it did.

[–] [email protected] 13 points 1 year ago (4 children)

can I reliably access lemmy in China?

Not really, you would only be able to access instances that China hasn't blocked.

[–] [email protected] 6 points 1 year ago* (last edited 1 year ago) (2 children)

Are you sure? There are multiple sites where you can check if a site is blocked in china. I've put a few lemmy instances in the first 3 sites i found and they all claim they're accessible. I'm not sure how 'reliable' that would be, but seems as of now they aren't censored.

[–] berkeleyblue 4 points 1 year ago (1 children)

I mean in the end it’s a server somewhere like any other website. If your decide to block all traffic that goes to that site, yiu blocked it. The thing with lemmy is just that it’s decentralized and technically you could just another instance and acces the cache and interact ther from what I understand.

So if if China works with a Blocklist and not an Allowlist, instances might go up faster than they can block them?

[–] [email protected] 2 points 1 year ago

Yes, exactly. On the other hand the list of lemmy instances is public. And we even have websites that help new users to find a suitable one from the list of all known instances.

I bet a censor like china has people or program(mer)s to to go through such a list and block each and every known instance. I'm not an expert on china. I wouldn't be surprised if somebody told me they're already doing it like that for other federated or distributed platforms.

[–] [email protected] 1 points 1 year ago

Yeah I guess my point is that China could block Lemmy instances.

[–] stevehobbes 4 points 1 year ago* (last edited 1 year ago) (1 children)

Unless China blocks all activitypub traffic, that’s a losing game of whack-a-mole. Or I guess they could scrape the federations of the instances they want to block and add them in real time.

But yeah, you’re right it isn’t designed to evade state level censorship.

[–] [email protected] 1 points 1 year ago (1 children)

Unless China blocks all activitypub traffic, that’s a losing game of whack-a-mole.

I would say the same about the entire china firewall.

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago) (1 children)

Unfortunately, China's firewall is a extremely robust technology. It is much more than just a DNS sink hole.

For example, it can block IP addresses (probably dynamically), like digital ocean or AWS. It can even block internet protocols, like TLS1.3 https://www.zdnet.com/article/china-is-now-blocking-all-encrypted-https-traffic-using-tls-1-3-and-esni/ . It can even block tor, a inernet protocol designed for anonymity and prevent censorship https://www.technologyreview.com/2012/04/04/186902/how-china-blocks-the-tor-anonymity-network/

It is truely disheartenng to see talented engineers working on this piece of oppressive technology. I imagine if they want to, it would be rather trivial to block most activitypub instance.

[–] [email protected] 3 points 1 year ago

Yeah I mean, deep packet inspection at that scale is certainly an impressive feat. But that doesn't change the fact that it's a game of whack-a-mole. Tor entry relays get detected? Tor devs change the handshake or use purified to reach the entry nodes: https://support.torproject.org/censorship/connecting-from-china/

A friend of mine was able to bypass the firewall there a few years ago using unlisted VPN endpoints he got from his VPN provider.

They can block most things for most uninformed users. But they'll never be able to make it impenetrable without cutting off access to the larger internet completely.

[–] kratoz29 2 points 1 year ago (1 children)

But you could access from the unblocked China instance to the world couldn't you?

[–] [email protected] 2 points 1 year ago

Yeah, unless that unblocked instance resides in China then it's probably subject to the same restriction as you. Unless they proxy the federation traffic.

Images are an issue though, as those don't get cached by the local instance but are just links to the remote instance.

[–] [email protected] 2 points 1 year ago (1 children)

How many instances are there? I can if I need to create my own instance right? So, it's just like pirate bay I suppose, you close one instance another will take it's place or am I mistaken?

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago)

Yeah true. It would require some additional work if you wanted to federate with blocked instances though. Same goes for if you wanted to migrate the federated data in the event the instance gets blocked.

[–] [email protected] 9 points 1 year ago (2 children)

lemmygrad.ml might actually be China. But each instance gives a list of the instances it federates with, so it should be easy for China to block them all. Lemmy has no features specifically for evading state censorship.

[–] [email protected] 3 points 1 year ago

Some governmental agency/agencies & psyops definitely at play there. And not only there.

[–] [email protected] 1 points 1 year ago

do you think lemmy would be able to evade state censorship? If we wanted to that is. I really like those piratebay instances, trying to censor them is really difficult, even for the state (They can but it's difficult to censor each and everyone one of them)

[–] [email protected] 8 points 1 year ago

there is a page about this on the lemmy docs: https://join-lemmy.org/docs/users/05-censorship-resistance.html

[–] average650 4 points 1 year ago (1 children)

As long as an instance that is federated with the instances you want is not blocked, you can access it.

If they want to block all instances, there's no reason they can't.

[–] [email protected] 3 points 1 year ago (1 children)

lemmy instances can be published through the onion network too

can't block those unless they block the tor network, but then you have bigger problems.

[–] average650 1 points 1 year ago

Is there anything that can't be accessed through tor? Excluding sites that require some kind of vpn access or somehting.

[–] [email protected] 4 points 1 year ago* (last edited 1 year ago)

To block a specific content from an instance, they have to block all instances because your instance is going to get that content from other instance instead of you. You are not even going to connect to that instance.

But if they want to completely block the federation, they can.

[–] [email protected] 3 points 1 year ago (1 children)

I don't think lemmy is made to circumvent censorships. There are other platforms for that. This is okay because sometimes this and being easy to use contradict each other.

However. I think it's doing a decent job. But admins of the individual instances will probably censor things that are against the law, because they are liable for that.

[–] [email protected] 2 points 1 year ago

pretty nice answer. You are right, many times that's pretty contradictory.

load more comments