this post was submitted on 19 Feb 2024
30 points (94.1% liked)

Lemmy

2172 readers
48 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to [email protected].

founded 4 years ago
MODERATORS
 

I think this is something Lemmy should also consider. Open registration is an invitation to abuse an instance as a spam vector.

all 10 comments
sorted by: hot top controversial new old
[–] [email protected] 18 points 9 months ago (3 children)

You think every instance should require an admin individually approve every account?

This will not help adoption at all.

[–] [email protected] 12 points 9 months ago (2 children)

Manual approval isn't the only alternative to Open Registration - the main one involves requiring an email address, and/or solving a captcha

[–] [email protected] 9 points 9 months ago (1 children)

Oh, I assumed those were still considered "open".

[–] [email protected] 4 points 9 months ago (1 children)

In Lemmy terms they're at 'RequireApplication'. Open is completely open. PixelFed have automated something that lemmy.world did for feddit.nl a while ago - defederate from them until they changed their application policy.

[–] [email protected] 2 points 9 months ago

TIL, thanks.

[–] [email protected] 1 points 9 months ago* (last edited 9 months ago)

Those are largely useless against spammers, but indeed there could be other options like giving already registered users usage limited invite links etc.

[–] [email protected] 6 points 9 months ago* (last edited 9 months ago)

First of all this is mainly a feature to protect existing instances against spam from other badly managed instances.

But yes, admin approval scales surprisingly well if you have several admins per instance and many smallish instances, and it could be further improved by giving existing users secret invite links than don't require admin approval (AFAIK also already supported by Pixelfed).

[–] [email protected] 3 points 9 months ago (1 children)

It's not a one-click solution, but lemmy admins can check other instance's registration policy. e.g.
curl https://lemmy.world/api/v3/site | jq -r .site_view.local_site.registration_mode

Other Fediverse apps will reveal it in different ways of course. Nothing to stop an instance that was set up just for spam from lying about it of course.

[–] [email protected] 2 points 9 months ago

Nothing to stop an instance that was set up just for spam from lying about it of course.

Yep it’s trivial to get a reverse proxy to modify the response to make it look like they don’t have open registration.