this post was submitted on 18 Sep 2023
996 points (95.4% liked)

Lemmy.World Announcements

29099 readers
25 users here now

This Community is intended for posts about the Lemmy.world server by the admins.

Follow us for server news 🐘

Outages πŸ”₯

https://status.lemmy.world

For support with issues at Lemmy.world, go to the Lemmy.world Support community.

Support e-mail

Any support requests are best sent to [email protected] e-mail.

Report contact

Donations πŸ’—

If you would like to make a donation to support the cost of running this platform, please do so at the following donation URLs.

If you can, please use / switch to Ko-Fi, it has the lowest fees for us

Ko-Fi (Donate)

Bunq (Donate)

Open Collective backers and sponsors

Patreon

Join the team

founded 2 years ago
MODERATORS
996
submitted 1 year ago* (last edited 1 year ago) by lwadmin to c/lemmyworld
 

Hello everyone,

Recently we have been dealing with a lot of spam from the kbin.social communities. There is a bug in kbin where moderation tasks are not federated to other instances. That means even if a moderator over at kbin removes a post, it will still be visible on Lemmy instances and it's up to the instance admins to clean it up.

There have been talks about this in the Lemmy admin channels with some instances considering defederating from kbin.social - and others who have already made that step.

We don't want to defederate, because we know this would impact the kbin community greatly - but we have to do something. That's why we have currently removed most of the kbin communities from Lemmy World, making them unavailable to our users. But the kbin users can still view and interact with our communities and users.

This means that those spam-accounts will stil be able to post in our communities too, but at least it makes the task of moderation already a little bit lighter on our team. But it was either this or defederation. The moderation tools on kbin are in an even worse state then Lemmy's.

We will keep monitoring the situation and will keep you up to date should anything change.

We hope you understand and support our decision.

The Lemmy World team

top 50 comments
sorted by: hot top controversial new old
[–] Rootiest 231 points 1 year ago (1 children)

Gotta do what you need to.

Hopefully kbin development can fix their moderation tools and eventually be reconnected!

[–] droans 92 points 1 year ago

Yep, this feels like a temporary change until things get fixed.

[–] [email protected] 175 points 1 year ago* (last edited 1 year ago) (2 children)

Hi - mod of a small kbin.social mag here - @13thFloor - and a lemmy.world user. Is there anything we can do on our end to help mitigate the problem, or make it easier to flag spam that makes its way to Lemmy? I'd be more than willing to include a note to the lemmy.world admins if a spam post is deleted off of a mag I mod here- just need to know who to contact.

Side notes - Ernest (kbin.social admin) just responded on the spam issue here. The community has been actively working over here to flag and remove spam accounts (I've personally flagged close to 100). According to the most recent news from @ernest earlier last week, we've got a software update incoming, and a magazine cleanup in the works that will hopefully make an impact.

[–] antik 77 points 1 year ago (7 children)

Heya! Not really. It's just a few communities that are being spammed really hard, so only those are removed. I think the work you're doing by flagging these spam accounts is already very helpful to Ernest and his team. He himself was kind enough to join us in this thread and give us some more information. For now all we can do is wait..

Thank you for your patience and understanding :)

load more comments (7 replies)
[–] thisisawayoflife 25 points 1 year ago* (last edited 1 year ago) (2 children)

How is it so easy to create spam accounts with Kbin? What kind of account validation is implemented? Email? Enforced 2FA? Just a curious dev who hasn't started their own lemmy or Kbin instance yet.

[–] [email protected] 29 points 1 year ago (4 children)

There's just email verification at the moment. 2FA is on the roadmap, but I'm not sure if it will be in the next release. Here's the kbin codeberg site for more detail.

load more comments (4 replies)
[–] [email protected] 11 points 1 year ago (2 children)

When I signed up it was email + captcha. I cannot find even an option for voluntary 2FA.

I don't know the details but people who wanted to work on Kbin and looked into it say that it is a much less developed platform overall (i.e. not fully a beta and more like still in alpha, e.g. lacking a true API), but it does offer benefits socially (to further disconnect from the originators of the Lemmy software) and to have another codebase that offers federation.

[–] anlumo 13 points 1 year ago (1 children)

Lemmy is also more of alpha-quality software. The admin tools are pretty much non-existent. On my own instance, I've had to go into the database to fix issues a lot using straight SQL, and I have like ten users on the platform. One of those issues caused my admin account to no longer being able to log in, another caused the whole instance to be down.

load more comments (1 replies)
load more comments (1 replies)
[–] [email protected] 128 points 1 year ago

Devs learning in real time why social media (especially decentralized) should be designed moderation first in design.

[–] assassin_aragorn 61 points 1 year ago

Seems like a very reasonable compromise to deal with the situation.

Thanks again for the transparency and keeping everyone in the loop.

[–] [email protected] 50 points 1 year ago

Hopefully this is resolved quickly. We are stronger together.

[–] [email protected] 45 points 1 year ago (1 children)

Quick reminder that kbin was still fairly early in development when the reddit exodus began and sped things up much sooner than anticipated. A few teething issues are to be expected and Ernest, the dev, has been open and communicating about what's going on.

[–] woelkchen 9 points 1 year ago (3 children)

Quick reminder that kbin was still fairly early in development when the reddit exodus began and sped things up much sooner than anticipated. A few teething issues are to be expected and Ernest, the dev, has been open and communicating about what’s going on.

Given that kbin is written in PHP, I honestly don't see much of a bright future for it. It's not like hobbyist developers line up to write PHP.

[–] [email protected] 12 points 1 year ago

For me the tell was the lack of an API.

[–] Anonymousllama 8 points 1 year ago

The system is based on the bleeding edge of the PHP stack, using PHP 8.3x and Symfony 6 as the framework. There's plenty of devs out there, especially symfony ones. The main issues I've found is pulling in people who are interested in the ActivityPub side of the project.

I think a few more months and most of the user-facing UI/UX issues will be improved. The moderation side, along with quality of life admin tools are definitely lacking though.

[–] petunia 42 points 1 year ago (1 children)

Spam has consistently been the death of the open internet, even the big tech silos struggle with spam (Instagram for example -- despite having incredibly invasive techniques for identifying "genuine" users -- is STILL inundated with spam commenters). I think instances on the fediverse should reconsider their open registration policy, either totally close registrations when you reach an agreed upon critical mass of users, or adopt some form of invitation or application system for new users. I believe Mastodon supports both in the software.

[–] Candelestine 14 points 1 year ago* (last edited 1 year ago) (2 children)

I agree. A hard limit would be a good idea, it'd nip a lot of problems in the bud.

I'm as idealist as the next guy, but I was also a hellacious misfit once, so I know what it feels like to be a hate-fueled asshole. I really hope these Fediverse idealists have started to understand that assholes do exist, and they must take measures to defend themselves.

Combat is a part of life. Violence is an aspect of competitive biology. You're gonna have to deal with attacks here. Forever. Just get the fuck used to it, you're at war and will be until you die or leave this place. Largely due to politics and the way open communication has not just empowered good people to create good things, but has also empowered extremists and criminals too. And they exist and have goals too, in case any of you people fucking forgot.

load more comments (2 replies)
[–] JackSkellington 37 points 1 year ago (1 children)

I also noticed there was a lot of spam from kbin regarding the online sales of pharmacy drugs that require prescriptions.

[–] hoch 50 points 1 year ago (1 children)
[–] PmMeFrogMemes 18 points 1 year ago

i mean theres so many kbin communities, which one???

[–] jacktherippah 36 points 1 year ago

Good transparency. Thank you for your work!

[–] [email protected] 32 points 1 year ago

Thanks for not cutting us off. I sub and post to a lot of lemmy.world communities, some of them small, and wouldn’t want to have to stop contributing or make a new Lemmy account.

[–] shadearg 29 points 1 year ago

Understandable, have a nice day.

[–] Gabu 27 points 1 year ago

So that's why the modlogs were going ballistic. Oh, well, I hope things are fixed soon.

[–] [email protected] 27 points 1 year ago (1 children)

Thanks for not defederating us! -Kbin users

Ernest is working on a major update for Kbin but it might be still a couple weeks out.

[–] lwadmin 57 points 1 year ago (1 children)

We are well aware of what's going on with kbin and the development team. That's why we don't defederate because we have hope that they will fix things soon.

[–] [email protected] 92 points 1 year ago (1 children)

I apologize for causing you trouble. I'm trying to resolve the situation as quickly as possible, but apart from the usual spammers, there have also been organized campaigns where, for an hour on Sunday mornings, our instance was flooded with spam from hundreds of accounts. This, of course, is causing federation issues. I've changed my priorities regarding the roadmap, and additional tools will be released soon. I will also ensure additional moderation. I will also get in touch with admins from other instances - my absence was due to personal issues I mentioned recently. Thanks for your understanding, and best regards.

[–] antik 63 points 1 year ago* (last edited 1 year ago)

Hey Ernest,

Having dealt with spam waves ourselves we are certainly understanding of the situation! I read your status updates and what has been going on. That is also why we choose to close the problematic communities/magazines instead of defederating.

We really hope that you find the time and peace to resolve these things. There is no bad will here, we know that these things need time. If there is anything we can do to help feel free to reach out.

[–] Anonymousllama 24 points 1 year ago

There's been a heap of development going on with kbin recently, with a release upcoming. Overall the development process has been a bit slow with Ernest (the guy who owns the project) having personal issues to resolve.

Definitely the moderation process needs to be improved so that we have better ways of addressing spam so it doesn't bother other instances.

Personally I'm of the opinion that we should be using a metric based system where we weigh in the users date or creation, overall interactivity, upvote / downvote ratio and other data to potentially flag spam users. But honestly fighting spam is really hard and all of that would have to be built (plus it's a public repo so bad actors could look for how this is pieced together and find new ways to get past)

[–] GONADS125 19 points 1 year ago* (last edited 1 year ago)

Pretty unfortunate, but definitely better than defederating. I'm glad there can still be a link to some degree. Hopefully the moderation tools on both platforms improve soon. I appreciate the transparency and willingness to take on more work in order to maintain some link. I think it is important for the integrity of the fediverse. But also important to remember you all are doing this in your spare time.

[–] MCForTheBest 17 points 1 year ago (3 children)

Damn, I main Kbin πŸ™ƒ

load more comments (3 replies)
[–] ViewSonik 16 points 1 year ago (1 children)

Manager of Managers (MoM) will be required long-term it sounds like.. thanks for the good work all.

[–] grue 9 points 1 year ago (1 children)

That makes sense, to be honest: add a layer of complexity in the software (such as federated instances), add a layer of management.

load more comments (1 replies)
[–] [email protected] 12 points 1 year ago

I'm worried kbin development is stalling.

load more comments
view more: next β€Ί