We're aware of ongoing federation issues for activities being sent to us by lemmy.ml.

~~We're currently working on the issue, but we don't have an ETA right now.~~

Cloudflare is reporting 520 - Origin Error when lemmy.ml is trying to send us activities, but the requests don't seem to properly arrive on our proxy server. This is working fine for federation with all other instances so far, but we have seen a few more requests not related to activity sending that seem to occasionally report the same error.

~~Right now we're about 1.25 days behind lemmy.ml.~~

You can still manually resolve posts in lemmy.ml communities or comments by lemmy.ml users in our communities to make them show up here without waiting for federation, but this obviously is not something that will replace regular federation.

We'll update this post when there is any new information available.

---

Update: Federation is resumed and we're down to less than 5 hours lag, the remainder should be caught up soon.

The root cause is still not identified unfortunately.

Hello World,

we know one of the most important indicators of comment and post community interest is votes. Beyond that, reports help to regulate comments and posts that go beyond down-votes and into the rule-breaking territory.

Unfortunately, Lemmy's current reporting system has some shortcomings. Here are a few key technical points that everyone should be aware of:

• Reports are NOT always visible to remote moderators. (See Full reports federation · Issue #4744 · LemmyNet/lemmy · GitHub)
• Resolving reports on a remote instance does not federate if the content isn't removed.
• Removal only resolves reports in some cases, e.g. individual content removal. Some people remove individual content before banning the user, especially when the ban is with content removal, as individual content removals resolve reports on all instances. Bans with the remove content checkbox selected will not currently resolve reports automatically.

Our moderators are also volunteers with other demands on their time: work gets busy, people take vacations, and life outside of Lemmy goes on. But that doesn't mean content that causes distress to users should stick around any longer than reasonable. Harmful content impacts both Lemmy.world users AND users of all other instances as well. We always strive to be good neighbors.

While the devs work on the technical issues, we can work to improve the human side of things. To help keep the reports queue manageable and help reports be resolved in a REASONABLE amount of time we will be enabling global notifications for all stale reports. Open reports older than 1 day will trigger a notification for 1 week every 2 days so as not to overwhelm community moderators endlessly. If a community moderator does not wish to receive these reports, they may simply block the bot, but we still expect them to address unresolved reports.

We expect that this feature will eventually be removed once Lemmy has a better reporting system in place.

As an aside, we recommend that all LW communities have at least two moderators so there is some redundancy in resolving reports themselves, and to reduce the workload on individual moderators. We know this can be harder for smaller communities, but this is just a recommendation.

We recommend that moderators have alt accounts on Lemmy.world to resolve reports that are from federated instances.

As always feedback is welcome. This is an active project which we really hope will benefit the community. Please feel free to reply to this thread with comments, improvements, and concerns.

Thanks!

FHF / LemmyWorld Admin team 💖

Additional mods

We recommend using the Photon front-end for adding mods to your community.

With the standard lemmy-ui, additional mods can only be appointed if the account has made a post or comment in the community.

Photon (https://p.lemmy.world) does not have this limitation. You can use the community sidebar, click Gear (settings) icon, then click the Team tab, and add any user as a mod.

Intro

We would like to address some of the points that have been raised by some of our users (and by one of our communities here on Lemmy.World) on /c/vegan regarding a recent post concerning vegan diets for cats. We understand that the vegan community here on Lemmy.World is rightfully upset with what has happened. In the following paragraphs we will do our best to respond to the major points that we've gleaned from the threads linked here.

Links

• https://lemmy.world/post/18829828
• https://lemmy.world/post/18817262

---

Actions in question

Admin removing comments discussing vegan cat food in a community they did not moderate.

The comments have been restored.

The comments were removed for violating our instance rule against animal abuse (https://legal.lemmy.world/tos/#11-attacks-on-users). Rooki is a cat owner himself and he was convinced that it was scientific consensus that cats cannot survive on a vegan diet. This originally justified the removal.

Even if one of our admins does not agree with what is posted, unless the content violates instance rules it should not be removed. This was the original justification for action.

Removing some moderators of the vegan community

Removed moderators have been reinstated.

This was in the first place a failure of communication. It should have been clearly communicated towards the moderators why a certain action was taken (instance rules) and that the reversal of that action would not be considered (during the original incident).

The correct way forward in this case would have been an appeal to the admin team, which would have been handled by someone other than the admin initially acting on this.

We generally discuss high impact actions among team before acting on them. This should especially be the case when there is no strong urgency on the act performed. Since this was only a moderator removal and not a ban, this should have been discussed among the team prior to action.

Going forward we have agreed, as a team, to discuss such actions first, to help prevent future conflict

Posting their own opposing comment and elevating its visibility

Moderators' and admins' comments are flagged with flare, which is okay and by design on Lemmy. But their comments are not forced above the comments of other users for the purpose of arguing a point.

These comments were not elevated to appear before any other users comments.

In addition, Rooki has since revised his comments to be more subjective and less reactive.

---

Community Responses

The removed comments presented balanced views on vegan cat food, citing scientific research supporting its feasibility if done properly.

Presenting scientifically backed peer reviewed studies is 100% allowed, and encouraged. While we understand anyone can cherry pick studies, if a individual can find a large amount of evidence for their case, then by all accounts they are (in theory) technically correct.

That being said, using facts to bully others is not in good faith either. For example flooding threads with JSTOR links.

The topic is controversial but not clearly prohibited by site rules.

That is correct, at the time there was no violation of site wide rules.

Rooki's actions appear to prioritize his personal disagreement over following established moderation guidelines.

Please see the above regarding addressing moderator policy.

---

Conclusions

Regarding moderator actions

We will not be removing Rooki from his position as moderator, as we believe that this is a disproportionate response for a heat-of-the-moment response.

Everybody makes mistakes, and while we do try and hold the site admin staff to a higher standard, calling for folks resignation from volunteer positions over it would not fair to them. Rooki has given up 100's of hours of his free time to help both Lemmy.World, FHF and the Fediverse as a whole grown in far reaching ways. You don't immediately fire your staff when they make a bad judgment call.

While we understand that this may not be good enough for some users, we hope that they can be understanding that everyone, no matter the position, can make mistakes.

We've also added a new by-laws section detailing the course of action users should ideally take, when conflict arises. In the event that a user needs to go above the admin team, we've provided a secure link to the operations team (who the admin's report to, ultimately). See https://legal.lemmy.world/bylaws/#12-site-admin-issues-for-community-moderators for details.

TL;DR In the event of an admin action that is deemed unfair or overstepping, moderators can raise this with our operations team for an appeal/review.

Regarding censorship claims

Regarding the alleged censorship, comments were removed without a proper reason. This was out of line, and we will do our best to make sure that this does not happen again. We have updated our legal policy to reflect the new rules in place that bind both our user AND our moderation staff regarding removing comments and content. We WANT users to hold us accountable to the rules we've ALL agreed to follow, going forward. If members of the community find any of the rules we've set forth unreasonable, we promise to listen and adjust these rules where we can. Our terms of service is very much a living document, as any proper binding governing document should be.

Controversial topics can and should be discussed, as long as they are not causing risk of imminent physical harm. We are firm believers in the hippocratic oath of "do no harm".

We encourage users to also list pros and cons regarding controversial viewpoints to foster better discussion. Listing the cons of your viewpoint does not mean you are wrong or at fault, just that you are able to look at the issue from another perspective and aware of potential points of criticism.

While we want to allow our users to express themselves on our platform, we also do not want users to spread mis-information that risks causing direct physical harm to another individual, origination or property owned by the before mentioned. To echo the previous statement "do no harm".

To this end, we have updated our legal page to make this more clear. We already have provisions for attacking groups, threatening individuals and animal harm, this is a logical extension of this to both protect our users and to protect our staff from legal recourse and make it more clear to everyone. We feel this is a very reasonable compromise, and take these additional very seriously.

See Section 8 Misinformation

Sincerely,
FHF / LemmyWorld Operations Team

---

EDIT: Added org operations contact info

Hello Lemmy.World users,

yesterday we had an incident where human error lead to accidental removal of 2FA for all Lemmy.World users.
Until the mistake had been corrected and the original state had been restored where possible, 2FA was not enforced for any logins, even if the user enabled 2FA prior to this.

Timeline (all times in UTC):

Approximately at 2024-08-09 09:30 MFA had been removed for all users due to a mistake when MFA was intended to be reset for an individual user.
Around 2024-08-09 22:10 we became aware of the issue due to a user reporting that they were no longer prompted for 2FA on login. We immediately started an investigation to determine the root cause for this and discovered the mistake that was done earlier. Once the root cause was identified we started working on restoring the original state.
At 2024-08-10 01:10:00 2FA had been reactivated for all users that previously had 2FA enabled and hadn't reactivated it on their own since. After additional investigation to identify affected users with 2FA that had logged in during this period, we have sent out individual messages with information about logins to their accounts during this period.

Although less than 2% of our active users have 2FA enabled, we are committed to keep our user accounts as secure as reasonably possible, and we will review our processes for resetting 2FA for individual users going forward to reduce the risk of this happening again in the future.
Fortunately our robust backup database backups allowed us to revert the exact state we had just before this change happened, allowing us to restore the original 2FA secrets for all affected users.
During this period, we have observed a total of 824 logins. 18 of these logins were done by 14 users who had 2FA disabled. Notifications to all affected users who we observed logins for during this period have been sent shortly after publishing this post.
2 users had reactivated their 2FA already on their own, so we have not reverted their 2FA to the previous state.

If you have any concerns that your account may have been compromised during this period due to the lack of 2FA enforcement feel free to reach out to us via email to [email protected] or via PM to @[email protected].

Hey everyone,

We wanted to address a common situation we've seen over the years with some large online forums, reaching out to moderators for questions and concerns.

Typically a good first line of contact is to use the Report button for any posts that need moderator attention. This will open a report for both the community moderators and the site admins. This is normally enough for most larger communities with active mod staff. You may also reach out to your community mods, they're here to help. 💖

We do encourage our communities to take care of their own and want them to always feel empowered to run themselves as they see fit (provided they are following the global site rules). Issues can arise for some smaller communities with only one moderator or situations where the local mod staff is inactive for one reason or another for an extended time.

In these situations, we've seen folks email our ticket system, and while we will try and get back to them, this ticket system tends to get end-user support cases mixed in (as well as a low stream of spammers trying to buy ads 🙄).

What we do want, is to provide a more direct line of contact to the site-admin team, so when ANYONE needs to reach out to us when something is amiss, they can get a timely response. While the team all are on a few different platforms, this tends to create a fragmented approach of not just the WHO, but the HOW to contact us.

While we as a team use our internal chat platform, we want to find a happy middle ground between @'ing us each directly in random chats, and issues sitting for too long in our ticket system.

This new system would be for PRIVATE Messages as a supplement to our Lemmy.world Support community, which we do monitor very closely, and our ticket email [email protected], both for more technical issues. Think of it like the bat signal 🦇🎆!

To this end, we've created two methods for reaching the site-mod team directly.

• A Lemmy Bot User that will relay DMs: https://lemmy.world/u/lwreport
• A dedicated email account: [email protected]
  • We've also provided a Keyoxide profile https://keyoxide.org/hkp/[email protected] for PGP / authenticity

We hope that between both an anonymous platform approach AND a secure email-based approach, we can keep everyone happy 💝

In closing, please, always try and reach out to your community mods FIRST, they usually will know best how to handle a difficult or tricky situation, and use this only when you feel you need to reach out now.

---

• The FHF/Lemmy.World Admin team 💓

Hey all, We are planning to do a Docker upgrade tomorrow 6/30 Sunday, around 1800 UTC. The whole site will be down during the upgrade, but should only be down for a short while. Just wanted to give everyone a heads up. Thanks!

• @[email protected]

Hey everyone,

The Fedihosting Foundation is looking for a new site-admin for Lemmy.World, to help our busy team. This moderator will help with reviewing and acting on reports, weighing in on user content, and helping foster our local communities while acting as a friendly neighbor to other fediverse instances.

You also DO NOT need to have an account on one of our FHF services but WILL have to create an account after joining. Users from other sites WELCOME!

Benefits:

• You'll get to work with a great team of passionate kind, goofy individuals from all over the (lemmy) world!
• We have weekly virtual hangouts where we brainstorm new ideas and catch up with each other. Community for us is not just a buzzword.
• We can also provide work and personal references, as we are a registered legal non-profit.
• While not a technical role, you will also gain exposure to best-in-class industry tooling and processes for large-scale hosted applications (aka modern DevOps).
• We also run a small blog, that we'd love to have folks contribute to.
• Join in on the editorial voice for our featured communities.
• We also understand this is a hobby and that family and work come first
  • If you're having a hard time finding time or are busy, we will always do our best to help and support you.

Applicants should have the following qualities:

• Experience moderating a diverse group of individuals from many geographic, religious, and LGBTQ+ backgrounds.
• Able to commit to at least 5-10 hours a week.
• Excellent interpersonal skills and communication.
• Solid background in conflict resolution.
• Must be able to speak English.
• Works well asynchronously with remote teams.
• Grammar skills optional 😛

Bonus skills (which you will learn if you don't already)

• SQL / Business Intelligence software skills.
• N8N workflow automation
• Web Design (Hugo + GitHub Pages).
• Python scripting

Application process:

• It goes without saying that we will only be considering applicants with a significant positive history of online posts and/or comments, no trolls, please.
• Applicants must be okay with sitting for a video interview and must pass a basic background check.
• While not strictly required, a CV with relevant work and volunteer history will help during the application process.
• We are an international team that works from both North America EST time (-4) and Europe CEST (+2), so we would ask that candidates be flexible with their availability.

Please apply HERE https://forms.gle/epTdTy9Xh9kNFKsQA

(Edit: Updated post, thanks Donuts!)

(Edit2: Thanks for all the feed back on this post, it's much appreciated 💗💗💗)

(Edit3: If you feel like you'd fit in, apply, the req's that we posted are more of a suggestion, then a hard yes or no)

What’s the Problem?

Over the past few weeks we have been receiving large amounts of activity requests from kbin instances, primarily kbin.social. The issue is intermittent and the root cause is unknown. It appears as though some process occasionally gets stuck in a loop on the kbin side. For example, a legitimate user may upvote a post in one of our communities, causing kbin to send an upvote action, then an undo action, then an upvote action again, an undo action again, and on and on.

This is not straining lemmy.world’s infrastructure at the moment. However, it does create enough network traffic to be problematic for the Lemmy network in general because these activity requests get passed on to other instances. Some instances have already struggled to keep up with normal traffic from lemmy.world due to how Lemmy processes activity requests (see https://reddthat.com/post/15383278, for more info). When this kbin issue occurs it multiples our outbound traffic and makes the problem worse. The additional activity requests can easily triple the number of outgoing activities from lemmy.world to other instances.

Short-Term Fixes

As a temporary fix we are currently blocking all incoming activity requests from kbin.social.
Users on that site are effectively "read-only" in lemmy.world communities at the moment.

We are hoping to replace the current block with a rate limit on incoming kbin activities. Unfortunately, it may take a few days before the lemmy.world infrastructure team has time to implement that.

We were initially banning the individual users whose actions were being repeated, with the intention of unbanning them when the repeated requests stopped. However, the problem has persisted, and that game of whack-a-mole is manual and too time-consuming. It also gives the impression that those users had done something wrong, which is not the case.

Long-Term Solution

We have reached out to Ernest, who is the kbin dev and kbin.social admin. So far we have not received a response. Ultimately, this appears to be a bug on the kbin side. Hopefully he will be able to dig into this issue soon and resolve it. Until then, we will try to mitigate it on our end as best we can.

We apologize for the inconvenience. Thank you for bearing with us.

For some recent history regarding this issue please see these comments:
https://lemmy.world/comment/9081380
https://lemmy.world/comment/8961882
https://lemmy.world/comment/9330566

Hello world!

We would like to start by saying thank you ❤, no really 🙏 THANK YOU to ALL the moderators out there!

Without you folks, we would have no one to help keep our community safe and help build the communities both here on Lemmy.World and on other fine instances. To this end, we want to make sure your voices are heard 📣 loud and clear📣.

So, in the spirit of transparency, we would like everyone to know that we are looking to help out the folks working on Sublinks. Over the last several months we have grown to be more than just Lemmy.World. We've added platforms such as Pixelfed and Sharkey to help offer our users more diverse options for expressing themselves online. We still are very committed to Mastodon as well.

We DO NOT plan on moving away from Lemmy as a software platform at this time. Any changes in our core services would need to be discussed extensively internally AND externally with our community members. We firmly believe in the growth of the Fediverse and without the users, there would only be software, and that's no fun!

Sooo...

The Sublinks team has written up a little survey, which we feel is both thorough and inclusive. It covers a wide range of topics, such as user privacy, and community engagement, along with trying to gauge things that are difficult when moderating.

Also please be aware the information collected by this survey is completely anonymous. As many of us in the social sciences background know, if you want the REAL feelings of individuals, they need to feel safe to express themselves.

👉Moderation Survey HERE👈

Please feel free to comment in this thread, we will do our best to respond to any genuine questions.

We look forward to hearing from each and every one of you!

=Sincerely,
Fedihosting Foundation

PS ... also if this sounds like a corporate press release to you folks, we still punk 🤘😜🤘

Removal of piracy communities

Hello world!

Some of you will already have noticed that we have removed some piracy related communities from Lemmy.World during the last day.

Lack of communication

First off, we want to address the lack of communication.

Not everyone in our current admin team has been with us long enough to be aware of the previous issues and discussions related to these communities and the impact this has on our community.

We should absolutely have published this announcement when or before we removed the communities, not hours later. After realizing this mistake, we would have liked to write this a lot earlier already, but we were all busy with irl things, that we just didn’t have time for it.

Lemmy.World is run by volunteers on their personal time, nobody here gets paid for what we do.

Removed communities

Next, we want to explain how we got to the decision to remove these communities.

[[email protected]](/c/[email protected])

A lot of the recent content posted to this community included images instructing users to visit a specific website to obtain a copy of the release that the post is about. These instructions were in the form of Type in Google: visit-this.domain. The domain referenced in these posts is entirely focused on video game piracy and providing people with access to copyright infringing material.

While there may be legal differences between whether one is linking to specific content on a domain or just linking to the domain itself, such as linking to https://en.wikipedia.org/wiki/Online_piracy compared to linking to https://en.wikipedia.org/, we do not consider this to be clear enough in laws and previous lawsuits that linking to just the domain is acceptable, if that domain is primarily about distributing copyright infringing material. We therefore do not allow linking to such domains. Additionally, we do not see a significant difference between posting a link directly to a website and embedding said link in an image, so we treat them equally.

[[email protected]](/c/[email protected])

This community is, for the most part, just about discussing various topics related to piracy. We do not at all mind discussion about this topic, and if it had been limited to that, this community would be fine.

This community, however, contains a pinned Megathread post by a community moderator, which, through a few levels of a pastebin-like site, provides an aggregated overview of various sources of content. Some of these sources are entirely legal content, but it intentionally includes various other references, such as the website referred to from the CrackWatch community, which are primarily intended for copyright infringement.

lemmy.dbzer0.com is willing to accept this content on their instance, as well as the potential legal risk coming from this, which they’re free to do.

We do not plan to defederate from lemmy.dbzer0.com, but we will continue to remove communities that are directly facilitating copyright infringement. @[email protected], the admin of lemmy.dbzer0.com, is a great person, and we have no problems with him as a person. This is just a matter of different risk tolerance.

[[email protected]](/c/[email protected])

Same as [[email protected]](/c/[email protected]).

Why have the piracy communities been restored previously? What changed?

Currently, based on the memories of team members involved in the decision back then, it appears that there was a misunderstanding between the community moderators and Lemmy.World admins in how the community will be moderated going forward, as well as which types of content are allowed.

Lemmy.World expected/assumed that links to websites primarily focused on facilitating distribution of pirated content would be disallowed in these communities.

The community moderators however do tolerate references to such websites, as long as people are not linking to individual content directly.

We suspect that this may have been missed during our original review when restoring the communities, which lead us to previously restoring these communities.

Why now?

We have recently received a takedown request for content not directly related to these communities, but it prompted us to review other piracy related content and communities.

Terms of Service clarification

Last, as we’ve reviewed our Terms of Service, we have updated our wording here to make it more clear what is and what isn’t allowed when it comes to piracy. This was already covered by "Do not post illegal content of any type. Do not engage in any activity that may […] facilitate or provide access to illegal transactions" in section 4, but we have now added section 4.1 to better explain this.

We apologize for the delays in communication.

test 0193