Doesn't lemmy allow the communities to only allow text as posts? Could be a future feature
I feel like this is an underrated idea. Resonates with the whole thing of making a subset of the internet simpler and just like documents, as with the simpler protocols like Gemini etc.
That would still allow links to be posted. Better than allowing image posts, but not a complete solution.
It prevents concerns about hosting CSAM posted by someone else. A categorical improvement I’d say. But yes, nothing’s perfect.
Still better than nothing. Easier for mods of text-only communities to only have text-only posts submitted.
If we then add a few conditions: "no links in the root message" and "OP may not be the first to comment within some unspecified amount of time," that could make it even easier to limit CSAM.
CSAM? What is CSAM? Is it a rewrite of "scam"?
Googles...
Oh no. Oh no no no. Why are people so fucking shit?
Sometimes, when it's too hard to be better and it's easier to be worse, people choose to be worse just to feel different than what they are.
Child Sexual Abuse Material.
Today is a bad day to be named Sam.
See Sam.
See Sam run.
See Sam run down to the appropriate bureaucratic office to change their name to something else.
Lemmy.world is hosted on Cloudflare and Cloudflare has tools to prevent CSAM uploads. https://blog.cloudflare.com/the-csam-scanning-tool
Important note, this feature is only available for US customers.
Also important to note: this feature will only really work against real CSAM. The images that were posted to this community weren't real CSAM but were pictures/gifs of adult models, with titles/captions that would imply they were CSAM. I don't think Cloudflare can do much about those.
At least, the handful of posts that I saw were like this. I'm doubtful that the guy doing this is uploading actual CSAM to the clearnet.
I hope you’re right, because as someone that sometimes browses by new I keep seeing it and it’s upsetting as fuck to think it could be real.
It’s weird they’re targeting asklemmy communities in particular, I don’t think the .ml and .world communities are even related are they?
Nah, they're completely separate communities, so no real link that I can see there.
I dug around a bit, and one of the sites he was using to host the images was some weird 4chan-like image board. But it seems like he may have been trolling them, too, because even though it's a degenerate board full of racist garbage, it's not otherwise full of CSAM, and his posts were also deleted from that board eventually, too. So I don't think they were willingly hosting those images, either. I mention this because I saw some people calling to ban links to that domain, which probably should still be done because it's a trash website, but not because it's a CSAM haven of any sort.
It makes me think that this isn't targeted at any one community, just some random weirdo trying to make the internet a worse place wherever he can.
Well... it seems there's some issue with post removal federation. There's still 2 posts visible from my home instance.
And now it's definitely cached on our instance. And every other instance with pict-rs enabled.
This is what makes me scared of self hosting an instance. I would basically be hosting it. And I would be responsible for such content.
Might be worth mentioning on !fediverse@lemmy.world
Ok, this is interesting. There was one just posted to !asklemmy@lemmy.ml, but it got removed from my instance as well.
The account looks deleted from lemm.ee, not found on lemmy.world, banned on lemmy.ml, and empty on lemmy.dbzer0.com.
Perhaps it's account deletion that doesn't federate properly.
account deletion does not federate in general, only banning (+ content removal) does
Is there a way AskLemmy and other major communities could prevent new users from making posts in the future?
Like an account has to be over a month old to post for example. Maybe that could help prevent these kinds of disgusting attacks
I don't know if Lemmy has a moderator tool available that could do something like that though.
I don't quite like that idea. It's something I really hated on Reddit. It just discourages new people from joining. Besides, you could self host an instance with accounts claiming to be made in 1970.
Unfortunately there aren't many great options right now. No one likes it, but people posting CSAM are the ones to blame there. They quite literally ruin it for everyone because they're butthurt about something happening they didn't like
Do we know what they are butthurt about? There is never an excuse for what they are doing, but I’m curious what happened to set it off if a reason I known
Nope, they're too cowardly to use their actual accounts and are making them anonymously. All we know is that rather than being mature about a mod action and simply leaving and creating an account elsewhere they decided to do this.
Gotcha. Thanks.
Good point. I didn't think about how easy that would be to fake.
That said I would still prefer it to some subreddit's cryptic karma requirements. If it worked I mean.
And here's the spot where I point out that using a blockchain for recording accounts would be a good technological fit for a decentralized system like the Fediverse, and then get pilloried for being a "cryptobro" or whatever.
Seriously, all that you'd need to use the blockchain for would be a basic record of "this account holder has this name on that instance" and you get all sorts of unspoofable benefits from that. No tokens, no fancy authentication if you don't want it, just a distributed database that you can trust.
this account holder has this name on that instance
How would that help? A spam bot could just make lots of blockchain wallets.
you get all sorts of unspoofable benefits from that
what are the benefits? I struggle to come up with any benefits.
Instead of preempting criticism/downvotes, perhaps it would help to more clearly describe what kind of implementation of blockchain you mean?
If it would still involve some questionable consent mechanism that either consumes a large amount of energy (Proof-of-Work) or may benefit larger stakeholders (Proof-of-Stake), then even setting aside the cryptocurrency associations, I'm not sure it's necessarily worth it. However, if I'm not mistaken, there are implementations that may not require those, but may still provide the sort of benefit you're suggesting, aren't there?
Maybe. Some discussion going on at the moment about how to handle it.
Most !asklemmy@lemmy.world questions are better fit for !casualconversation@lemmy.world anyways.
Some could go to !nostupidquestions@lemmy.world too but tbh I think the user base as a whole is still too low for these differences to be meaningful to most people.
This is exactly what they wanted.
Thanks goddamn, WTF is wrong with people?
Thank you for your work on it
i don't think that's going to be very effective. i havent seen any of this but it sounds like a sybil attack. asklemmy isn't the only vector. lemmy.world is going to need to do something, possibly drastic.
It's not even just lemmy.world, the same user is reposting to ask lemmy on lemmy.ml now.
What are the victory conditions or payoff for someone posting that here?
Payoff: could be related to the coming Reddit IPO, to make alternatives unappealing or unsustainable.
I suggest limiting new accounts from uploading photos for 3 days, to prevent abuse.
3 days should be enough to make most people think twice before doing something so stupid, harmful and illegal. Most users don't upload photos right as they sign up anyway so this effect to legitimate use should be negligible.
Sweet summer child.
that doesn't do anything, they'll just register accounts in advance and wait some days.
we've even had spam recently from accounts that had been dormant for months, although it was a different kind of spam.
Please don't post about US Politics.
1) Be nice and; have fun
Doxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them
2) All posts must end with a '?'
This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?
3) No spam
Please do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.
4) NSFW is okay, within reason
Just remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com.
NSFW comments should be restricted to posts tagged [NSFW].
5) This is not a support community.
It is not a place for 'how do I?', type questions.
If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.
Reminder: The terms of service apply here too.
Logo design credit goes to: tubbadu
