• Head admin @ lemm.ee, a general-purpose Lemmy instance
  • Creator of lemmy-ui-next, an alternative Lemmy frontend
  • Lemmy contributor

ko-fi

  • 0 Posts
  • 23 Comments
Joined 1 year ago
cake
Cake day: June 9th, 2023

help-circle
  • That particular instance was very recently the source of a lot of CSAM and spam, so that’d be why. A lot of instances recently upped their security to combat that.

    Just to add some more context, there was an attacker recently who created accounts on several Lemmy instances and used those accounts to spread CSAM. On lemm.ee, this attacker created 4 accounts over a 24h period, but was not able to upload any CSAM to our servers due to our stricter upload rules (we require 4 week old accounts to upload any images at all), and all of the 4 accounts were removed very shortly after creation (most of them within an hour of signing up). The attacker gave up trying to use lemm.ee very quickly, and moved on to other instances.

    I just wanted to share this context to illustrate that while indeed the different measures we implement to protect the instance can have a negative impact on legitimate users, I really believe that overall, they have a net positive effect. In addition to Cloudflare DDoS protection and image upload restrictions, we also have a separate content-based alerting layer on top of Lemmy, which allows our admins to quickly notice when something suspicious is going on. As another example, this alerting has allowed us to extremely efficiently deal with a current ongoing spam attack on the Fediverse, and I bet many lemm.ee users aren’t even aware of this attack due to the quick content removal. We will continue to improve our defenses, and hopefully try to limit the impact on real users as much as possible, but some trade-offs are necessary here in order to protect the overall userbase.


  • The nice thing about Lemmy is that you can always host your own instance, even if it’s only for your own individual use. You can basically use your own instance as a proxy - other instances will not see how or from where you are connecting to your instance.

    Large instances are being attacked almost constantly at this point in smaller and bigger ways. Almost all measures we implement to combat these attacks come with some trade-offs for the rest of the userbase.









  • The problem at hand is not about the usability (UI/UX, performance, etc.) of Discord but rather it’s private, closed source for-profit existence being used as a “support” channel for a free and open (source, platform, communication) environment.

    I agree with you in principle, but on a pragmatic level, it’s very hard to disconnect UI/UX/performance from everything else. I think it’s OK to acknowledge that Discord has a weakness when it comes to not being OSS, but a strength when it comes to UX, and I also think it’s OK to take advantage of that strength for users that want to do so.

    Just to be fully clear, I am never planning to make Discord the main communication channel for lemm.ee announcements, nor to make users feel like it’s in any way necessary for them to use Discord just for lemm.ee communications. I am also active on Matrix constantly, and read most of what happens in the Lemmy Matrix channels. Any user that wishes to reach me over Matrix can do so.


  • I think Discord is great, as long as you account for its shortcomings:

    • It should be treated as ephemeral - up to the point of “the service could completely shut down tomorrow”
    • It should not be treated as fully private or secure

    I love how snappy it is (I never have to wait minutes for messages to load, as I do in Matrix), and also how there are a ton of Lemmy users who have Discord open in the background anyway. While I wouldn’t ever propose moving something like the main Lemmy communication channels to Discord, I do think it’s much easier to have IMs with regular Lemmy users on Discord than it is to do so on Matrix (as in my experience, most regular users do not have a Matrix client installed).

    By the way, lemm.ee also has a Discord server. It’s only treated as a secondary channel, all announcements are posted in our meta community on Lemmy itself, and just linked to from Discord, but it’s still nice to have IMO.






  • sunaurus@lemm.eetoFediverse@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    44
    arrow-down
    1
    ·
    1 year ago

    As of Lemmy 0.18.1, cached copies on other instances do not disappear if the original instance has died.

    In theory, it might even be possible to actually clone a cached copy into a new local community. This would require some database hacking, so not recommended unless you’re familiar with Lemmy code and SQL.