So, lemmy seems to be flooded with spam bot accounts at the moment. Look through the table of servers on fedidb (https://fedidb.org/software/lemmy) and notice how there are these huge instances without any active users (MAU).

Also notice how startrek.website has 9000 users for 276 active users this month.

From memory, when I signed up, there was no email requirement or captcha or anything.

Admins … maybe you want to tighten things up?

  • th3raid0r@tucson.social
    0·
    2 years ago

    Admin of tucson.social here - I haven’t noticed an attack on my instance yet but I do have Captcha AND Email validation turned on.

    Since my instance is for Arizonan’s only, I could do a geo-ip block if pressed, but obviously that won’t work for places like startrek.website.

    If any admin needs assistance, I recommend enlisting some help over at programming.dev - likely the best instance for collaborating on our lemmy servers.

    • Faceman🇦🇺@discuss.tchncs.de
      1·
      2 years ago

      geoblocking is also a bit of a blunt instrument, many people either use network wide VPNs or even sometimes the ISPs IP blocks are mislocated (my work ISP has my IP in a different state)

    • Freeman@lemmy.pub
      0·
      2 years ago

      I just closed my registration, was onboarding it and syncing up communities in prep for a 7/1 rush. Haven’t seen any attempts yet. But will probably just work out a kbin instance and move on. Too much drama with the lemmy devs.

      • th3raid0r@tucson.social
        1·
        2 years ago

        Agreed, and my one call to action post to get other Admins to give a crap fell on it’s face over on beehaw. It seems that many admins really think that every instance should use manual registration, or other tools. All in all, the message I got was “The devs don’t have to listen to anyone”.

        I’m now of the opinion that most lemmy admins aren’t people I want to associate with, they seem to be all about “open source” until it collides with concepts like “collective responsibility” and you’ll get a response in the individualist line of reasoning of “Oh, just fix it yourself”.

        Kbin is sure lookin’ pretty good these days now.

        • KNova@links.dartboard.social
          1·
          2 years ago

          I think the tone of your other post and the call to essentially brigade GitHub and demand changes from the devs put a lot of other instances admins in an uneasy position. You also said that instance admins were “abdicating their responsibility” to demand things of the devs.

          Isn’t jumping ship to kbin abdicating your responsibility to stay on and help grow Lemmy…?

          To be fair I have no ill will with you, but that post stunk of open source entitlement. https://tommcfarlin.com/open-source-entitlements-users/

        • Freeman@lemmy.pub
          1·
          2 years ago

          Yeah agree. Like I get their captcha is bad. But why rip out a piece of the puzzle without a solution? Doesn’t seem to be conflicts just “I guess it’s time”. It’s a weird hill to die on. Just defer the removal until a pr for a better alternative. Security is an onion, no one thing is gonna stop spammer and bots.