Admiral Patrick

I’m surprisingly level-headed for being a walking knot of anxiety.

Ask me anything.

I also develop Tesseract UI for Lemmy/Sublinks

Avatar by @SatyrSack@feddit.org

  • 7 Posts
  • 28 Comments
Joined 2 years ago
cake
Cake day: June 6th, 2023

help-circle





  • For a website, forum, blog, etc, at least the damage caused by poor security would be limited to just that platform. Unfortunate, but contained. With federation, that poor security becomes everyone else’s problem as well. Hence my gripe lol.

    It’s been so long since I setup my instance, I honestly don’t recall what the default “Registration mode” is.

    I’m but a small drop in the larger fediverse, but I do develop a frontend for Lemmy. I actually coded the “Registration” section in the admin panel to nag you if the config is insecure. lol

    It will still let you do it, just with a persistent nag message on that page.




  • So let’s say instance A and B are defederated from each other, but both are federated with instance C. After a user from A posts something on C does every user from B get to downvote everything?

    Yes. Instance A will not see the downvotes from instance B, but instance C would.

    The only defense is that mods and admins can see the votes and, if something like that is suspected, they can take action (ban the accounts, consider defederating from instance C, etc).


    1. Have an actual mission statement beyond just being a general purpose instance (e.g Beehaw, my instance, most of the topic-based ones, etc)
    2. Replace the default frontend with anything better than Lemmy-UI
    3. Building on #1, try to curate the experience into something positive.
    4. Block the toxic aspects as best you can by default. Don’t make new users discover and deal with the toxicity on their own. There’s plenty of other general purpose instances that will let people rawdog everything (and everyone) on the Fediverse if that’s what someone wants.
    5. Focus on “quality over quantity” and block all the content repost bots / defed from the instances that do nothing but repost Reddit content. Disallow AI slop in all its forms and focus on human interactions.
    6. Consider hiding/disallowing Politics communities and don’t allow accounts who post with an obvious agenda.
    7. Systematically Identify and ban accounts that do nothing but downvote (if everything here displeases them so much, perhaps they should go elsewhere, ya know?)
    8. Clean up duplicate posts; even if they’re slightly different, seeing the same story posted 10 times gets old for users.









  • It’s been a long-running thing for blogspam to appear here. Usually admins will step in at some point and squash the accounts, but any time I see anything.blogspot.com as a post URL, I look at the account history and see if that’s all they’re posting. 9.9 times out of 10, that’s all they’re posting, and I ban them with content removal. Same for other sites that pop up out of nowhere that get spread from a brand new account.

    I have no idea what the objective is (SEO, ad views, etc), but it’s been a thing as long as I’ve been on Lemmy.

    Thanks for the list: some of those I had yet to ban.



  • If anyone has other suggestions to mitigate this (maybe a Greasemonkey snippet to require a click to load inline images as a patch for the lemmy Web UI?), I’m all ears.

    Tesseract dev here.

    Tess can do image proxying separately from Lemmy

    It has the ability to proxy images (separately / better than the Lemmy built-in method) both local and remote (e.g. to outside image hosts). The hosted instance (tesseract.dubvee.org) has that enabled but each user must enable it in settings (Settings --> Media -> Proxy Images).

    For Tesseract installs run by other instances, it would need the server-side component enabled by the instance admins before the user setting will show up to be enabled by the user.

    If you see the “Proxy Images” options in Settings -> Media, then the admins have enabled the server-side component. If not, you’ll need to ask the admins to configure/enable media proxying. If you’re self-hosting it, then it may not provide any additional privacy unless you’re running it in a cloud server or somewhere other than where you’re accessing it.

    It also has the option to disable inline images (Settings -> Post and Comments -> Inline Images). I’ve confirmed this also works for DMs.

    After reading this post, I’m going to push out a hotfix (hopefully this evening) that will disable inline images in DMs by default. If someone you trust DMs you, you can just click on the image link to view it in a modal (like any other link preview).


  • Depends on what I’m transferring and to/from where:

    • scp is my go-to since I’m a Linux household and have SSH keys setup and LDAP SSO as a fallback
    • sshfs if I’m too lazy to connect via SMB/NFS (or I don’t feel like installing the tools for them) or I’m traversing a WAN
    • rsync for bulk transfer and backups
    • Snapdrop/Pairdrop for one-off file/text shares between devices with GUIs (mostly phone <–> PC)
    • SMB if I’m on a client PC and need to work with the files directly from the fileserver
    • NFS between servers
    • To get bulk data to my phone (e.g. updating my music library), I connect via USB in MTP mode and copy from the server via SMB or sshfs.