lemm.ee plans for mitigating image upload abuse
sunaurus @ sunaurus @lemm.ee Posts 49Comments 331Joined 2 yr. ago

This should do the trick: https://github.com/LemmyNet/lemmy/commit/c74b92e5fd3b6e4b815cb76768bb8b042784ef6c
(I am fairly certain that this is the only way external post images get saved locally, but if I find additional ways later, I will update this comment)
Yes, my goal is to submit PRs to the main Lemmy repo with all of these changes
Cloudflare CSAM protection is not available outside of the US, unfortunately.
As a test, I ran this on a very early backup of lemm.ee images from when we had very little federation and very little uploads, and unfortunately it is finding a whole bunch of false positives. Just some examples it flagged as CSAM:
- Calvin and Hobbes comic
- The default Lemmy logo
- Some random user's avatar, which is just a digital drawing of a person's face
- a Pikachu image
Do you think the parameters of the script should be tuned? I'm happy to test it further on my backup, as I am reasonably certain that it doesn't contain any actual CSAM
Any thoughts about using this as a middleware between nginx and Lemmy for all image uploads?
Edit: I guess that wouldn't work for external images - unless it also ran for all outgoing requests from pict-rs.. I think the easiest way to integrate this with pict-rs would be through some upstream changes that would allow pict-rs itself to call this code on every image.
Assuming the leak is real (I did not attempt to verify if any of the leaked passwords work myself): why the heck are popular services in 2023 still using MD5?
I'm also really disappointed by the fact that many users & even many admins (people with @iracing.com and @tradingpaints.com e-mail addresses) clearly don't use password managers.
The previous Hexbear thread was locked after an initial productive discussion, because the thread turned into nearly constant insults and attacks (and this from users of all instances, including lemm.ee). It was creating massive moderation workload, and I think locking the post was preferable to asking admins to spend huge amounts of free time on handling reports.
This post seems even more likely to devolve into the same kind of attacks, and if it does, then it will also be locked. Let me be clear that arguments over which government/media/researchers should be trusted are totally fine on lemm.ee, as long as these arguments don't turn into name calling, abuse, and harassment.
OP: Please always report comments that harass you. If you find that community mods are not dealing with those comments, please stop participating in that community (for future reference, if such a community is on lemm.ee, please definitely also report the community to lemm.ee admins).
I know that walking away from an argument is extremely difficult, but in the threads you linked, there is an irreconcilable disagreement about which sources can be trusted, and most participants seem convinced that they have the full picture and know all the facts. I have a hard time remembering any time when such a discussion has lead to anything valuable. In fact, I think such discussions inevitably lead to the worst kind of low quality insults and trolling from some of the most aggressive posters in any community.
While I know there isn't a consensus on this topic among lemm.ee users, I personally don't think defederation is the correct approach, especially after reading through a lot of lemm.ee user comments about the topic recently. I think user-level instance blocking will solve the problem for most users who are not happy with this.
Just a side-note: the way some people casually throw around the insult "nazi" is completely ridiculous (and I don't just mean hexbear users here - I've seen it from users of many instances - but it seems to almost always come up in any thread about hexbear). In my opinion, this only serves to weaken the memory of crimes against humanity that nazis committed. If anybody reading this finds that they often call others on Lemmy nazis, maybe have a deep think about whether you haven't been participating in softening the meaning of "nazi".
I think the only answer here is that we need Japan to create "Hikaru no Lemmy", where an ancient spirit of a dead Lemmy poster possesses a young boy called Hikaru, who proceeds to amaze the world with some top tier Lemmy posts 😛
Or more seriously, I'm a huge fan of this infographic and share it with people whenever I get asked about Lemmy: https://i.imgur.com/b2QuYAR.png
Not sure what you mean by ton of fascists originating from lemm.ee, but please be sure to report users if you notice something weird, rather than trying to create random defederation in the fediverse.
Generally, absolute free speech is not a particular goal on lemm.ee. For example, bigotry is removed and authors are banned. In my view, kind, understanding, and thoughtful content is far more interesting than free speech absolutism.
I've received this feedback a lot and I'm starting to see that cultural backgrounds probably have a very big effect on how "Kremlin propaganda" is understood. I think a major missing piece of the puzzle is a lot of the Kremlin propaganda is generally just presented in Russian, and probably the vast majority of Lemmy users don't speak any Russian. I'll have to think about this topic a bit more.
It does indeed go to three places, but the third one is kind of useless in most cases:
- The community moderator(s)
- the instance admin(s) of the community
- the instance admin(s) of the reporter
Thank you for respecting the call to to be kind, it's greatly appreciated
I just want to clear up that lemm.ee admins do not receive any reports about lemm.ee users made by hexbear users on non-lemm.ee communities. It's a serious shortcoming in Lemmy right now, and a huge struggle for us.
If somebody signs up on lemm.ee, and only posts garbage on other instances while managing to remain unreported by any lemm.ee user, then it's basically invisible to our own admins. Hopefully this is something that can be improved in future versions of Lemmy.
Good response, thank you for being civil
Thanks for the civil comment. I can for sure see how lots of western iconography (or, really, symbols of any nation) would bring up horrible memories in different parts of the world. It's definitely really unfortunate, but I don't think there are any countries on earth that have no horrible people and no horrible deeds in their past.
That is my understanding as well, and I'm very happy to hear you confirm that.
First, personally, I am one of the people who accused him of engaging in behaviour that was tantamount to Holocaust denial. I did so after his repeated, blunt, assertions of false equivalency between the undisputed horrors of Nazi Germany and those - some true, many disputed, some outright refuted - of the Soviet Union. I explained that this practice is known as the ‘Double Genocide Theory’ and even linked to articles by Jewish historians and Holocaust academics that explained the issues with the theory and the history of its official use to whitewash far-right movements, particularly in post-Soviet states. Instead of receiving a modicum of serious engagement he instead deliberately and grossly misrepresented and dismissed not only my point but the work of the Jewish academics I linked before leaving with an insult.
Your position is impossible to argue against in good faith when you start with "any Estonian who is critical of both of their occupiers is a holocaust denier".
Let me also say for the record that I have not once, in any of my posts, attempted to compare the "level" of evil of the soviets and the nazis. If by "assertions of false equivalency" you are referring to the fact that both the nazis and soviets did indeed occupy my country and commit crimes against humanity here, then sure, that is something I have been asserting. Still, I have never tried to downplay the horrors the nazis committed, I have only condemned them in the strongest possible terms. I am asking to please include this context about me if you ever feel the need to call me a holocaust denier. Please also remember that I am a real human with a public identity, and words you post on the internet can have a real effect on my life.
As for "leaving with an insult", I do not believe I have written a single insult to anybody on hexbear (or elsewhere on Lemmy), but I'm sorry if you feel like I was rude at any point. I was simply trying to disengage, because it was clear that the more I interacted on hexbear, the more personal attacks I was receiving.
Secondly, what exactly constitutes Kremlin propaganda?
I think this question is bait, but I will answer in good faith with an example to hopefully drive the point home.
Posting "[hammer and sickle] 10 reasons why we need communism..." is clearly not Kremlin propaganda. Posting "[hammer and sickle] Ukraine shouldn't even exist, long live CCCP" is clearly Kremlin propanda.
This approach makes so much sense from a business perspective.
How many here have this experience: out of my entire friend group that I grew up playing video games with, I can't think of a single person who kept pirating games after acquiring disposable income, even though we all exclusively played pirated games as teenagers. Without piracy, none of us would have had access to any games, and very likely none of us would still be into gaming today, spending probably thousands of euros every year on games, consoles, PC components, etc.
I think you make a fair point, but Lemmy has one major strength that lobste.rs does not have here: Lemmy is federated, so you can split up your social graph between multiple instances, or as many people do, you can even host your own instance just for your own inner circle.