Removed Kbin.social communities

lwadmin@lemmy.worldmod to Lemmy.World Announcements@lemmy.world – 992 points –

Hello everyone,

Recently we have been dealing with a lot of spam from the kbin.social communities. There is a bug in kbin where moderation tasks are not federated to other instances. That means even if a moderator over at kbin removes a post, it will still be visible on Lemmy instances and it's up to the instance admins to clean it up.

There have been talks about this in the Lemmy admin channels with some instances considering defederating from kbin.social - and others who have already made that step.

We don't want to defederate, because we know this would impact the kbin community greatly - but we have to do something. That's why we have currently removed most of the kbin communities from Lemmy World, making them unavailable to our users. But the kbin users can still view and interact with our communities and users.

This means that those spam-accounts will stil be able to post in our communities too, but at least it makes the task of moderation already a little bit lighter on our team. But it was either this or defederation. The moderation tools on kbin are in an even worse state then Lemmy's.

We will keep monitoring the situation and will keep you up to date should anything change.

We hope you understand and support our decision.

The Lemmy World team

109

Hi - mod of a small kbin.social mag here - @13thFloor - and a lemmy.world user. Is there anything we can do on our end to help mitigate the problem, or make it easier to flag spam that makes its way to Lemmy? I'd be more than willing to include a note to the lemmy.world admins if a spam post is deleted off of a mag I mod here- just need to know who to contact.

Side notes - Ernest (kbin.social admin) just responded on the spam issue here. The community has been actively working over here to flag and remove spam accounts (I've personally flagged close to 100). According to the most recent news from @ernest earlier last week, we've got a software update incoming, and a magazine cleanup in the works that will hopefully make an impact.

Heya! Not really. It's just a few communities that are being spammed really hard, so only those are removed. I think the work you're doing by flagging these spam accounts is already very helpful to Ernest and his team. He himself was kind enough to join us in this thread and give us some more information. For now all we can do is wait..

Thank you for your patience and understanding :)

Hi - got a note from a user that @13thFloor isn't federated over there any more as of yesterday. Looks like @scifi, modded by @inkican, was as well. Was there a reason these communities were defederated?

Defederated is only on instance-level. A community can not be defederated, but it can be removed or purged. So far the only action we have taken is removing some of the Kbin communities (or magazines as they are called on kbin).

Your community is still available on https://lemmy.world/c/13thFloor@kbin.social

If you want to see which instances we are currently defederated from you can look that up here.

So no, we didn't block your community. But I do see some posts are not showing up on Lemmy World. Not sure why that happens, there haven't been any changes on our end. We will update to Lemmy 0.18.5 tomorrow which resolves some federation issues.

Edit: It actually was removed. now restored. Passed info to other admins.

Thanks for the update. I'm still getting the following error across multiple browsers when I hit https://lemmy.world/c/13thFloor@kbin.social:

Error!
There was an error on the server. Try refreshing your browser. If that doesn't work, come back at a later time. If the problem persists, you can seek help in the Lemmy support community or Lemmy Matrix room.

Hoping it gets resolved with the update - was worried we'd screwed something up and gotten on your removed list.

Huh. I'm sorry I have to check what happened but the 13thfloor was actually removed. I must have missed the 'removed' tag earlier. I restored it and I'll make sure the other admins know not to remove that community. So it should be ok again.

How is it so easy to create spam accounts with Kbin? What kind of account validation is implemented? Email? Enforced 2FA? Just a curious dev who hasn't started their own lemmy or Kbin instance yet.

There's just email verification at the moment. 2FA is on the roadmap, but I'm not sure if it will be in the next release. Here's the kbin codeberg site for more detail.

It's a start, but 2fa can't stop spam.

If one can automate account creation including saving totp secrets, you suddenly have 2fa authenticated bots able to send spam.

Maybe you could get around that to some extent by leveraging sms verification during account creation, but how do you set that up to prevent burner numbers? Or smishing?

These are hard problems to address

Not to mention there are a lot of fediverse users who moved here because they didn't want to give away personal information like their email and phone number.

Also a lot of real people might want to sign up without needlessly giving away personal information like thier phone number...

Here's one (possibly dumb?) idea I just had: implement a shadow ban for a period on new accounts so moderators can check what they're posting before they're allowed to post.

When I signed up it was email + captcha. I cannot find even an option for voluntary 2FA.

I don't know the details but people who wanted to work on Kbin and looked into it say that it is a much less developed platform overall (i.e. not fully a beta and more like still in alpha, e.g. lacking a true API), but it does offer benefits socially (to further disconnect from the originators of the Lemmy software) and to have another codebase that offers federation.

Lemmy is also more of alpha-quality software. The admin tools are pretty much non-existent. On my own instance, I've had to go into the database to fix issues a lot using straight SQL, and I have like ten users on the platform. One of those issues caused my admin account to no longer being able to log in, another caused the whole instance to be down.

Oh that's interesting. Kbin lacks a formalized API (or at least it did - possibly this next update was going to address that and yet Ernst did say something about shifting priorities so maybe that's bumped now) so I got the impression that Lemmy was further along, but yeah they both have a ways to go to catch up to the decade or so of work put into Reddit. Although the latter manages to find new & innovative ways to break itself constantly anyways so maybe both Kbin and Lemmy will meet it somewhere in the middle sooner than we might think? :-P (and yet slower than most people would like I'm sure:-D)

Yeah it seems like it's grown organically from a POC, which I think is sort of what Lemmy did too. I feel like this concept is ripe for a platform which has been designed from the start then implement.

Devs learning in real time why social media (especially decentralized) should be designed moderation first in design.

Seems like a very reasonable compromise to deal with the situation.

Thanks again for the transparency and keeping everyone in the loop.

Hopefully this is resolved quickly. We are stronger together.

Quick reminder that kbin was still fairly early in development when the reddit exodus began and sped things up much sooner than anticipated. A few teething issues are to be expected and Ernest, the dev, has been open and communicating about what's going on.

Quick reminder that kbin was still fairly early in development when the reddit exodus began and sped things up much sooner than anticipated. A few teething issues are to be expected and Ernest, the dev, has been open and communicating about what’s going on.

Given that kbin is written in PHP, I honestly don't see much of a bright future for it. It's not like hobbyist developers line up to write PHP.

Modern PHP is pretty pleasant once you learn the syntax IMO. It’s not 2005 any more

Modern PHP is pretty pleasant once you learn the syntax IMO.

And yet whenever programming languages come up, Rust comes out as a more popular whereas PHP is the "My job requires it but it's not what I'd do for fun" language.

Far more people already know PHP than Rust, though. They’re also very different languages. While the syntax for Rust is nicer than other languages used for systems programming, there are people who question whether it is really appropriate for a web app. Certainly nobody questions whether that’s what PHP is good for.

Only if PHP and Rust could even be compared. lol totally different tools for different jobs.

And yet one is used for kbin and one is used for Lemmy and somehow both kinda achieve the same things of a Fediverse Reddit-like.

The system is based on the bleeding edge of the PHP stack, using PHP 8.3x and Symfony 6 as the framework. There's plenty of devs out there, especially symfony ones. The main issues I've found is pulling in people who are interested in the ActivityPub side of the project.

I think a few more months and most of the user-facing UI/UX issues will be improved. The moderation side, along with quality of life admin tools are definitely lacking though.

Spam has consistently been the death of the open internet, even the big tech silos struggle with spam (Instagram for example -- despite having incredibly invasive techniques for identifying "genuine" users -- is STILL inundated with spam commenters). I think instances on the fediverse should reconsider their open registration policy, either totally close registrations when you reach an agreed upon critical mass of users, or adopt some form of invitation or application system for new users. I believe Mastodon supports both in the software.

I agree. A hard limit would be a good idea, it'd nip a lot of problems in the bud.

I'm as idealist as the next guy, but I was also a hellacious misfit once, so I know what it feels like to be a hate-fueled asshole. I really hope these Fediverse idealists have started to understand that assholes do exist, and they must take measures to defend themselves.

Combat is a part of life. Violence is an aspect of competitive biology. You're gonna have to deal with attacks here. Forever. Just get the fuck used to it, you're at war and will be until you die or leave this place. Largely due to politics and the way open communication has not just empowered good people to create good things, but has also empowered extremists and criminals too. And they exist and have goals too, in case any of you people fucking forgot.

Well, shit. I had totally forgotten.

I’m making a note now.

For real though. You’ve summed it up pretty good here.

Thanks for not cutting us off. I sub and post to a lot of lemmy.world communities, some of them small, and wouldn’t want to have to stop contributing or make a new Lemmy account.

Thanks for not defederating us! -Kbin users

Ernest is working on a major update for Kbin but it might be still a couple weeks out.

We are well aware of what's going on with kbin and the development team. That's why we don't defederate because we have hope that they will fix things soon.

I apologize for causing you trouble. I'm trying to resolve the situation as quickly as possible, but apart from the usual spammers, there have also been organized campaigns where, for an hour on Sunday mornings, our instance was flooded with spam from hundreds of accounts. This, of course, is causing federation issues. I've changed my priorities regarding the roadmap, and additional tools will be released soon. I will also ensure additional moderation. I will also get in touch with admins from other instances - my absence was due to personal issues I mentioned recently. Thanks for your understanding, and best regards.

Hey Ernest,

Having dealt with spam waves ourselves we are certainly understanding of the situation! I read your status updates and what has been going on. That is also why we choose to close the problematic communities/magazines instead of defederating.

We really hope that you find the time and peace to resolve these things. There is no bad will here, we know that these things need time. If there is anything we can do to help feel free to reach out.

So that's why the modlogs were going ballistic. Oh, well, I hope things are fixed soon.

There's been a heap of development going on with kbin recently, with a release upcoming. Overall the development process has been a bit slow with Ernest (the guy who owns the project) having personal issues to resolve.

Definitely the moderation process needs to be improved so that we have better ways of addressing spam so it doesn't bother other instances.

Personally I'm of the opinion that we should be using a metric based system where we weigh in the users date or creation, overall interactivity, upvote / downvote ratio and other data to potentially flag spam users. But honestly fighting spam is really hard and all of that would have to be built (plus it's a public repo so bad actors could look for how this is pieced together and find new ways to get past)

Pretty unfortunate, but definitely better than defederating. I'm glad there can still be a link to some degree. Hopefully the moderation tools on both platforms improve soon. I appreciate the transparency and willingness to take on more work in order to maintain some link. I think it is important for the integrity of the fediverse. But also important to remember you all are doing this in your spare time.

Damn, I main Kbin 🙃

Same here, on desktop it is my go-to. Sync doesn't support it yet, so can't use it.

You can technically use Artemis for kbin though at the moment it only supports artemis.camp (another kbin instance) and I don't know currently how long it is until other kbin instances work as well.

Manager of Managers (MoM) will be required long-term it sounds like.. thanks for the good work all.

That makes sense, to be honest: add a layer of complexity in the software (such as federated instances), add a layer of management.

Yep; ideally, each person should be able to specialize. I hope there are enough well-intentioned and knowledgeable volunteers. Over reliance on free mod labor is part of what ruined Reddit

I'm worried kbin development is stalling.

Keep fighting the good fight boys. It's only a matter of time until either of these websites surpass all the others. Is there a way I can donate?

Do you guys have a some sort of deadline for this kbin issue get fixed before defederating?

It's more a treshold than a deadline. Should it become too much for our team to deal with we'll consider our options again.

So, that means no one from Lemmy.World can see https://kbin.social/m/functionalprint anymore?

This thread is now broken?

https://kbin.social/m/functionalprint/t/353785/Replacement-wheel-for-a-child-s-RC-car

Maybe I misunderstood, is it some kbin communities (for now) or all?

I can see https://kbin.social/m/functionalprint just fine from my own lemmy.world account, if that helps.

This doesn't involve all of Kbin, just a select few communities that have been hosting waves of spam.

Thanks for checking that.

Yeah, it does appear to be select communities so far. I know a few were spammy and even I blocked them.

Hopefully kbin developer will get a chance to update the tools/site so us moderators can help out and keep the spam controlled so it doesn't spill into other instances.

1 more...

That sounds reasonable. Thanks for not just slamming the door, frankly I wouldn't have blamed you if the reason is "hey, this adds a shitload of work". It's neat that this is an available workaround.

That's a shame, but it is what needs to be done

I think it would be a good idea to introduce limited Federation like what they have on Mastodon into lemmy, where communities from that Instance wouldn't be federated unless explicitly allowed by the Admins of the Instance who put said block in place. It wouldn't be good for all cases but it could work for ones like this where the communities are the problem and the majority of the users there are fine.

Is it all the communities? If theres still some kbin social communities on here, does that mean its probably not part of the troublesome communities and probably wont get removed?

I don't get what's the obsession with SPAM in the lemmy world. Just let thing settle for themselves or continue down the defederation route and end up without users and/or with a meaningless presence on the web as a platform :)

I don’t get what’s the obsession with SPAM in the lemmy world.

Maybe because you are not moderating and it's not taking your free time to do so.

Just let it be... or use something automated like Akismet.

Instance admins can't "just let it be", they're responsible for whatever they let users publish on the instance.

Akismet is a centralized system with price tiers depending on API call volume... kind of unfit for a decentralized platform, and too similar to why people ran away from Reddit.

Fire up something open-source instead. Even the engine behind rspamd would work for lemmy.

Small communities are still meaningful to community members. Cutting off useless appendages doesn't make a platform worse because "less users," that's a "quantity > quality" mindset which has been proven demonstrably untrue by all of the large social media brands that currently exist

Arguably a "meaningless presence on the web" is a good thing, because it doesn't incentivize people to join who are just in it for the memes and shitposts but don't give a damn about the community.

that’s a “quantity > quality” mindset which has been proven demonstrably untrue by all of the large social media brands that currently exist

Yet those platform thrive and grow, including Reddit white Lemmy is what it is.

Arguably a “meaningless presence on the web” is a good thing,

Yes, until you've to go into Reddit because there's no content and/or people here that might reply to you.

Yet those platform thrive and grow

Yes because they've focused more on quantity than quality.

including Reddit

I rest my case

until you’ve to go into Reddit because there’s no content and/or people here

Idk if we're talking about the same platform, but the reddit I was on for years had 2 major kinds of communities:

  1. Loud shouting matches with tons of no-effort content drowning out the quality discussions, where people with the worst opinion or stalest jokes struggle to be top comment

  2. Small communities that get a handful of new posts per week, where the community is engaging but relatively inactive.

Now these two aren't exactly mutually exclusive, so there were small dogshit subs and >100k subs that were enjoyable (as long as you avoided the comments).

What I realized was that the smaller communities weren't generally better because the people were a different breed, but—because of the slow pace and small size—people didn't feel driven to treat it like a popularity contest; those who did would get frustrated and act out until they were kicked or blocked by the majority. It wasn't all sunshine and rainbows, but it was still better than the large communities.

I've blocked !memes@lemmy.ml, which means I'm limited to the second kind of communities here.

Which domains are least likely to ban you for equivalating using statistics to cull animals to eugenics and trepanning?

I think .world is slowly transitioning towards reddit.shitty. in how heavy handed the moderation is. Interesting that comments advocatin for the literal murder of cops is allowed but saying "13 % of dogs commit 90% of crime" is a bannable offense.

Which domains have the least arbitrary moderation tools?

Also: Cops are generally pigs.

Or: To put things on topic. .World has made relatively unilateral decisions regarding the health of the domain. Which domains have a more democratic regard for what is and isn't appropriate? If lemmy is going to be a more poorly paid Reddit, I'd rather go to the place with more than 1 new commented-on post per hour.

Congrats on not reading the post at all and writing something that literally has nothing to do with this thread.

It takes a special level of determination to be so completely clueless.

Can we stop stickying these posts to the instance? We are super appreciative of the hard work you guys do, and you are super transparent. I personally trust you guys to make good decisions and this could be a support community sticky instead of an instance sticky.

No, this should be an instance sticky since it significantly affects all members of an instance. Community stickiies are easy to overlook

It really doesn't... it doesn't affect me at all.

"this thing that doesn't affect me at all annoys me and shouldn't be visible"

There's other people here who like the transparency. Literally all you have to do is keep scrolling...

And all you would have to do is look it up? This isn't a good argument. What is being gained here by posting about it? This isn't a secret. They aren't pulling a fast one over on you.

You know what would be great? If there was a way we could... I dunno... collate all of these kinds of posts into a kind of... group... where like minded people could... get together and talk about it. I wonder if someone like this could exist. What do you think?

Do you believe that on a social platform like this, democracy is the best policy when it comes to what is shown and what is not?

No. Not in the slightest. If you think that we should vote to defederate from csam before we defederate from csam you have something wrong with you. If you say "that's not what I mean." No. That's exactly what a democracy is.

Should we have a responsive, responsible team that makes decisions for us? Yes. Is it a democracy? Fuck no. Is it nice that they listen to their users wants and needs? Yes. Should their be transparency in the process? Yes.

It must be so taxing to have to scroll down 1/4 of the page to see new content.