If I understand it right, the moderator of the mastodon.world instance has blocked several posts by Hasnain Kazim, as Kazim reported yesterday on Facebook: https://www.facebook.com/661473263/posts/10163657720033264/

Kazim is a quite famous and successful book author in Germany and something between left, conservative and liberal. He was journalist for the most important German weekly news magazine Spiegel. https://en.wikipedia.org/wiki/Hasnain_Kazim?wprov=sfla1

Canceling his posts is stupid and certainly completely exaggerated. To me from the external perspective it seems that the moderator is abusing his power. He is damaging free and respectful discussion. Furthermore, when a famous person like Kazim reports those experiences to his broad audience, who do not understand the functioning of the fediverse, the moderator also damages Mastodon in general significantly, it seems to me.

What do you think about this case ?

cross-posted from: https://lemmy.ml/post/50944065

It's been down about 12 hours

Edit: Oh they're back up now. https://feddit.uk/post/53318007

Hello. My younger sibling has recently created an account on a small Wafrn instance (we avoided the main one due to them being too young). However they're now facing the problem that I faced back when I briefly joined a small Mastodon instance way back: there's very few posts, and almost nothing is federated; it feels very barren so they're not really using it and spending most of their time on Tumblr (which is what they want to avoid). What can be done to find more people to interact with and follow on smaller instances?

V0.2.2 includes:

For Users:

• A new dynamic 3 panel layout, this will show depending on resolution.
• A feeds bar to access your feeds from the main page (Toggle-able under your settings page)
• 2 New Themes by the wonderful @luminous5481@anarchist.nexus
• No daily maximum number of votes
• Cakeday! A small icon appears next to users celebrating their anniversary date
• Add alt text to avatars and banner images.

For Admins:

• Removal of user access to admin page
• Deleted emoji stay deleted instead of getting re-discovered and added back the following day
• Working SVG sanitisation, stopping malicious and harmful SVG files from being uploaded.

New Themes:
MatrixTerm:

Vaporweave:

Allowing the recovery of users accidentally deleted by moderators - A new issue for @pixelfed

It would be helpful if a user deletion could be undone, as is the case with Mastodon or Lemmy. It would be sufficient for a user to be restored within a certain period (30 days?).

An alternative could be to add an intermediate stage between the active and deleted accounts, namely the blocked (or frozen) account. This way, the user and all their content are made invisible until the administrator can get feedback from the user.
This way, even if the user were accidentally blocked, the operation would be reversible.

Pixelfed is enjoying great success, and we administrators are doing everything we can to contribute to this success, both through careful and ongoing moderation and by keeping registrations open. Unfortunately, this has led to an influx of spammers, and one way to address this is to mass-delete all suspicious users based on their username, language, and other external factors.
The inability to restore accidentally deleted users, however, limits this solution and forces us to spend a considerable amount of time manually checking each suspicious account.

https://github.com/pixelfed/pixelfed/issues/6662

@fediverse

#Pixelfed #Moderation #Fediverse

PS: The discussion on this post turned mainly into a (one-sided) debate about whether the content of my contributions passes the Lemmy ideological purity test. So dull, yet so predictable. To be clear: I stand by everything I've written on Lemmy. Efforts at shaming will fall flat, as will pompous denunciations and attempts at dunking based on virtual sleuthing. I'm far too secure in my convictions to be bothered by a brigade of insufferably self-righteous progressives trying to one-up each other in their efforts to root out dissidence. To the (quite numerous) others who offered interesting feedback and kind words, thanks.

Here are some reflections on my personal experience of federated social media.

A bit of background. In the 90-9-1 trichotomy, I am one of the 9%: an occasional active participant. As of 3 years ago I had been dabbling in social media since I was a teenager in the 90s, but never very deeply. Newsgroups and IRC; a bit of invisible blogging; various techie web forums; Twitter from 2008 (hardly any tweets); Facebook in the early 2010s (a post or two per week at the peak); then Reddit. As of 2023 I had been "on" Reddit for nearly a decade and not even written 100 comments. Then I decided on a whim to join Lemmy.

The good

Three years later I have written nearly 100 original posts and over 3000 comments! This is an order of magnitude more than I used social media in the previous 25 years. How to explain it?

A bunch of things. I liked the UX instantly, it's much better than Reddit. No ads, so no nagging feeling that you're bankrolling a corporation. A (slightly) higher level of conversation quality than Reddit.

Probably the single biggest explanation is just that it's quieter. On Reddit I always arrived too late to the party. It's hard to find the motivation to say something when a thread already has 800 comments. On Lemmy, I'd arrive 12 hours after the post and there were only 6 comments. If I take the time to compose my thoughts, somebody might actually see it! I get the paradox here (there are tons more eyes passively looking at Reddit), but the "quiet room" effect is real.

Highlights

Hands down the best community I've found here is (no surprise) a specialized one: !birding@lemmy.world. Lots of original content and genuine expertise, zero vitriol or toxicity. Perfect. In a similar vein, !pigeon@mander.xyz, where you can literally post pics of pigeons to an adoring audience.

I've also got some value out of !linux@lemmy.world and !privacy@programming.dev for one of those reasons: the ambient expertise. It's not really breaking news: Linux and FOSS and privacy are really the only subjects where the fediverse can go toe-to-toe with the corporates in terms of expertise. IMO that's already an achievement that should not be squandered!

Quite a few of my 96 posts are original content ("OG", ugh). A whole bunch are photos from my bike-touring escapades, which I posted somewhat arbitrarily to !bicycle_touring@lemmy.world , !bicycling@lemmy.world, and !solarpunktravel@slrpnk.net. I rationalize this as an alternative to blogging: instead of hosting your own invisible vanity website, you can write what you have to say in a place where you have less control but where people may actually read it. It's the logic of social media, basically, but minus the ads and opaque algos and shareholders. As expected, my holiday photos were not viral sensations, but they did attract some love and a few nice comments. Success!

The less good

My experience on Lemmy has taught me something that I knew in theory but (somehow) not quite in practice: Socializing via text on a screen is quite hard to pull off successfully. The lack of physical accountability, the inherent difficulty of text communication (avoiding ambiguity without the help of a face or body language), all this tends to make people into worse versions of themselves. Me included to some extent, I'm sure.

And then there's the echo-chamber problem. It turns out that when people have an option to avoid dealing with ideas they disagree with (even slightly), very many of them choose that option. IMO this is a major (perhaps fatal) problem with social media. The fediverse is not magically immune from it.

Lowlights

The first - and definitely worst - experience I've had was 2 years ago when I got banned from !europe@feddit.org for "racism and gaslighting" on the basis of, well, pretty much nothing except the moderator's paranoia. Shut out of the single community that had most drawn me to Lemmy, I tried !europe@lemmy.dbzer0.com and in short order had a similar experience. I am a European liberal who votes green, and a moderate on social questions, although admittedly I do enjoy debate. To be shut down so brutally for daring to question progressive doxas in the politest terms - for me this was quite a shocking confirmation of the intolerance of a certain section of the (mainly US) left.

On !degrowth@slrpnk.net I got a virtual slap on the wrist for posting an article offering constructive criticism of degrowth. I'm basically a degrowther myself but I believe it's important to stress-test one's ideas (cf. J S Mill). The moderators politely disagreed. Fair enough. I deleted my post and unsubscribed.

The problem on !china@sopuli.xyz, meanwhile was (is) slightly different. It's that the community is swamped by a single hyperactive member who posts relentlessly on exactly the same themes with the same POV, and - the echo chamber, again - responds badly to any pushback. I contacted the moderator in private and received a virtual shrug.

So I decided to ditch all politics and stick to photos and niche subjects. But even here it has not been plain sailing. A (slightly whiny) post I wrote a few months ago about the difficulty of installing Linux on cheap hardware (a pretty niche subject!) received an avalanche of mockery and insults that really took me aback. And then I really stirred up a hornets' nest quite recently in this very community when I proposed a feature which would hugely improve my experience of Lemmy without affecting anyone else. Can't link to that because it got (very belatedly) deleted, ostensibly because offtopic but in reality because the proposal was unpopular. In fact this was my last post on Lemmy to date. Probably not a coincidence.

Conclusions

For me personally, the jury's still out. I'm pretty ambivalent about social media in general. Since The Atlantic introduced a discussion space a few months ago, I admit that I've transferred some of my energy there. And yes, it's been a better experience. But the reason is no indictment of Lemmy: It's that The Atlantic has a paywall, which essentially means I'm talking only to privileged people like myself there. I enjoy Hacker News even more, but that's because it's super specialized (politics is mostly banned), and professionally moderated, and also (attention: wild POV!) because it's full of engineers and other spectrumy types who take a Spock-like approach to communication. The problems I've had on Lemmy are problems of all generalist social media, not specifically of the fediverse.

In my case what remains are the figures. Despite everything, I have contributed more, and more personally, on Lemmy than I ever did on the R-site or anywhere else. That has to count for something. Corporate social media is a manipulative money-driven spyware-fueled nightmare. The federated decentralized type is obviously, plainly, better. That's why it has to succeed.

Going by comments in the post, the required login is coming in waves, so not all people may notice immediately.

Still, as Reddit is strong-arming its way across, maybe worth signaling to people there that the fediverse may be used without an account, so long as there's even one instance that implements logged-out view as the protocol allows it?

I don't have access to my account any longer, possibly VPN ban, though I never tried to recover it so I can only guess why mine is lost, else I'd post myself.

In the graph above I've arranged the 28 Threadiverse instances with at least 200 monthly active users (MAU)—orange instances running Lemmy, green Piefed, and red Mbin—on the basis of which instances they defederate.

Each instance has its MAU count listed below it, sourced from the latest MAU figures at Fediverse Observer, with adjustments made to the totals for Piefed (due to undercounting by outdated instances, as noted here; I used @Vicinus@piefed.zip's suggested estimate of 7,200 Piefed users) and Mbin (due to tardigram.com having a duplicate listing).

After adjustments, there are an estimated 43,287 monthly active Threadiverse users (35,184+7,200+903), of whom 87.84% are on the 28 largest instances. The percentages listed alongside the MAU figures correspond to each instance's share of the total MAU count.

Defederation data was sourced from Federation Checker. The tool doesn't support Mbin instances, so I left fedia.io in its own category. If any defederations are missing, feel free to let me know. Ideally such a chart should also include community blocks to better illustrate which instances block what, but that data doesn't appear to be as easily searchable.

I also noticed cases of some instances being listed as being defederated by another instance, despite not appearing on the defederation list for that instance (i.e. reddthat.com and lemmygrad.ml are listed as being mutually blocked, despite neither having the other on their block lists). In testing that federation, I noticed that !wholesome@reddthat.com did not federate to Lemmygrad while !memes@reddthat.com did, so clarification on that matter would be helpful.

While I'll update my generalized chart as needed to correct errors, perhaps at some point an automated federation mapping tool similar to the one feddit.de formerly hosted could be developed to more completely illustrate instance federation.

A very long text that comes two years after the proposal explaining how allowlist-based networks could work, why they are needed and all:

https://writer.oliphant.social/oliphant/islands

In short, it's not just about each instance having its own allowlist, it's about multiple instances in allowlist-mode creating a network with each other, all of them bidirectionally federating, based on commonly agreed rules. It's a way to favor a nice experience by default rather than the neverending task of getting harassed, moderating, etc...

Tools needed to be built. Shared reporting and actions, endorsements, dynamic additions/removal, shared spaces for communicating... This link explains it all and is an invitation for everyone to consider building such networks, small and large, closed or open

Today is announcement day 🔥

Bonfire is shifting its centre of gravity: from social features to community tools. Four things ship today, and the whole story is here: bonfirenetworks.org/posts/bo...

1. Bonfire for communities
   Groups and topics, community rules, decision-making (from quick polls through structured consensus to weighted score voting, where an objection can count for more than an approval), events, shared organisation profiles, announcements. A ready-to-use space you can then take apart: add what's missing, fork what almost fits, switch off what you don't need.

2. Our first Mosaic case study
   Six months with Jacobin's German edition, building jacobin.social from the ground up: a home for 3,000+ readers, wired into their Ghost publication, in their language and their look and feel. Their readers crowdfunded the project, which included a reboot of the magazine and a new community space. Now every publisher can benefit. What one community funds, every community inherits. Details: bonfirenetworks.org/case-stu...

3. A deep Ghost integration
   Keep publishing exactly as you do now, and Bonfire can become the home for everything that happens around the work: your archive imported, new articles followed, members and tiers synced, sign-in through Ghost, federated discussion under every piece. Details: bonfirenetworks.org/ghost/

4. The Telling
   One script tag turns any web page into a federated conversation. Readers reply with an account they already have, on Bonfire, Mastodon, anywhere. The thread lives on your server, and you can take it with you. Details: bonfirenetworks.org/telling/ Being straight with you: this is a 1.0 beta. Groups work within a server and don't federate yet. We're designing that in the open with the W3C groups task force, because we'd rather it work across the whole fediverse than ship a dialect only Bonfire speaks.

Want to poke at it? Groups are live on the campground, our open test instance. Make an account and try it out: campground.bonfire.cafe

Finally, we've rebuilt the website to reflect the new direction: bonfirenetworks.org/

Now back to following up with crowdfunding backers to organise install parties, co-design workshops, and other rewards. Thank you for your patience 💛

@Bonfire@bonfire.cafe

I got myself an profile at calckey.world where I post screenshots of a chat of a game. But I am not getting much visibility.

Is there any better instance I'm supposed to go to?

As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.

@Fediverse

Alright, so I can start a thread/create a post on lemmy from hubzilla, but the behaviour's... weird?

Hubzilla has a notion of channels that can be individual users or forum-based communities. You can share a post with public, some other fine-tuned lists, or post them on forums.

Lemmy communities correctly get recognised as forum channels. Why is it then that I still need to create a public post and tag the community channel to create a post rather than just posting and sharing with the forum channel??

TL;DR: Hubzilla forum channels = lemmy communities. Why still make public post and tag community then?

I am asking because I don't want to participate in a spam farm.

I noticed this with 2 accounts:

• Townflex, @stermy4u@lemmy.world ;
• The CyberSec Guru, @UnLocoPoco@lemmy.world .

Why is no one acting pro-actively, to prevent the platform from turning bad? Why did no mod or admin notice this?

On big commercial social media, people think the websites they are on are a big deal: opinions you share there, people you interact with, engagement you receive. It must matter SO MUCH to them - especially to influencers who earn some money from it.

Well, commercial Web is an obvious fodder to the Fedi but what about other alternative social spaces? These small, timy websites with barely any activity on them... there's no place for such delusions. They aren't changing the world and they know it.

Fediverse, in comparison... oof. You see, it is the Future. If We succeed, the Evil will be defeated. The whole world depends on the few people who ended up on here. It is a quiet place now but it will inevitably become the most popular thing. The Year of ~~Linux~~ Fediverse is any day now!

This feel of self-importance and superiority leads to the level of drama almost on-par with the corporate socials which is highly unusual in such small online spaces, at least in my experience.

Decentralized Social Media: What Creators Need To Know About Web3 Platforms

Most people don’t think about where their social media actually lives.
And if that doesn’t sit right with you, you’re not alone. That’s a little too much power for a small group of people to wield.

Here’s the good news: A different kind of social media is starting to grow in the background. One built on openness, transparency, and user control instead of central control.

https://bloggingwizard.com/decentralized-social-media/

@fediverse

I discovered about Lemmy and Piefed devs opinions and views which i not agree with¹, so i was thinking of using Mbin², i looked in to join mbin website and idk what to choose, there is a big instance which i want to avoid³ and idk if the smaller ones are stable, any suggestion?

1 Piefed is also made with Python which isn't the fastest language and i hate reading python codebases lmao

2 Please don't tell me that the devs are nazis or smth 😭

3 joining a big instance kinda defeat the purpose of the fediverse tbh

Perchance

cross-posted from: https://lemmy.world/post/49778547

Also /c/modabuse. Also /c/yepowertrippinbastards. Also lemmy.ml/c/worldnews, comrade, ACAB, and 552 individual accounts across 67 instances, about half of them on lemmy.world.

None of this is in the source code. It's downloaded at runtime from a file nobody has ever looked at.

If you're just tuning in

Tesseract is a third-party web frontend for Lemmy, maintained by asimons04 and licensed AGPL-3.0. Admins deploy it on their own servers alongside or instead of lemmy-ui, and there are public instances of it people use to browse Lemmy generally. If you've used a Lemmy site that didn't look like stock Lemmy, there's a fair chance it was this.

Last week db0 posted a PSA: Tesseract contains a blacklist of instance domains compiled directly into the application. 32 of them. Admins can't see it, can't configure it, and aren't told it's there. Connect to a listed instance and the app tells you it's "incompatible," which is not true.

I went through the code to see how that was implemented. The hardcoded list turns out to be the small half of the system.

There's a second filter policy fetched over HTTP every time the app loads. It isn't in the git repository. It's unauthenticated and world-readable, so anyone can pull it. Right now it carries 552 user accounts, 2,275 username patterns, 54 instances, 97 communities, 289 keyword patterns and 351 domains, with every category set to hide matches rather than flag them. Not collapsed behind a click. Simply absent, with no indication anything was removed.

Verify all of it in ten seconds

curl -s https://tesseract.dubvee.org/tesseract/api/system/policy \
  | base64 -d | gunzip > policy.json

That's the live policy, base64-wrapped gzip, 111KB of JSON when it unpacks. There's a stale fallback copy at /data/policy.dat as well.

It filters criticism of moderators

• lemmy.sdf.org/c/modabuse — listed
• lemmy.dbzer0.com/c/yepowertrippinbastards — listed
• lemmy.dbzer0.com/c/YPTBcirclejerk — listed
• community regex power ?tripping?
• keyword censoring me

Call the rest of it whatever you like. This part is not spam defence.

It filters words

The 32 community name patterns include Communis(t|m), Conservativ(e|es|ism), Leftis(t|m), Libertarian(ism)?, ^Green Part(y|ies), Zionis(t|m), (Police|Cops), guillotine and billionaire.

Keywords include comrade, ACAB, neoliberal, proletaria(n|t) and death to.

Filtered communities on instances that aren't blocked: lemmy.ml/c/worldnews, lemmy.today/c/news, lemmy.ca/c/politicalnewscanada, lemmy.ca/c/usa, infosec.pub/c/strategic_unions.

The 552 users aren't bots

67 instances. 272 on lemmy.world alone, 40 on sh.itjust.works, 19 on lemmy.ca, and 28 instances contributing exactly one person each.

355 of the 552 usernames are plain alphabetic, twelve characters or under, median length eight. Only 36 look like spam registrations. A bot list looks like the opposite of that.

Seven of them aren't even Lemmy. There are Mastodon and Friendica accounts in there: people who have never used Lemmy, hidden by a Lemmy frontend, with no possible way of finding out.

I have the list and I'm not posting it. Most of these are ordinary people who got pattern-matched, and 552 names on this comm is a harassment target inside an hour. Run the command above and grep for yourself.

And it lies about it

When the instance block fires you get: "Incompatible Instance. Not Supported. $instance is not compatible with Tesseract."

Nothing is incompatible. It's a policy decision dressed as an API error, and it's what had db0 chasing a version mismatch that never existed.

For the hidden users, communities and keywords, you get no message at all.

Admins can't switch it off

Tesseract has env vars for PUBLIC_DOMAIN_BLACKLIST, PUBLIC_FAKE_NEWS_BLACKLIST and the shortener lists. There is none for either blocklist. enableToxicMode bypasses the other filters and explicitly not this one.

Self-host it and you cannot disable this, nothing in your config admits it exists, and the contents can change without you pulling a commit.

Before someone says it

A lot of that domain list is real spam defence. It filters conservatism as well as communism. "It targets the left" doesn't survive the data and I'm not going to pretend it does.

The problem is that spam filtering and political editorial got welded into one undocumented, remotely-updatable blob, shipped hidden, to admins who've never read it and users who don't know it's there. The spam work is what makes the rest unauditable: "it's a spam list" answers every individual question and none of the whole.

And /c/modabuse is not spam.

Asks

1. Publish the runtime policy in the repo, or kill the endpoint.
2. Stop reporting a policy block as a technical incompatibility.
3. Tell users when something's been hidden. One line.
4. Give operators an off switch, like every other blacklist in the codebase has.

It's AGPL-3.0 and db0 already forked it. That's the licence working as designed. But forking isn't disclosure, and the admins who need this are precisely the ones with no reason to go looking.

If you run Tesseract, you are relaying a 111KB moderation policy you have never read, under your instance's name, to users who don't know it exists.

Full contents of every list, unedited, in the comments.

I've been thinking. Every mainstream social media is age verificated now. But sites such as SomethingAwful, 4chan and the Fediverse weren't. So why are we trying to populate it if the Fedi' was popular too, we would ALSO be verificated and spywared (made up this word for this post's sake)?

cross-posted from: https://lemmy.dbzer0.com/post/72685299

I discovered this after upgrading our instance yesterday, which also upgraded all frontends to their latest versions as well. After I did, our Tesseract frontend stopped working and I noticed immediately as it's been my primary for a while. Initially I thought it was an API version mismatch, but no, it was much worse.

Someone pointed out that the developer of the frontend added an explicit hidden and unmodifiably blacklist which includes any and all instances to the left of Kissinger. There's a commit which also explains their specious reasoning about our instance specifically, as it seems we've been on their shit list for a bit longer than that.

This instance and its admin staff encourages identity politics, groupthink, mob mentality, and extremist solutions to societal problems. Users who advocate violence are not moderated so long as the admins agree with the target. Caution and critical thinking are advised when interacting with this instance or its users.

When you use tesseract to connect to one blacklisted such instance , you just get a message informing you that Tesseract is "incompatible with that instance" which leads one to think of a technical issue, like an API mismatch, rather than the dev being an opinionated coward.

Isn't it funny how all the software developed by turbolibs, like Piefed and Tesseract, end up with hidden control mechanisms from developers who think they know better than everyone else? That they don't just think they deserve to tell you what you should think, but they should manipulate you to think it? Isn't it funny how libs go on about how bad it is to support lemmy due to the ideology of the devs behind it, and yet lemmy has 0 opinions as a software? It does make one think...

Anyway, I forked - it as one does - and disabled the blacklist, but since this is a massively ideologically compromised software, I'll doubt I'll keep this frontend up after Lemmy 1.0. I think we'll bring up mlmym again now that someone's maintaining it again.

CAPTCHAs and sign‑up quizzes annoy real people and barely slow down determined bots. As the fediverse grows, we need smarter, more humane defences, ones that don’t push away genuine newcomers. What creative, non‑intrusive ideas do you have? Trust‑based vouching, proof‑of‑humanity protocols, behavioural signals... what feels both effective and aligned with the open social web? I’m building a social media platform and I'd love to hear your thoughts on this topic.

cross-posted from: https://lemmy.dbzer0.com/post/72685299

I discovered this after upgrading our instance yesterday, which also upgraded all frontends to their latest versions as well. After I did, our Tesseract frontend stopped working and I noticed immediately as it's been my primary for a while. Initially I thought it was an API version mismatch, but no, it was much worse.

Someone pointed out that the developer of the frontend added an explicit hidden and unmodifiably blacklist which includes any and all instances to the left of Kissinger. There's a commit which also explains their specious reasoning about our instance specifically, as it seems we've been on their shit list for a bit longer than that.

This instance and its admin staff encourages identity politics, groupthink, mob mentality, and extremist solutions to societal problems. Users who advocate violence are not moderated so long as the admins agree with the target. Caution and critical thinking are advised when interacting with this instance or its users.

When you use tesseract to connect to one blacklisted such instance , you just get a message informing you that Tesseract is "incompatible with that instance" which leads one to think of a technical issue, like an API mismatch, rather than the dev being an opinionated coward.

Isn't it funny how all the software developed by turbolibs, like Piefed and Tesseract, end up with hidden control mechanisms from developers who think they know better than everyone else? That they don't just think they deserve to tell you what you should think, but they should manipulate you to think it? Isn't it funny how libs go on about how bad it is to support lemmy due to the ideology of the devs behind it, and yet lemmy has 0 opinions as a software? It does make one think...

Anyway, I forked - it as one does - and disabled the blacklist, but since this is a massively ideologically compromised software, I'll doubt I'll keep this frontend up after Lemmy 1.0. I think we'll bring up mlmym again now that someone's maintaining it again.