214

Lemmy.ml is blocking all requests from /kbin Instances (kbin.social)

submitted 1 year ago* (last edited 1 year ago) by barista@kbin.social to c/fediverse@kbin.social

93 comments fedilink hide all child comments

I discovered yesterday evening that Lemmy.ml is blocking all inbound ActivityPub requests from /kbin instances. Specifically, a 403 'access denied' is returned when the user agent contains "kbinBot" anywhere in the string. This has been causing a cascade of failures with federation for many server owners, flooding the message queue with transport errors.

This doesn't appear to be a mistake; it has been done very deliberately, only on Lemmy.ml. Lemmy.world and other large instances do not exhibit the same behavior. It also isn't a side effect of the bug introduced in Lemmy 0.18. You can observe by sending the following in a terminal

> curl -I --user-agent "kbinBot v0.1" https://lemmy.world/u/test
HTTP/2 200
[...]

> curl -I --user-agent "kbinBot v0.1" https://lemmy.ml/u/test                                
HTTP/2 403
[...]

> curl -I --user-agent "notKbinBot v0.1" https://lemmy.ml/u/test
HTTP/2 403
[...]

> curl -I --user-agent "placeholder-user-agent" https://lemmy.ml/u/test
HTTP/2 200
[...]

Additional evidence of this not being a Lemmy 0.18 bug:

This occurs when making web requests to any location on the Lemmy.ml webserver, not just ActivityPub endpoints.
Go to https://fedidb.org/software/lemmy and pick an instance running 0.18.0. Perform the above commands, replacing the URL for Lemmy.ml with that particular instance's address.

If this continues, my instance may need to defederate from Lemmy.ml. This is especially problematic because Lemmy.ml continues to federate information outbound to other kbin instances while refusing to allow inbound communication from them.

Spoofing the user agent is less than ideal, and doesn't respect Lemmy.ml's potential wish to not be contacted by /kbin instances. I don't post this to create division between communities, but I do hope that I can draw awareness to what's going on here. Defederating /kbin instances entirely would even be better than arbitrarily denying access one-way. This said, we should all attempt to maintain a good-faith interpretation until otherwise indicated by the Lemmy developers. It's possibel that this is a firewall misconfiguration or some other webserver-related bug.

Relevant comment from me (#354 - [BUG] Critical errors/failed messages during messenger:consume)

Edits:

Yes, people have already tried reaching out to the Lemmy instance admins in their Matrix room with no answer.
Someone has posed a question on Lemmy.ml about the block here: https://lemmy.ml/post/1563840

top 50 comments

sorted by: hot top controversial new old

[-] Cloudless@kbin.social 81 points 1 year ago

I am happy to see nothing from the tankies.

[-] HeartyBeast@kbin.social 26 points 1 year ago

So block the instances you want to block

[-] ginerel@kbin.social 18 points 1 year ago

I hate tankies myself as well, but I also hate that some communities are only created on lemmy.ml. Plus some official subreddits moved over there as well (and no - no far-left ones).

[-] Cloudless@kbin.social 12 points 1 year ago

yeah I can't believe the Firefox community is on lemmy.ml

[-] Colombo@kbin.social 6 points 1 year ago

Hate tankies as much as you want, but at least they don't deny that USSR was the real communism.

[-] barsoap@lemm.ee 6 points 1 year ago

Ask Lenin what it was and he'd say state capitalism. Because that's what he called it.

[-] gunnervi@kbin.social 4 points 1 year ago

I don't know wtf "real communism" is, all I know is that the communism I advocate for is not that of Lenin, Stalin, or Mao

load more comments (1 replies)

[-] CoderKat@kbin.social 12 points 1 year ago

Problem is that there's a bunch of major communities on that instance. They have no affiliation with the server admins and mostly just chose the instance because it seemed like the default very early in the migration to the Fediverse.

load more comments (3 replies)

[-] Serosh@kbin.social 70 points 1 year ago* (last edited 1 year ago)

This is utterly baffling and goes against the whole idea of the Fediverse. To take advantage of the impending mass migration, just days before Reddit shuts down their universal API access for good, this all leaves a very bad taste in my mouth.

So users now have to choose between two already-smaller communities when making the transition? This is only going to make a semi-complicated process even more confusing, and end up pushing users back to Reddit.

I had mostly used Lemmy.ml up to this point, but I didn’t leave Reddit to join another u/spez dictatorship. What a disappointing turn of events. Kbin is now my primary.

[-] Rottcodd@kbin.social 29 points 1 year ago

goes against the whole idea of the Fediverse.

Presuming for the sake of argument that it's a deliberate move by .ml to freeze out kbin users, it only really goes against the idea of the fediverse in that it's an underhanded way to accomplish something that was meant to be done openly. By design, every instance is entirely free to choose whether or not to federate with any other.

What a disappointing turn of events. Kbin is now my primary.

And (again presuming for the sake of argument that it's not simply a glitch), that's the fediverse working exactly as intended. Just as every instance is free to choose which instances to federate with, every user is free to choose which instances to join or follow.

[-] DreamerOfImprobableDreams@kbin.social 19 points 1 year ago* (last edited 1 year ago)

True, but the original intent was that defederation would be a nuclear option, reserved only for instances that totally failed to moderate stuff like hate speech, bot activity, etc-- given that it damages the Fediverse as a whole.

The lemmy.ml admins are free to federate or defederate from other instances as they please-- and we're free to criticize their decision as we please, too.

[-] Bobo_Palermo@kbin.social 4 points 1 year ago

We should not be moderating hate speech....that is a slippery slope. Simply disregard it.

[-] Klear@lemmy.world 8 points 1 year ago

Do you want another /r/the_donald? Because that's how you get another /r/the_donald.

[-] ChemicalRascal@kbin.social 7 points 1 year ago

Something something, that's how you get a Nazi bar.

[-] RIotingPacifist@lemmy.world 5 points 1 year ago

Fuck that, I don't want to give Nazis a safe space to organize and spread their hate.

load more comments (2 replies)

[-] hugz@kbin.social 24 points 1 year ago

Decentralisation means a clash of egos

[-] ginerel@kbin.social 14 points 1 year ago

I don't think it's a case of a personal ego here. I think it's something different, that has to go with the main devs' ideology. I feel like @feditips 's concerns are quite valid.

load more comments (5 replies)

[-] AnonymousLlama@kbin.social 31 points 1 year ago

Yeah this isn't great to hear. If they're keen on taking pushing content outwards to kbin but not accepting incoming content, that's not really good enough.

If they're doing something shifty like that, how do we even know kbin users comments are even being recorded (and seen on that Lemmy instance)

What's the overarching issue here? Those admins are just being dicks?

[-] Semmelstulle@kbin.social 30 points 1 year ago

I think they're scared by the growth of kbin haha

No but for real, Federation is about being open in my opinion. We have modlogs, everything. Then please provide information about why you exclude x from doing y.

[-] Hondolor@kbin.social 44 points 1 year ago

Kbin seems alot better so far than Lemmy. First time I"m hearing about it but so far it's a better experience

[-] cowvin@kbin.social 15 points 1 year ago

Remember, it's not all of Lemmy, it's just lemmy.ml. lemmy.ml is the one run by pro-china folks.

load more comments (1 replies)

load more comments (2 replies)

[-] ChemicalRascal@kbin.social 25 points 1 year ago

Well that's a bit fucked. I figured that maybe they'd just tried to block bots, but no, "testBot" goes through just fine. They specifically seem to be rejecting "kbinbot", though, not just anything with "kbin" in it.

[-] cockatoo010@kbin.social 22 points 1 year ago

Isn't that the instance where an admin is afiliated with the CCP?

I'm not surprised at all

[-] Onii-Chan@kbin.social 8 points 1 year ago

The very same.

[-] DreamerOfImprobableDreams@kbin.social 4 points 1 year ago

Wait, I knew the admins were CCP sympathizers, but does one actually have ties to the CCP?

load more comments (1 replies)

[-] Onii-Chan@kbin.social 21 points 1 year ago

Lemmy.ml is a hive of authoritarians. I'll be glad to not have to see their oppressive fascist fantasies here.

[-] ReCursing@kbin.social 14 points 1 year ago

From what I hear, they're authoritarian communist, not fascist. Fascism is not just a synonym for authoritarianism, it's a specific economically far right authoritarian political position.

[-] Onii-Chan@kbin.social 7 points 1 year ago* (last edited 1 year ago)

Same end result; oppression of the masses, rejection of human rights and personal liberties, concentration of power and corruption. Fascist, authoritarian communist, tomato, tomAto, as far as I'm concerned. Their ideologies all stand directly on the throat of freedom and I want nothing to do with anyone who believes total control of the people is a positive thing.

[-] Machinist3359@kbin.social 6 points 1 year ago

The distinction between a square and a rectangle is important, even if you don't like right angles and parallel sides. Fascism is a flavor of authoritarianism which is uniquely worse and focused on genocide.

[-] Colombo@kbin.social 4 points 1 year ago

Fascism is not focused on Genocide. Even for Nazism, Genocide is only a (welcomed) byproduct.

load more comments (7 replies)

load more comments (1 replies)

[-] audricd@kbin.social 19 points 1 year ago

Well, this is disappointing.

[-] Otome-chan@kbin.social 14 points 1 year ago

common lemmy.ml L. thanks for the heads up though that interacting on lemmy.ml stuff might be broken.

[-] MonsieurHedge@kbin.social 10 points 1 year ago

Lemmy seems worse and worse all the time. A completely unannounced bootleg defederation... for what appears to be absolutely no reason? Are the instance admins insane?

[-] DreamerOfImprobableDreams@kbin.social 11 points 1 year ago

My cynical thought is that they're not insane, they're trying to kneecap the competition before it gets popular enough to pose a threat to them.

load more comments (1 replies)

[-] tjr@innernet.link 4 points 1 year ago

yeah, I've been getting hammered in my transport queue from this. I guess if this is intentional it is worth just defederating to avoid spamming the queue and logs.

[-] HKayn@dormi.zone 3 points 1 year ago

I'm appalled that everyone in the comments is already jumping to conclusions without waiting for a statement by the lemmy.ml admins.

Yes, I know what's up with the Lemmy devs, but that doesn't imply anything here.

load more comments (6 replies)

load more comments

this post was submitted on 27 Jun 2023

214 points (100.0% liked)

Fediverse

62 readers

3 users here now

This magazine is dedicated to discussions on the federated social networking ecosystem, which includes decentralized and open-source social media platforms. Whether you are a user, developer, or simply interested in the concept of decentralized social media, this is the place for you. Here you can share your knowledge, ask questions, and engage in discussions on topics such as the benefits and challenges of decentralized social media, new and existing federated platforms, and more. From the latest developments and trends to ethical considerations and the future of federated social media, this category covers a wide range of topics related to the Fediverse.

founded 1 year ago