@mrmanager@lemmy.today

These are all troll accounts that keep spinning up after they get banned (or at least the ones my instance knows about). You ban one, they just spin up another because there is only a medium strength captcha preventing it. Even requiring email verification would be a step in the right direction and slow this down somewhat if you’re completely opposed to having applications in place.

Some instances have already defederated from yours, and my patience is wearing thin as well. I’m not going to tell you how to run your instance, but I will point out the problems yours is causing.

Sincerely, your fedihood neighbor.

 https://lemmy.today/u/AejohJJJ14____88
 https://lemmy.today/u/Anykyc
 https://lemmy.today/u/BanEVADING
 https://lemmy.today/u/BanEVADING_89
 https://lemmy.today/u/BatmanandRobin
 https://lemmy.today/u/Bsjdjxndndndk3
 https://lemmy.today/u/Bsjdjxndndndkhhhhh
 https://lemmy.today/u/CocktailSucker66_644
 https://lemmy.today/u/CocktailSuckerAgain
 https://lemmy.today/u/DiscordMod19901
 https://lemmy.today/u/DiscordMod1990yyyyx
 https://lemmy.today/u/Eodilj543
 https://lemmy.today/u/FormerRedditMod
 https://lemmy.today/u/FuCensorship
 https://lemmy.today/u/Gelzjhzhwh
 https://lemmy.today/u/Hatefarlol
 https://lemmy.today/u/Hshsjsjsjjsnsnshs555
 https://lemmy.today/u/HuncJsjl788383
 https://lemmy.today/u/INFERNUM1488
 https://lemmy.today/u/I_Eat_squirrels__
 https://lemmy.today/u/IamCocktailSucker
 https://lemmy.today/u/Jdhdbxkckcm7737
 https://lemmy.today/u/Jejdjdhsbwndb73738
 https://lemmy.today/u/Jejdjdhsbwndb73738y
 https://lemmy.today/u/JewKiller64g
 https://lemmy.today/u/LWAdminsAreCuckolds
 https://lemmy.today/u/LWJanniesAreCucks
 https://lemmy.today/u/LongaliveStalin
 https://lemmy.today/u/M1ckey7
 https://lemmy.today/u/MaybeAVaLidNameNoW
 https://lemmy.today/u/McDonaldIsVenom_
 https://lemmy.today/u/Mickey7_
 https://lemmy.today/u/Mickey7__
 https://lemmy.today/u/ModsSuckMyFeetAndAss
 https://lemmy.today/u/NOT_RICHARD
 https://lemmy.today/u/Not_a_____SHEEP
 https://lemmy.today/u/R3t7rdssshahahqh
 https://lemmy.today/u/S1CK___0F___Society
 https://lemmy.today/u/Some_guy_1337
 https://lemmy.today/u/THE_ANON
 https://lemmy.today/u/THE_ANTIHERO
 https://lemmy.today/u/T_l_l_R_D_kill4
 https://lemmy.today/u/TiredOfWokeMods
 https://lemmy.today/u/UkraineDeservesDeath
 https://lemmy.today/u/Vegan2mato
 https://lemmy.today/u/VeganCucumber
 https://lemmy.today/u/VeganPotato
 https://lemmy.today/u/VeganTomato
 https://lemmy.today/u/VladimirPutinMyHero
 https://lemmy.today/u/W_oOo_ke_3333
 https://lemmy.today/u/Waterproof
 https://lemmy.today/u/What_name_is_allowed
 https://lemmy.today/u/YihadElitist36y
 https://lemmy.today/u/annayaya
 https://lemmy.today/u/arsl786
 https://lemmy.today/u/ashram
 https://lemmy.today/u/bsletten
 https://lemmy.today/u/ceseeme
 https://lemmy.today/u/fluid_neutral
 https://lemmy.today/u/iLoveFishing
 https://lemmy.today/u/i_have_no_ene3333
 https://lemmy.today/u/jezzamine
 https://lemmy.today/u/jornaldundP3d0
 https://lemmy.today/u/jornaldund_mod
 https://lemmy.today/u/jpritikin73
 https://lemmy.today/u/juicy
 https://lemmy.today/u/olelukoile
 https://lemmy.today/u/pizza
 https://lemmy.today/u/postman
 https://lemmy.today/u/postnews
 https://lemmy.today/u/winkmodapk6060
    • mrmanager@lemmy.today
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      7 months ago

      Yeah I didnt see this until now. Thanks!

      There has been a huge wave of spam accounts recently, and I recognize some of the names on this list. Of course these accounts gets banned quickly.

      Getting a fake email address is really easy, so I don’t think it makes any difference whatsoever. On fastmail which im using, I can even create fake ones with a click on a button. It’s built into the service to have different emails for different sites.

      Having closed signups will not stop any spam accounts. It just adds a delay between registration and being able to log in. There is no way to know if it’s a spam account or not before they sign in. Of course, some of the names in the list makes it obvious, but they just change to ordinary sounding names then.

      I think it’s frustrating for new users to have to wait for a random time period to get accepted, specially when it serves no purpose. I’m not going to be any wiser if I approve the registration now or 12 hours later.

      Or am I wrong? I haven’t been a troll myself but seems like I would just spend 30 mins to make accounts in random instances and then fire off my bot a few hours later or on the day after.

      How do you know which accounts are spam accounts before they even started posting?

      • poVoq@slrpnk.net
        link
        fedilink
        English
        arrow-up
        0
        ·
        7 months ago

        Admin approval with some text that needs a little bit of thought to fill out is surprisingly effective and definitely slows down spammers a lot.

        Sure, it will not totally prevent it and they can move to another instance, but if all the nicer instances enable it, it becomes much easier to defederate the badly run ones that don’t.

        • mrmanager@lemmy.today
          link
          fedilink
          English
          arrow-up
          0
          ·
          7 months ago

          Thank you, it does make sense. We will enable it tomorrow. This thread changed my mind. :)

          • Admiral Patrick@dubvee.orgOP
            link
            fedilink
            English
            arrow-up
            0
            ·
            7 months ago

            Greatly appreciated! :)

            Feel free to join us in the Matrix channel where we keep each other apprised of spammers and trolls and other problems. You show up as a member already, but we never see you in there. That’s how we catch so many of these so fast.

        • ChunkMcHorkle@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          7 months ago

          Admin approval with some text that needs a little bit of thought to fill out is surprisingly effective and definitely slows down spammers a lot.

          I had to do that on dbzer0 and I think beehaw, they were both a fun exercise and took no time at all. Hell, I ended up submitting a wall of text about Sacco and Vanzetti on dbzer0 if I remember correctly, lol. But if nothing else they knew that it was 1) a human, and 2) I really believe what I was saying.

          If the point is to get regular users who are thoughtful participants in online communities, requiring an email address and the typing of a few coherent words on their own behalf is NOT a barrier to entry, or even a much of a bar. After all, these people are applying to join a forum in which they are presumably going to spend unlimited time typing statements of their own creation in the future. Instance owners are just requiring a bit of that up front, and it’s not a huge ask.

          It is, however, a very frustrating requirement for people who want to open multiple accounts for spamming and trolling purposes, and for that reason alone is a great filter for applicants.

      • Admiral Patrick@dubvee.orgOP
        link
        fedilink
        English
        arrow-up
        0
        ·
        7 months ago

        Thanks for responding.

        Of course these accounts gets banned quickly.

        You only temporarily ban them from what I’ve seen in the modlog. You may not know this (I didn’t until recently), but a home-instance temp ban will override a remote instance perma ban (there’s a PR in the works to fix this , but it’s the way things are currently). And when someone has a username like https://lemmy.today/u/JewKiller64g, I really don’t think they’re going to suddenly change their ways in 30 days and come back after a temp ban a better person.

        Getting a fake email address is really easy, so I don’t think it makes any difference whatsoever. On fastmail which im using, I can even create fake ones with a click on a button. It’s built into the service to have different emails for different sites.

        It adds at least an extra step they’ll have to go through if they’re spinning up a new account to evade a ban. The one in question has admitted they’ll just keep spinning up new accounts because it’s easy. Adding a slight inconvenience won’t stop everyone, but it would at least help prevent becoming a base camp for trolls.

        I think it’s frustrating for new users to have to wait for a random time period to get accepted, specially when it serves no purpose. I’m not going to be any wiser if I approve the registration now or 12 hours later.

        That’s also 12 hours where your instance can spin up accounts with no one able to do anything about them and everyone else has to deal with that.

        How do you know which accounts are spam accounts before they even started posting?

        You don’t, but at least with some form of barrier they’re not free to go crazy with no oversight.

        If the spammers and trolls manage to make you defederate from Lemmy.today, they will pick another instance.

        You’re not wrong there, but we’ll cross that bridge when we get to it. Right now, they’re targeting yours because there’s no barrier to entry whatsoever.

        Sooner or later, small instances may even stop accepting new users for fear of being defederated from the larger network.

        Not as long as the admin is responsive and takes measures to address the problems.

        I would like to stop having these spam accounts and trolls on the instance. I could add email verification but it won’t make a difference and just make it more annoying for new users

        Most instances require this, as do pretty much all mainstream platforms. I don’t think anyone is particularly annoyed by this.

        • a home-instance temp ban will override a remote instance perma ban (there’s a PR in the works to fix this , but it’s the way things are currently)

          The way things work now is annoying.

          Troll creates an account on instance A, posts racist shit or other uninspired bait on instance B.
          Gets instantly permabanned from instance B.
          3 days later, home instance A decides to ban them for a week.
          Thus, a week later, user is automatically unbanned from home instance and all federated instances, including where they were permabanned.
          Current behaviour is bananas.

          This particular troll’s lack of creativity is unsurprising.

      • 1984@lemmy.today
        link
        fedilink
        English
        arrow-up
        0
        ·
        7 months ago

        I think it’s the right choice to agree to some measures being taken. Even if it has marginal effect, it sends a message that you are doing what you can.

      • Buelldozer@lemmy.today
        link
        fedilink
        English
        arrow-up
        0
        ·
        edit-2
        7 months ago

        Hi!

        I can’t speak for all users of lemmy.today but as a user of lemmy.today I would prefer it if we took reasonable steps like email verification to be a good neighbor, especially if it prevents other instances from de-federating us. Just my 2 cents. :)

        If you’d like help managing it I’m willing to donate time and effort.

        • mrmanager@lemmy.today
          link
          fedilink
          English
          arrow-up
          0
          ·
          7 months ago

          Yeah it makes sense. After reading all the arguments here, I guess if it helps to slow down spammers, it’s a good idea. Let’s do it. :)

          I will enable it tomorrow and I would be very grateful for some extra admin help. I will contact you tomorrow. :)

      • GregorGizeh@lemmy.zip
        link
        fedilink
        English
        arrow-up
        0
        ·
        7 months ago

        As someone who went through the application system to join my instance, it is really not that bad. Just have your potential users write a few sentences on their lemmy history, why they want to join your instance and what content they are looking for.

        This can be answered in a few minutes, but it is already enough to discourage almost all bad faith applicants. The few hours of wait period while you check their application for copy pasting are also contributing to deter them, simply because spam users often want to do some mischief right now, waiting until tomorrow doesn’t work well for those impulses.

    • PhobosAnomaly@feddit.uk
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      7 months ago

      A shitpost duel awaits.

      The winner gets seven statues on all continents, each facing a finely-calibrated direction - the intersection of their gazes meet at a point where the secret to humanity is buried.

      The loser gets a year using the upside-downternet, six months on ISDN, or a week on MySpace as the only communication method with the outside world.

    • Admiral Patrick@dubvee.orgOP
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      7 months ago

      Some have already, and I don’t blame them one bit. I’m hesitant to since it’s mostly one troll over and over again using that open instance as a base camp, and I don’t want to block the whole instance because of that single jerk.

      OTOH, I’m considering it, at least as a temporary measure. I usually reserve that for more severe matters (massive spam campaigns, CSAM, etc), but I’ve only got so much patience.

      • smoothbrain coldtakes@lemmy.ca
        link
        fedilink
        English
        arrow-up
        0
        ·
        7 months ago

        If somebody can’t moderate their instance in any kind of way that’s impacting other parts of the federation, it makes sense to defederate until they fix their problems.

        I don’t think anybody should have open signups. It’s literally just an invitation to mess with the rest of us who are federated with the instance.

        • Admiral Patrick@dubvee.orgOP
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          7 months ago

          I’m split on open signups.

          On one hand, it makes switching from something like Reddit easier. For people joining us in good faith, that’s a good thing. On the other, it’s open season for trolls and spammers.

          That said, I don’t think an instance with less than a team of admins spanning multiple time zones should have open registrations. Admins have lives and need sleep, so a single-admin instance with open signups has a huge window of opportunity for bad faith actors to take advantage.

          There are automod tools which can help with this, but I still think open signups should only be enabled when an instance can have an admin on hand 24/7.

  • anonymous@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    0
    ·
    7 months ago

    Everything to fight trolls in these way is gonna hurt real users more and just cause mild inconvenience to spam bots and trolls .