Lemmy definitely needs to have a lot more aggressive moderation and administrative tools built into it. Not only is deleting things directly from databases or databases themselves super risky for data integrity (gitlab incident, anyone?), but it leaves no trace of who or what was deleted. Which is a huge security hole, both for potential instance admin abuse as well as bad actors gaining access to an instance's back end and monkeying with it. Ideally such things should be done entirely through Lemmy and tracked in the modlog (or a separate backend admin log).
this post was submitted on 25 Jun 2023
17 points (100.0% liked)
Lemmy
12575 readers
1 users here now
Everything about Lemmy; bugs, gripes, praises, and advocacy.
For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.
founded 4 years ago
MODERATORS