this post was submitted on 19 Feb 2024
31 points (94.3% liked)

Lemmy

12572 readers
26 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.

founded 4 years ago
MODERATORS
 

I think this is something Lemmy should also consider. Open registration is an invitation to abuse an instance as a spam vector.

all 13 comments
sorted by: hot top controversial new old
[–] RobotToaster@mander.xyz 19 points 9 months ago (3 children)

You think every instance should require an admin individually approve every account?

This will not help adoption at all.

[–] freamon@endlesstalk.org 13 points 9 months ago (2 children)

Manual approval isn't the only alternative to Open Registration - the main one involves requiring an email address, and/or solving a captcha

[–] RobotToaster@mander.xyz 9 points 9 months ago (1 children)

Oh, I assumed those were still considered "open".

[–] freamon@endlesstalk.org 4 points 9 months ago (1 children)

In Lemmy terms they're at 'RequireApplication'. Open is completely open. PixelFed have automated something that lemmy.world did for feddit.nl a while ago - defederate from them until they changed their application policy.

[–] RobotToaster@mander.xyz 2 points 9 months ago

TIL, thanks.

[–] poVoq@slrpnk.net 1 points 9 months ago* (last edited 9 months ago)

Those are largely useless against spammers, but indeed there could be other options like giving already registered users usage limited invite links etc.

[–] poVoq@slrpnk.net 6 points 9 months ago* (last edited 9 months ago)

First of all this is mainly a feature to protect existing instances against spam from other badly managed instances.

But yes, admin approval scales surprisingly well if you have several admins per instance and many smallish instances, and it could be further improved by giving existing users secret invite links than don't require admin approval (AFAIK also already supported by Pixelfed).

[–] freamon@endlesstalk.org 3 points 9 months ago (1 children)

It's not a one-click solution, but lemmy admins can check other instance's registration policy. e.g.
curl https://lemmy.world/api/v3/site | jq -r .site_view.local_site.registration_mode

Other Fediverse apps will reveal it in different ways of course. Nothing to stop an instance that was set up just for spam from lying about it of course.

[–] Link@rentadrunk.org 2 points 9 months ago

Nothing to stop an instance that was set up just for spam from lying about it of course.

Yep it’s trivial to get a reverse proxy to modify the response to make it look like they don’t have open registration.

[–] Omega_Haxors@lemmy.ml 1 points 9 months ago* (last edited 9 months ago) (2 children)

We have the ability to block instances but that won't work on commenters from instances that are known to be problematic. There are some instances I just want to flat out DNI on due to them being consistently unpleasant and adding nothing to the conversation, right now my only option is to manually block their users and get myself banned from the problem instance so I stop showing up for them. Not ideal.

[–] SkaveRat@discuss.tchncs.de 1 points 9 months ago

I assume you're talking about lemmy?

Because on microblogging-fedi/masto you can block/mute complete instances, so you don't see anything from there

[–] exocrinous@lemm.ee 1 points 9 months ago

They recently implemented instance blocking into Voyager