cross-posted from: https://jamie.moe/post/113630
There have been users spamming CSAM content in !lemmyshitpost@lemmy.world causing it to federate to other instances. If your instance is subscribed to this community, you should take action to rectify it immediately. I recommend performing a hard delete via command line on the server.
I deleted every image from the past 24 hours personally, using the following command:
sudo find /srv/lemmy/example.com/volumes/pictrs/files -type f -ctime -1 -exec shred {} \;
Note: Your local jurisdiction may impose a duty to report or other obligations. Check with these, but always prioritize ensuring that the content does not continue to be served.
Update
Apparently the Lemmy Shitpost community is shut down as of now.
Someone is trying really hard to hurt Lemmy by continually attacking the most popular instance. Is this all coming from right-wingers upset that their nazi instances were defederated across basically the whole fediverse?
The simplest explanation is 4chan types just doing it for the lulz.
My tin foil hat is telling me it’s one of the other social media companies funding a hacking group to do it. They stand to have the most to lose, and they’ve seemingly decided to enjoy changing the narrative regarding multiple topics. Lemmy stands directly against what the bigger social medias stand for.
I have no evidence to back this though. As a business owner I just know that things become very consistent when people are being paid, and very inconsistent when they aren’t. These attacks are seemingly very consistent/organized.
There must be room under that tinfoil hat for the both of us, because this was my first thought too.
The longer it continues, the more likely that scenario is IMO. Bitter alt-right extremists would probably start losing interest after a short while, whereas social media competitors would stand to gain from long-term interference.
Come on in! There’s cookies.
You think a company that is posed to go public is going to attack a competitor with a minuscule amount of traffic with extremely illegal material that could put them in prison for even having?
Reddit? No. I was thinking moreso Meta. They have the deeper pockets and a proven track record of breaking privacy laws to their own benefit.
That’s even worse. Meta probably doesn’t even know what Lemmy is.
I wouldn’t put it past the hexbear crazies throwing a tantrum. They claim to be left wing… Sure seem more like fascist trumper types though. Maybe it’s just that they’re all incels and incels all seem about the same.
Throwing a tantrum about what exactly? They’re one of the oldest-running Lemmy instances. Until now they were running a fork based on a pre-Federation version of the codebase.
You believe they did a bunch of work migrating their database only to then negate that work by destroying the community they wanted to Federate with?
Well something to keep in mind is that hexbear isn’t one person … it’s a whole community that’s developed independently for a while. So it’s reasonable to expect that there’d be variation in the behaviours of members in the same way there’s variation on the rest of lemmy. From what I’ve gathered, not all hexbear members are keen on the re-federation, and some aren’t too keen on being “well-behaved” around politically opposed users (ie “libs”), though hexbear admins and other users have promised moderation and that such isn’t part of the core hexbear values.
It’s social media, afterall … and people can be rather shit and ruin it for the rest of us. In the end, the core service provided a social media platform isn’t the hardware, sys-admin-work or software (however necessary they are) … it’s the moderation work.
The moderation keeps the place sanitary enough for people to actually want to be here … however much we may have problems with particular actions of our moderators, we should really support and praise them at every turn.
At least a handful of users on hexbear had made their intention clear during the first week of re-federation, they were looking to cause chaos on Lemmy for there own pleasure. I don’t know if they were banned and/or their comments deleted.
they’re all incels and incels all seem about the same.
Downvote from me there. I’ve seen plenty of examples of hexbear people being nice, interesting and good sports. They definitely seem to have more of shitposting culture than is normal on mainstream lemmy. But all in all it’s seemed fun to me from what I’ve seen.
Beyond all that, this is just superficial and prejudicial. If you had some examples to link to or more substantial insights to share as to why it’d be “them”, that’d be worth reading.
Otherwise, they’re an instance. Not one person, I’m sure some on hexbear are assholes and some awesome.
So, so shocked someone it’s from lemmygrad that is defending the notoriously toxic “communist” tanky trollfest instance.
Sorry, not from lemmygrad. And I’m on lemmy.ml because I joined before the Reddit migration and “Privacy and FOSS” (the focus of lemmy.ml) made a lot of sense for a lemmy instance/community.
Beyond that … more superficial, prejudicial hate mongering without any description of why or for what purpose. Sorry, I don’t think it’s worth reading … a downvote from me … and, just being real for a moment … at the moment it’s more likely that you’re a member of a “notoriously toxic … trollfest”.
Ironically, IME, I’ve seen significantly more troll-like tankie hate than I do tankie-trolling. I keep asking for receipts/links to tankie trolling here, as I’m genuinely curious to see it and understand what people are so upset about (please don’t explain to me what’s so upsetting unless it’s culturally thorough or coupled with some links+descriptions) … but no one has been able to do so.
deleted by creator
Considering all the alt-right garbage that was popping up there the last couple of days this seems at least plausible. I sometimes envy their ability to utterly destroy anything they touch.
So, from memory there has been:
- This recent attack
- Regular DDOS attacks
- Frequent attempts to spam community creation
- That one time the instance got hacked and set to redirect to shock sites
Am I missing anything?
This seems like more than just a few trolls. Maybe someone really doesn’t want to see user-owned social media take off.
It is very reminiscent of the trolls in the earlier web.
big F in chat for those of you dealing with this. my #1 fear about setting upand instance.
It impacts everyone when this shit happens. It takes time for mods/admins to take down. And you can’t unsee it.
I hope nobody else has the misfortune of stumbling on that shit
There have been studies which found playing tetris for an hour or two after seeing something traumatic can prevent it taking root in our longterm memory.
I tried it once after accidentally clicking a link on reddit that turned out to be gore, I can’t remember exactly what it was now (about 9 months later) so it must have worked
This advice is a few hours too late for me. Hope it helps others
Don’t worry, life with hold many more traumas
Cue Homer Simpson: This is the worst thing you’ve seen in your life so far
I got lucky. I am not subscribed to this community, and I am the only person on my instance. But what if I was subscribed and hadn’t seen this post? This is too much responsibility for me.
I just shut down my instance until we can disable cached images. If that never happens, then I’m not bringing it back up.
Shout-out to https://github.com/wescode/lemmy_migrate. I moved my subscriptions over in a minute or two, and now, other than not having my post history, it’s exactly the same.
It is coming, don’t worry.
I checked and there shouldn’t be any images stored on the server when running lemmy 1.18.4. The post was made in high emotional distress and shouldn’t be taken at a face value. If the posts are bothering you I advise purging the posts in question. (I have already done that)
How did you check this? From my understanding, images from external servers are copied (and transcoded) over locally. At least in my server (running 0.18.4), they do.
There is a possibility that my instance is buggy and it isn’t caching images even though it should.
It’s pretty inconsistent from my experience. Sometimes images do cache and sometimes they don’t.
edit:
Here’s an example from my instance:
https://ani.social/post/284147 - JPEG image that isn’t copied/cached by my server.
https://ani.social/post/285861 - WEBP image copied/cached by my server.
It depends on how the image posted, the thumbnails might get federated. If the image is used in a post/comment body, usually the thumbnails are not federated.
You can refer to this post. The full image is copied to my instance (and transcoded). Not just the thumbnail.
As far as I know, images should not be federating to federated instances, right? Image proxying is supposed to be added to pictrs version 0.5.0 but it is still in alpha.
Images do sometimes. At least in my instance they do. See this post for example. There’s a local copy stored in my server.
edit: I’m running pict-rs 0.4.2
I get it. Thumbnails are cached. Thanks.
Not just the thumbnail. The full image is cached. There’s a PR request to disable thumbnail caching but not the full image.
Yeah you are right. It’s here: https://ani.social/pictrs/image/78d05797-5b02-4c5a-bd86-132f0f41856c.webp
Thanks.
There was a weird JSON error I was getting in the last few minutes. I’m not sure if this is at all related.
If the source deletes the post. Won’t that remove it from all the instances ?
Doesn’t remove it from the server’s cached images, which creates a huge liability problem.
That’s sounds like a feature request.
I am using the Lemmy easy deploy would this command works?
You’ll need to find where the actual container files are being stored. I’m unfortunately not familiar with Lemmy Easy Deploy, but you should have a folder that has some files/folders like
docker-compose.yml,volumes,lemmy.hjson.The important one is the
volumes/pictrs/filesfolder, take the full path of that folder and replace it with the/srv/lemmy/example.com...path from the original post, and then that command should work.
deleted by creator
