@mrmanager@lemmy.today

These are all spam or troll accounts that keep spinning up after they get banned (or at least the ones my instance knows about). You ban one, they just spin up another because there is only a medium strength captcha preventing it. Even requiring email verification would be a step in the right direction and slow this down somewhat if you’re completely opposed to having applications in place.

Some instances have already defederated from yours, and my patience is wearing thin as well. I’m not going to tell you how to run your instance, but I will point out the problems yours is causing and hope that you will choose to address them.

Sincerely, your fedihood neighbor.

Edit: Updated to remove a few legitimate users / false positives that were banned for more normal reasons.

Edit 2: I, and at least one or two other admins, have tried reaching out to the admin there, and AFAIK, none of us have received any replies. So I figured at this point a full page ad, so to speak, was warranted and might get their attention.

 https://lemmy.today/u/AejohJJJ14____88
 https://lemmy.today/u/Anykyc
 https://lemmy.today/u/BanEVADING
 https://lemmy.today/u/BanEVADING_89
 https://lemmy.today/u/BatmanandRobin
 https://lemmy.today/u/Bsjdjxndndndk3
 https://lemmy.today/u/Bsjdjxndndndkhhhhh
 https://lemmy.today/u/CocktailSucker66_644
 https://lemmy.today/u/CocktailSuckerAgain
 https://lemmy.today/u/DiscordMod19901
 https://lemmy.today/u/DiscordMod1990yyyyx
 https://lemmy.today/u/Eodilj543
 https://lemmy.today/u/FormerRedditMod
 https://lemmy.today/u/FuCensorship
 https://lemmy.today/u/Gelzjhzhwh
 https://lemmy.today/u/Hatefarlol
 https://lemmy.today/u/Hshsjsjsjjsnsnshs555
 https://lemmy.today/u/HuncJsjl788383
 https://lemmy.today/u/INFERNUM1488
 https://lemmy.today/u/I_Eat_squirrels__
 https://lemmy.today/u/IamCocktailSucker
 https://lemmy.today/u/Jdhdbxkckcm7737
 https://lemmy.today/u/Jejdjdhsbwndb73738
 https://lemmy.today/u/Jejdjdhsbwndb73738y
 https://lemmy.today/u/JewKiller64g
 https://lemmy.today/u/LWAdminsAreCuckolds
 https://lemmy.today/u/LWJanniesAreCucks
 https://lemmy.today/u/LongaliveStalin
 https://lemmy.today/u/M1ckey7
 https://lemmy.today/u/MaybeAVaLidNameNoW
 https://lemmy.today/u/McDonaldIsVenom_
 https://lemmy.today/u/Mickey7_
 https://lemmy.today/u/Mickey7__
 https://lemmy.today/u/ModsSuckMyFeetAndAss
 https://lemmy.today/u/NOT_RICHARD
 https://lemmy.today/u/Not_a_____SHEEP
 https://lemmy.today/u/R3t7rdssshahahqh
 https://lemmy.today/u/S1CK___0F___Society
 https://lemmy.today/u/Some_guy_1337
 https://lemmy.today/u/THE_ANON
 https://lemmy.today/u/THE_ANTIHERO
 https://lemmy.today/u/T_l_l_R_D_kill4
 https://lemmy.today/u/TiredOfWokeMods
 https://lemmy.today/u/UkraineDeservesDeath
 https://lemmy.today/u/Vegan2mato
 https://lemmy.today/u/VeganCucumber
 https://lemmy.today/u/VeganPotato
 https://lemmy.today/u/VeganTomato
 https://lemmy.today/u/VladimirPutinMyHero
 https://lemmy.today/u/W_oOo_ke_3333
 https://lemmy.today/u/Waterproof
 https://lemmy.today/u/What_name_is_allowed
 https://lemmy.today/u/YihadElitist36y
 https://lemmy.today/u/annayaya
 https://lemmy.today/u/arsl786
 https://lemmy.today/u/ashram
 https://lemmy.today/u/bsletten
 https://lemmy.today/u/iLoveFishing
 https://lemmy.today/u/i_have_no_ene3333
 https://lemmy.today/u/jezzamine
 https://lemmy.today/u/jornaldundP3d0
 https://lemmy.today/u/jornaldund_mod
 https://lemmy.today/u/jpritikin73
 https://lemmy.today/u/olelukoile
 https://lemmy.today/u/pizza
 https://lemmy.today/u/postman
 https://lemmy.today/u/postnews
 https://lemmy.today/u/winkmodapk6060
  • @mrmanagerA
    link
    English
    30
    edit-2
    3 months ago

    Yeah I didnt see this until now. Thanks!

    There has been a huge wave of spam accounts recently, and I recognize some of the names on this list. Of course these accounts gets banned quickly.

    Getting a fake email address is really easy, so I don’t think it makes any difference whatsoever. On fastmail which im using, I can even create fake ones with a click on a button. It’s built into the service to have different emails for different sites.

    Having closed signups will not stop any spam accounts. It just adds a delay between registration and being able to log in. There is no way to know if it’s a spam account or not before they sign in. Of course, some of the names in the list makes it obvious, but they just change to ordinary sounding names then.

    I think it’s frustrating for new users to have to wait for a random time period to get accepted, specially when it serves no purpose. I’m not going to be any wiser if I approve the registration now or 12 hours later.

    Or am I wrong? I haven’t been a troll myself but seems like I would just spend 30 mins to make accounts in random instances and then fire off my bot a few hours later or on the day after.

    How do you know which accounts are spam accounts before they even started posting?

    If the spammers and trolls manage to make you defederate from Lemmy.today, they will pick another instance. And every defederation will continue to make the fediverse smaller and more centralized. Sooner or later, small instances may even stop accepting new users for fear of being defederated from the larger network.

    I would like to stop having these spam accounts and trolls on the instance. I could add email verification but it won’t make a difference and just make it more annoying for new users. I really don’t want to punish them for what trolls and spammers are doing.

    But sure, I prefer it to defederation. So if you think it makes a difference, I could add it just as a sign of good faith. But it’s really a pointless gesture.

    • Admiral PatrickOP
      link
      fedilink
      English
      28
      edit-2
      3 months ago

      Thanks for responding.

      Of course these accounts gets banned quickly.

      You only temporarily ban them from what I’ve seen in the modlog. You may not know this (I didn’t until recently), but a home-instance temp ban will override a remote instance perma ban (there’s a PR in the works to fix this , but it’s the way things are currently). And when someone has a username like https://lemmy.today/u/JewKiller64g, I really don’t think they’re going to suddenly change their ways in 30 days and come back after a temp ban a better person.

      Getting a fake email address is really easy, so I don’t think it makes any difference whatsoever. On fastmail which im using, I can even create fake ones with a click on a button. It’s built into the service to have different emails for different sites.

      It adds at least an extra step they’ll have to go through if they’re spinning up a new account to evade a ban. The one in question has admitted they’ll just keep spinning up new accounts because it’s easy. Adding a slight inconvenience won’t stop everyone, but it would at least help prevent becoming a base camp for trolls.

      I think it’s frustrating for new users to have to wait for a random time period to get accepted, specially when it serves no purpose. I’m not going to be any wiser if I approve the registration now or 12 hours later.

      That’s also 12 hours where your instance can spin up accounts with no one able to do anything about them and everyone else has to deal with that.

      How do you know which accounts are spam accounts before they even started posting?

      You don’t, but at least with some form of barrier they’re not free to go crazy with no oversight. It also allows you to weed out obvious trolls like half the usernames listed in the post above.

      If the spammers and trolls manage to make you defederate from Lemmy.today, they will pick another instance.

      You’re not wrong there, but we’ll cross that bridge when we get to it. Right now, they’re targeting yours because there’s no barrier to entry whatsoever. Defed is not something done on a whim, and I’m responding to your comment which means I haven’t taken that step. Yet.

      Sooner or later, small instances may even stop accepting new users for fear of being defederated from the larger network.

      Not as long as the admin is responsive and takes measures to address the problems. Defederation is not something most of us do lightly, but when all else fails, it’s the final option.

      I would like to stop having these spam accounts and trolls on the instance. I could add email verification but it won’t make a difference and just make it more annoying for new users

      Most instances require this, as do pretty much all mainstream platforms. I don’t think anyone is particularly annoyed by this.

      • InEnduringGrowStrong@sh.itjust.works
        link
        fedilink
        English
        173 months ago

        a home-instance temp ban will override a remote instance perma ban (there’s a PR in the works to fix this , but it’s the way things are currently)

        The way things work now is annoying.

        Troll creates an account on instance A, posts racist shit or other uninspired bait on instance B.
        Gets instantly permabanned from instance B.
        3 days later, home instance A decides to ban them for a week.
        Thus, a week later, user is automatically unbanned from home instance and all federated instances, including where they were permabanned.
        Current behaviour is bananas.

        This particular troll’s lack of creativity is unsurprising.

    • BuelldozerA
      link
      English
      20
      edit-2
      3 months ago

      Hi!

      I can’t speak for all users of lemmy.today but as a user of lemmy.today I would prefer it if we took reasonable steps like email verification to be a good neighbor, especially if it prevents other instances from de-federating us. Just my 2 cents. :)

      If you’d like help managing it I’m willing to donate time and effort.

      • @mrmanagerA
        link
        English
        213 months ago

        Yeah it makes sense. After reading all the arguments here, I guess if it helps to slow down spammers, it’s a good idea. Let’s do it. :)

        I will enable it tomorrow and I would be very grateful for some extra admin help. I will contact you tomorrow. :)

        • @1984
          link
          English
          63 months ago

          Very good :)

    • poVoq
      link
      fedilink
      English
      143 months ago

      Admin approval with some text that needs a little bit of thought to fill out is surprisingly effective and definitely slows down spammers a lot.

      Sure, it will not totally prevent it and they can move to another instance, but if all the nicer instances enable it, it becomes much easier to defederate the badly run ones that don’t.

      • @mrmanagerA
        link
        English
        113 months ago

        Thank you, it does make sense. We will enable it tomorrow. This thread changed my mind. :)

        • Admiral PatrickOP
          link
          fedilink
          English
          63 months ago

          Greatly appreciated! :)

          Feel free to join us in the Matrix channel where we keep each other apprised of spammers and trolls and other problems. You show up as a member already, but we never see you in there. That’s how we catch so many of these so fast.

          • @mrmanagerA
            link
            English
            63 months ago

            I’ve been there a few times, but will log in more and catch up. :)

      • @ChunkMcHorkle@lemmy.world
        link
        fedilink
        English
        83 months ago

        Admin approval with some text that needs a little bit of thought to fill out is surprisingly effective and definitely slows down spammers a lot.

        I had to do that on dbzer0 and I think beehaw, they were both a fun exercise and took no time at all. Hell, I ended up submitting a wall of text about Sacco and Vanzetti on dbzer0 if I remember correctly, lol. But if nothing else they knew that it was 1) a human, and 2) I really believe what I was saying.

        If the point is to get regular users who are thoughtful participants in online communities, requiring an email address and the typing of a few coherent words on their own behalf is NOT a barrier to entry, or even a much of a bar. After all, these people are applying to join a forum in which they are presumably going to spend unlimited time typing statements of their own creation in the future. Instance owners are just requiring a bit of that up front, and it’s not a huge ask.

        It is, however, a very frustrating requirement for people who want to open multiple accounts for spamming and trolling purposes, and for that reason alone is a great filter for applicants.

    • @GregorGizeh@lemmy.zip
      link
      fedilink
      English
      83 months ago

      As someone who went through the application system to join my instance, it is really not that bad. Just have your potential users write a few sentences on their lemmy history, why they want to join your instance and what content they are looking for.

      This can be answered in a few minutes, but it is already enough to discourage almost all bad faith applicants. The few hours of wait period while you check their application for copy pasting are also contributing to deter them, simply because spam users often want to do some mischief right now, waiting until tomorrow doesn’t work well for those impulses.

    • @1984
      link
      English
      33 months ago

      I think it’s the right choice to agree to some measures being taken. Even if it has marginal effect, it sends a message that you are doing what you can.