this post was submitted on 29 May 2021
104 points (98.1% liked)

Announcements

23543 readers
7 users here now

Official announcements from the Lemmy project. Subscribe to this community or add it to your RSS reader in order to be notified about new releases and important updates.

You can also find major news on join-lemmy.org

founded 5 years ago
MODERATORS
 

Our server went down last night, after we received some messages from our provider that someone had uploaded illegal pornographic photos.

They stated that they had contacted us before ( they didn't ) which would give us opportunity to remove them before the site going down.

The user and community where these pictures were located, we'd banned about a month ago, and it wouldn't be possible to view them from lemmy itself, but we have yet to code purging dangling pictrs images automatically with user and community deletion, obviously now a priority for us.

We were able to trace things down and delete them, and bring the site up this morning.

Again sry for the site being down. If you find any pornographic materials on lemmy ( against our site rules ), let us know so we can remove them ASAP and keep lemmy running.

top 37 comments
sorted by: hot top controversial new old
[–] [email protected] 17 points 3 years ago* (last edited 3 years ago) (1 children)

Between the fire of the servers in France and this... That's really bad luck, thanks for letting us know anyway, I was worried and kept reloading the page with F5 :')

[–] [email protected] 7 points 3 years ago (1 children)

I was worried and kept reloading the page with F5 :')

there's also a Lemmy users chat on [matrix] with the address #lemmy:matrix.org.

[–] [email protected] 5 points 3 years ago

Yeah, I know. In fact, the first thing I did was to enter the room and ask why Lemmy.ml wasn't working, as you can see here: https://matrix.to/#/!BZVTUuEiNmRcbFeLeI:matrix.org/$162228352527411IVuVt:matrix.org?via=matrix.org&via=kde.org&via=fairydust.space

[–] [email protected] 16 points 3 years ago (3 children)

I'd like to be able to report content like that so you guys can delete it quickly. I remember asking about reporting possibilities, but I don't remember well what answer there was for it. But that's a sentiment I still have at least!

[–] [email protected] 18 points 3 years ago* (last edited 3 years ago) (2 children)

The report button is being worked on. In the meantime, please send a PM to one of the admins listed on the homepage sidebar, if it's urgent, message all of us. Or for less serious issues like spam, mention one of us in a comment to the offending post.

[–] [email protected] 1 points 3 years ago
[–] [email protected] 1 points 3 years ago

Nice to know a report feature is being worked on. Will this be something were many reports cause something to be hidden until an admin/mod can look at it? Might be a good idea.

Sounds like you need a better host too. Who are you with right now?

[–] [email protected] 11 points 3 years ago (2 children)

this, people had to create an entire community just to report scams some users tried a couple of weeks back, a report feature is definitely needed

[–] [email protected] 3 points 3 years ago
[–] [email protected] 2 points 3 years ago

Lol, it helps that I am proactive and remove a lot of spam off c/technology, if there is anything I can help admins with I would be fine with it

[–] [email protected] 6 points 3 years ago (1 children)

Reporting is somewhat done on the back end, but adding reporting to the front end is a bigger issue down the road.

[–] [email protected] 2 points 3 years ago
[–] [email protected] 15 points 3 years ago (1 children)

Wow, this sucks!

I hate when people use good faith projects and do bad stuff with them.

Also quite surprised on how bad the current hosting provider handled the situation.

It just looks like "I dont care what reputation I'll get, as long as I have fixed the issue that was put onto me".

No worries,- lemmy is just in its beginnings and I already like it better than reddit (ok, thats not too hard, to be fair).

[–] [email protected] 7 points 3 years ago (1 children)

The current hosting provider is ovh.com, fwiw. They're one of the largest hosters in Europe.

[–] [email protected] 2 points 3 years ago

Feels like they're on fire lately with their issues.

[–] [email protected] 11 points 3 years ago

I knew something shitty was going on.

IMO there should exist for Lemmy an uptime or a notice site on a separate server, which can tell us atleast what is going on briefly.

I suggest sifting through the images uploaded on the server, if they are not millions, which should not take too long as Lemmy is still not too huge. We can figure out a way to process images automatically for NSFW content in the future.

[–] [email protected] 5 points 3 years ago (1 children)

I don't know if it's related but docs responds with bad gateway.

[–] [email protected] 5 points 3 years ago

Should be good now.

[–] [email protected] 2 points 3 years ago (1 children)

Seems like thumbnail loading doesn't work anymore when making posts for some reason

[–] [email protected] 4 points 3 years ago (1 children)

Hrm... I'll see if I can see what's wrong there.

[–] [email protected] 3 points 3 years ago (1 children)

IDK if it's on your end though, but I thought to bring it up in case

[–] [email protected] 5 points 3 years ago (1 children)

Is it working for you now? I just made a post and it seems to be working.

[–] [email protected] 1 points 3 years ago (2 children)

Nah, I still don't get auto thumbnails nor auto titles for posts. Is it possibly because I post so much on #worldnews ? Or maybe it's just on my end?

[–] [email protected] 1 points 3 years ago* (last edited 3 years ago) (1 children)

Probably your end. Lemmy doesn't have the ability to block thumbnails from sites or users. My guess is that the source site isn't allowing other sites to fetch their images.

[–] [email protected] 0 points 3 years ago (1 children)

It is consistant on every source. If you look in #worldnews you'll see all my recent posts are lacking a thumbnail, and auto titling isn't happening either.

[–] [email protected] 1 points 3 years ago (1 children)

Are you using a third party app? I can't think of any reason that's happening so it is actually really weird.

[–] [email protected] 0 points 3 years ago (1 children)

No, I'm just using the website. It's really weird. it started after the server went down. But it is very likely it's on my end. I just don't know why it is happening.

[–] [email protected] 2 points 3 years ago (1 children)

Me neither. But I want to assure you that you're not being singled out for your content because the site can't do that.

[–] [email protected] 0 points 3 years ago (1 children)

Good to know! I'll see if it works with a different browser or something. It's not a huge problem, although it makes the posts and communties less engaging

[–] [email protected] 1 points 3 years ago

I think thumbnails are fetched by the server, not in the browser. So most likely it is related to the sites you are linking, maybe they blocked lemmy.ml, or iframely doesnt support them.

[–] [email protected] 1 points 3 years ago (1 children)

I'm about to host a lemmy instance and I'm worried about such incidents.

we have yet to code purging dangling pictrs

Would you please explain what are dangling pics and how to delete them?

[–] [email protected] 1 points 3 years ago

You can read the github issue for more on that.

[–] [email protected] 1 points 3 years ago* (last edited 3 years ago) (1 children)

Just wanted to point out that Cloudflare has a CSAM feature that you can voluntarily turn on. It will search and automatically flag any child abuse content it finds and let you know in a timely way, so you can take care of it early. Also, it blocks anyone from accessing it of course.

Figured since everything here is publicly readable anyways, the data privacy part won't be as much of a concern.

[–] [email protected] 1 points 3 years ago* (last edited 3 years ago) (1 children)

Please don't mitm lemmy with cloudflare if possible! They wouldn't only be able to see public stuff but also anyone's browsing behaviour and passwords. Also they could inject malicious javascript and (non-javascript) csrf exploits.

[–] [email protected] 1 points 3 years ago (1 children)

All fair points! I figured in the larger scheme of things that any data Cloudflare receives will not be of much use to them considering how large they are and how much they handle. And the tradeoff would be exposing some data to Cloudflare, but also a much better fighting chance at tracking down and removing such material. If there is a way to make that work I think it is at least worth looking into because of the benefits.

[–] [email protected] 1 points 3 years ago

any data Cloudflare receives will not be of much use to them

It likely won't, but they operate under a jurisdiction that doesn't accept the souvereignty of other states and actively engages in espionage and acts of terrorism online.

the tradeoff would be exposing some data to Cloudflare

This would expose all lemmy data to cloudflare and allow them to alter it! Also they can link lemmy users to other sites and they hinder users that need to use anonymity networks.

Lemmy desperately needs a better moderation concept to fight illegal (and spammy) content, but using a service that endangers users can't be a solution to any problem.