• Reygle@lemmy.worldEnglish
    5·
    1 day ago

    I’m disappointed the list does not include “reason for…”, because I want to know what specifically I did, so that I can do it harder, more often, in all capitals

    • OpenStars@discuss.onlineEnglish
      63·
      1 day ago

      I wondered the same - like Ada is one of if not the most level-headed person on the entire Threadiverse. But when I asked elsewhere I simply got downvoted bc Reddit Lemmy gonna Reddit Lemmy, I guess.

      The author explains his reasoning here: https://lemmy.world/post/49817942, and specifically says about this:

      Instances whose admins directly endorse violence¹, systematically look the other way²,
      ¹ e.g. dbzer0, .nexus
      ² e.g. blahaj, quokk

      I don’t know the source behind that though - maybe some people on that instance calling for Luigi-ing anti-trans people, or something like that?

    • Foxfire@pawb.socialEnglish
      6·
      1 day ago

      Thanks for the link, I didn’t know about this yet. So from what I gather, deploying malware on other’s servers so you can secretly control the narrative of what ideas can propagate is something “someone had to do.” Disgusting behavior, betraying trust and consent in one fell swoop for who knows how many folks and server owners that used the software.

      I hope it didn’t matter even if it was written as a heartfelt apology, but hopefully the doubling down here further emboldens the complete removal of Terreract from Lemmy server stacks, and users’ willingness to utilize it in any capacity. This is obviously not an individual anyone can trust to run their code, and who knows what may be cooked up next—or is still waiting to be discovered.

    • Kushan@lemmy.worldEnglish
      34·
      2 days ago

      Oh wow, so guy explains that he did it because the fediverse is so toxic by making a super toxic post. Right.

      • Eldritch@piefed.worldEnglish
        23·
        2 days ago

        And the guy Luigi killed, killed far more people to boot. Killing by neglegence and bureocracy. That’s just wholesome normal shit right? Nothing wrong witrh that. God forbid you celebrate the death of a murdurer… you monster!

        I’d like to see a society where murder isn’t the solution. But when murderers are allowed to profit and succede with no reprocussions. That certainly isn’t it. And I’m certianly not going to be up in arms about the person that did what society failed to do. It’s rediculous.

      • Wren@lemmy.todayEnglish
        8·
        2 days ago

        Hello, sad detective man, haven’t seen you in a while. Are you on the list?

    • sp3ctr4l@lemmy.dbzer0.comEnglish
      241·
      2 days ago

      Oh my god… I haven’t feasted on tears like that… in quite a while.

      What a little bitch.

      Yeah, you got caught, dumbfuck, red fucking handed!

      Oh yes, succulent tears, salty tears… mmmmm.

        • sp3ctr4l@lemmy.dbzer0.comEnglish
          12·
          2 days ago

          Yep… yep this is approximately as stupid as that was.

          Like I said elsewhere, might have been a different thread… reminds me of GMod RP admins working in SteamID blocklists to ban rival RP community members.

          The funny part with that though is… these were literal 14 yo’s, and they were clever enough to actually encrypt the entire file, you needed a server key to unencrypt and run both that file and the whole gamemode.

          So, from that lense, this is more poorly executed than what a 14yo squeaker that ran a GMod server almost 20 years ago can do.

          Its so sad it wraps around to hilarious, for me.

          Dumbfuck boomer Admiral Patrick got out done by his grandson, before his grandson’s balls had even dropped.

          Just comedy gold.

    • Ech@lemmy.caEnglish
      10·
      2 days ago

      I wonder which one of those 10 deadly sins I committed, according to them. Can’t say I feel I’ve done any of those, personally, and yet here we are. Turning the banlist of their “friendly frontend” into their personal shitlist really belies what they’re claiming here.

    • nullspace@lemmy.worldEnglish
      4·
      1 day ago

      Me too. Curiously, there’s a username that’s similar to mine that’s only a month old and as far as I can tell hasn’t really posted anything. I wonder how they got on the list.

  • godsammitdam@lemmy.zipEnglish
    37·
    2 days ago

    Take this as a reminder…be more left wing. More dark woke. Put these idiots in their place whenever you see them. Shame them, and even better, turn them into a joke. They’re special little snowflakes that can’t handle the spotlight.

    That’s my guess at how I got onto the list being a relatively new account, specifically calling out people like Madthumbs, AliOski, GoatSynagogue and others.

    Or I was pretty active in the threads in Mullvad showing how ethnic cleansing is right wing and fascist, the google threads trying to lock down open source development, and the threads on if lolicon should be translated as pedophile, which it should. That thread got deleted unfortunately lol.

    • ClathrateG [none/use name]@hexbear.netEnglish
      1·
      23 hours ago

      be more left wing

      Yes

      More dark woke

      Dark woke is a cooked up-in-a-DNC-thinktank triangulated centrist attempt to appeal to the youth, ‘Pokémon go to the polls’ with a modicum more effort

    • sp3ctr4l@lemmy.dbzer0.comEnglish
      4·
      2 days ago

      … what you’ve said… reminds me of a song.

      ahem

      Find him, bind him,

      Tie him to a pole and break

      His fingers to splinters.

      Drag him to a hole

      Until he wakes up naked

      Clawing at the ceiling of his grave.

      Yo ho. Y’arr.

      When things like this happen… I get a strange, nautical kind of jolly.

      Who doesn’t like a good song?

      Whats the point of keeping up the good fight… if you can’t have fun while doing it?

      Ahahaha!

  • fonix232@fedia.io
    431·
    2 days ago

    For the love of all that’s good and proper, PPEASE SPECIFY WHICH LIST.

    Anyone who’s even just a day out of the loop will think you’re aching to be a member of the Epstein class.

    • njm1314@lemmy.worldEnglish
      171·
      2 days ago

      Nah man, no one was thinking that. Ain’t nobody around here Rich enough to be on that list.

    • ClathrateG [none/use name]@hexbear.netEnglish
      221·
      23 hours ago

      ‘Tesseract’ is a Lemmy frontend client, it’s code contains hardcoded lists of instances and users that were blocked:

      A better more detailed explanation from https://hexbear.net/post/9101245?:

      spoiler

      Also /c/modabuse. Also /c/yepowertrippinbastards. Also lemmy.ml/c/worldnews, comrade, ACAB, and 552 individual accounts across 67 instances, about half of them on lemmy.world.

      None of this is in the source code. It’s downloaded at runtime from a file nobody has ever looked at.

      If you’re just tuning in

      Tesseract is a third-party web frontend for Lemmy, maintained by asimons04 and licensed AGPL-3.0. Admins deploy it on their own servers alongside or instead of lemmy-ui, and there are public instances of it people use to browse Lemmy generally. If you’ve used a Lemmy site that didn’t look like stock Lemmy, there’s a fair chance it was this.

      Last week db0 posted a PSA: Tesseract contains a blacklist of instance domains compiled directly into the application. 32 of them. Admins can’t see it, can’t configure it, and aren’t told it’s there. Connect to a listed instance and the app tells you it’s “incompatible,” which is not true.

      I went through the code to see how that was implemented. The hardcoded list turns out to be the small half of the system.

      There’s a second filter policy fetched over HTTP every time the app loads. It isn’t in the git repository. It’s unauthenticated and world-readable, so anyone can pull it. Right now it carries 552 user accounts, 2,275 username patterns, 54 instances, 97 communities, 289 keyword patterns and 351 domains, with every category set to hide matches rather than flag them. Not collapsed behind a click. Simply absent, with no indication anything was removed.

      Verify all of it in ten seconds

      curl -s https://tesseract.dubvee.org/tesseract/api/system/policy \
  | base64 -d | gunzip > policy.json

      That’s the live policy, base64-wrapped gzip, 111KB of JSON when it unpacks. There’s a stale fallback copy at /data/policy.dat as well.

      It filters criticism of moderators

      • lemmy.sdf.org/c/modabuse — listed
      • lemmy.dbzer0.com/c/yepowertrippinbastards — listed
      • lemmy.dbzer0.com/c/YPTBcirclejerk — listed
      • community regex power ?tripping?
      • keyword censoring me

      Call the rest of it whatever you like. This part is not spam defence.

      It filters words

      The 32 community name patterns include Communis(t|m), Conservativ(e|es|ism), Leftis(t|m), Libertarian(ism)?, ^Green Part(y|ies), Zionis(t|m), (Police|Cops), guillotine and billionaire.

      Keywords include comrade, ACAB, neoliberal, proletaria(n|t) and death to.

      Filtered communities on instances that aren’t blocked: lemmy.ml/c/worldnews, lemmy.today/c/news, lemmy.ca/c/politicalnewscanada, lemmy.ca/c/usa, infosec.pub/c/strategic_unions.

      The 552 users aren’t bots

      67 instances. 272 on lemmy.world alone, 40 on sh.itjust.works, 19 on lemmy.ca, and 28 instances contributing exactly one person each.

      355 of the 552 usernames are plain alphabetic, twelve characters or under, median length eight. Only 36 look like spam registrations. A bot list looks like the opposite of that.

      Seven of them aren’t even Lemmy. There are Mastodon and Friendica accounts in there: people who have never used Lemmy, hidden by a Lemmy frontend, with no possible way of finding out.

      I have the list and I’m not posting it. Most of these are ordinary people who got pattern-matched, and 552 names on this comm is a harassment target inside an hour. Run the command above and grep for yourself.

      And it lies about it

      When the instance block fires you get: “Incompatible Instance. Not Supported. $instance is not compatible with Tesseract.”

      Nothing is incompatible. It’s a policy decision dressed as an API error, and it’s what had db0 chasing a version mismatch that never existed.

      For the hidden users, communities and keywords, you get no message at all.

      Admins can’t switch it off

      Tesseract has env vars for PUBLIC_DOMAIN_BLACKLIST, PUBLIC_FAKE_NEWS_BLACKLIST and the shortener lists. There is none for either blocklist. enableToxicMode bypasses the other filters and explicitly not this one.

      Self-host it and you cannot disable this, nothing in your config admits it exists, and the contents can change without you pulling a commit.

      Before someone says it

      A lot of that domain list is real spam defence. It filters conservatism as well as communism. “It targets the left” doesn’t survive the data and I’m not going to pretend it does.

      The problem is that spam filtering and political editorial got welded into one undocumented, remotely-updatable blob, shipped hidden, to admins who’ve never read it and users who don’t know it’s there. The spam work is what makes the rest unauditable: “it’s a spam list” answers every individual question and none of the whole.

      And /c/modabuse is not spam.

      Asks

      1. Publish the runtime policy in the repo, or kill the endpoint.
      2. Stop reporting a policy block as a technical incompatibility.
      3. Tell users when something’s been hidden. One line.
      4. Give operators an off switch, like every other blacklist in the codebase has.

      It’s AGPL-3.0 and db0 already forked it. That’s the licence working as designed. But forking isn’t disclosure, and the admins who need this are precisely the ones with no reason to go looking.

      If you run Tesseract, you are relaying a 111KB moderation policy you have never read, under your instance’s name, to users who don’t know it exists.

      Full contents of every list, unedited, in the comments.

      Basically like piefed another chud project for those upset that a federated social network largely free from corporate control has left wing-users expressing left wing opinions outside of the Overton window of acceptable political opinions instilled by billionaire-owned media, opinions banned/hidden from places like reddit, so part of the project was to move the politics of the fediverse rightwards

      • godsammitdam@lemmy.zipEnglish
        11·
        2 days ago

        part of the project was to move the politics of the fediverse rightwards

        Now that’s an Epstein thing given reddit and 4chan!

        • ClathrateG [none/use name]@hexbear.netEnglish
          6·
          2 days ago

          The epstein-class of people seek control over things they don’t control like the majority of the fediverse, not saying the terreract/piefed devs are being paid directly but at the least they’re doing their work for them

  • nil@piefed.caEnglish
    7·
    1 day ago

    Browser extension to append a badge of fame next to the username on the list would be easy to make

  • Furbag@pawb.socialEnglish
    12·
    2 days ago

    Only two pawb.social accounts were specifically blocked and I wasn’t one of them. What an exclusive club to be a part of.

    • Foxfire@pawb.socialEnglish
      4·
      1 day ago

      One of those accounts basically made some benign comments and posted Sonic art they drew to relevant places. Given that I’m surprised more users aren’t on there. Hell, I’ve literally drawn Luigi memes and wasn’t there, idk.