this post was submitted on 27 Jul 2026
1369 points (99.2% liked)

Fediverse

43495 readers
97 users here now

A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, Mbin, etc).

If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!

Rules

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)

founded 3 years ago
MODERATORS
 

As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.

you are viewing a single comment's thread
view the rest of the comments
[–] mathemachristian@lemmy.blahaj.zone 56 points 3 weeks ago* (last edited 3 weeks ago) (4 children)

Refactored their existing “enable toxicity mode” feature into a clearer, toggleable blocklist feature

No! The whole point of the fediverse is not to have centralised blocklists. Having blocklists baked in to the code, especially ones that get updated in a centralised manner with no accountability and without telling users they're on it is absolutely antithetical to the platform and one of the main reasons why people are leaving reddit and coming here. If you want to curate the experience of a user in that manner, what you do is open an instance and advertise it as such. That way people can, at least on lemmy, know where they're banned from without having to dive into the code or pull API endpoints manually. In fact how a lemmy instance federates and how it curates this experience is one of the distinguishing features among the instances. You have instances like lemmy.zip that federate all that will have them, instances like hexbear that are very quick to defederate in order to keep a safe-space and instances like blahaj that are somewhere between.

A front-end (or any piece of code that is made for being deployed on multiple instances) should be agnostic to all of this. It's up to the admins of the instances and not the devs to curate and this is one of the main reasons why I don't trust the piefed dev. Sure you can disable almost everything, but that still means that an admin has to do work in order to get to a neutral place from where they can then curate.

[–] ramble81@lemmy.zip 8 points 3 weeks ago (1 children)

Not every admin has the time or skill to curate. As long as the dev is open about it and there are configurable features to disable it, I don’t see what the issue is. Ultimately it creates no difference for a user if the admin creates it or the Dev does as long as it’s communicated.

The advantage of the fediverse is “don’t like it, go to another instance or build your own”, not to tell devs what they can and can’t do. Hell I never even interacted with Tesseract since I use a different client and an open instance.

[–] mathemachristian@lemmy.blahaj.zone 10 points 3 weeks ago (1 children)

The issue is that it's one person shadowbanning people without their knowledge for any arbitrary reason across instances. Like even if it's opt-out, that's still problematic since it makes the default experience whatever that one person thinks it should be. Why should one guy get to decide across the entire fediverse whether your posts are opt-in? That is antithetical to the very concept of the fediverse.

[–] curbstickle@anarchist.nexus 6 points 3 weeks ago

I dunno, I can understand a curated blocklist, topic-based. Obviously not what this is - if things were up front it wouldn't have been an issue - but maybe someone just does not like memes. A curated meme community list would be handy. If someone didn't want to be on a more curated instance like blahaj but still wanted to filter out specifically problematic anti-trans users, that would be useful.

Just like its up to the users to decide what instance you want to join, it also should be up to the user to decide if they want to take that further, and a front end would be the appropriate place for that (especially since its not baked into lemmy or piefed to have an imported list).

The problem has nothing to do with the option of centralized blocklists, but the hidden nature of the one in tesseract in its entirety.

[–] artwork@lemmy.world 5 points 3 weeks ago* (last edited 3 weeks ago)

I am sorry, but I disagree with the "centralised blocklists" in a:

Decentralized social networking platforms...
Source

You should be able to block and unblock freely whoever and whatever you want.
The "centralized" may be suggestions (i.e., toggleable), and only, where instances with opt-in keep them implicit/optional, and instances with opt-out explicitly warn about them during a registration.

[–] orlyowl@piefed.ca 2 points 3 weeks ago (2 children)

It’s up to the admins of the instances and not the devs to curate and this is one of the main reasons why I don’t trust the piefed dev.

Can you elaborate on that? Asking for curiosity, not to challenge you.

[–] wjs018@piefed.wjs018.xyz 6 points 3 weeks ago

PieFed has a default list of domains/instances that are blocked when you do a fresh install for a brand new instance. A critical difference between PieFed and the Tesseract blocks is that any of the blocks in PieFed are completely visible to, and under the control of the admins of the instance. So, ultimately, it is just an out-of-the-box default, but the instance admins always have ultimate control over moderation/federation choices. This Tesseract stuff is taking those powers away from the admins.

[–] mathemachristian@lemmy.blahaj.zone 3 points 3 weeks ago (2 children)

The two main lists that are implemented by default are a defederation list and huge huge listof blocked domains which includes wikileaks for instance, there are other lists (I don't know if the "trusted instance" list comes prepopulated) and almost all can be emptied or added to. But that means that an admin that sets up the software has to go through a whole rigmarole to get the instance to neutral before being able to do what they think is best. And hope they didn't miss anything.

In the case of the blocked domains it's particularly grating since it has like 4000 entries that you either have to delete one-by-one or have to do a manual db transaction to empty the list and that is by design. Plus all you get as a warning that such a list exists is one line during the setup that says Added 'No-QAnon' blocklist, see https://github.com/rimu/no-qanon but it's definitely not just QAnon links.

[–] orlyowl@piefed.ca 3 points 3 weeks ago

Thanks for the info!

[–] wjs018@piefed.wjs018.xyz 3 points 3 weeks ago (1 children)

FYI, next version of PieFed has an "Unban All" button for clearing all domain bans to try to make this easier.

Screenshot from my instance: image

Oh that's good to hear. It sucks that people have to constantly fight the dev to keep his opinions out of the code though, must be tiring for all involved surely...