112

~~Almost~~ OVER 90% of the accounts on lemmy are now bot accounts!! (lemmy.fmhy.ml)

submitted 2 years ago* (last edited 2 years ago) by [email protected] to c/[email protected]

180 comments fedilink hide all child comments

Here you can see 2 day old post warning about the danger of not using email/captcha verification: https://lemmy.ml/post/1345031

And here are stats of lemmy platform where it shows that we gained 200 000 lemmy users in 2 days: https://lemmy.fediverse.observer/dailystats

Another tracking site with the same explosion in users: https://the-federation.info/platform/73

What do you think? Is it some sort of a bug or do people run bot farms?

Edit2: It's been now 3 days and we went from 150 000 user accounts 3 days ago to 700 000 user accounts today making it 550 000+ bot accounts and counting. Almost 80% accounts on lemmy are now bots and it may end up being an very serious issue for lemmy platform once they become active.

Edit3: It's now 4th day of the attack and the amount of accounts on lemmy has almost reached 1 200 000. Almost 90% of total userbase are now bots.

Edit 3.1: my numbers are outdated, there are currently 1 700 000 accounts which makes it even worse: https://fedidb.org/software/lemmy

you are viewing a single comment's thread
view the rest of the comments

[-] [email protected] 6 points 2 years ago* (last edited 2 years ago)

Instances already have an ability to turn on both captchas and email verification.

[-] [email protected] 3 points 2 years ago

There are almost 1000 lemmy instances already. Getting individuals to fix their signup settings so that they mandate CAPTCHA likely will have to be driven from the lemmy product update level and an agreed upon defederation list for non-conformant instances.

And bot farms would be able to spin up new instances themselves, so being able to do a blacklist based federation model (federate with all by default except x, y, and z) isn't going to be viable. There's going to have to be a whitelist (federate only with a, b, and c) and maintaining that as new instances get added will be problematic without an overarching way of pushing updates of known "good" instances automatically.

[-] [email protected] 3 points 2 years ago

Both should be turned on by default, imo.

[-] [email protected] 3 points 2 years ago

Absolutely agree.

[-] [email protected] 1 points 2 years ago

I do not, and that comment might put you on the list of people behind this attack.

As well it can put me behind it.

Are bots creating accounts? Yeah, most definitely. Do we have the tools to fight it, no we do not.

The only tool would be predicting behavior and, for example, adding additional question/action few days after registering.

this post was submitted on 22 Jun 2023

112 points (88.4% liked)

Lemmy

13413 readers

68 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to [email protected].

founded 5 years ago

MODERATORS

[email protected]