Lemmy

hideshow 10 child comments

[–] chiisana@lemmy.world 40 points 3 years ago (1 child)

This right here.

Op, if you’re not ready to moderate, don’t spin up your own server or do your own private instance. If you’re going to moderate, do it properly and don’t spew bad ideas while hiding behind a dumb “alert” throwaway.

parent

[–] T156@lemmy.world 16 points 3 years ago (1 child)

To be honest, I'm surprised that that username was allowed (or not reserved). It seems like it would introduce a risk where people could pose as Lemmy developers or something along those lines.

parent

[–] chiisana@lemmy.world 17 points 3 years ago (1 child)

Lemmy is very “open” right now; some might say by design, other might say flawed. OP is maybe coming from a good place and actually wants to help, but instead of doing it tactfully, OP is becoming the exact thing they’re advocating against — a spammer posting garbage.

parent

[–] imaqtpie@sh.itjust.works 2 points 3 years ago

Meh, at least it's driving engagement. There's going to be friction for the time being as people are all mixed together into these communities. I'm sure plenty of casuals were engaged by this post, as it has over 1k upvotes.

But yeah I didn't even notice his username is alert. I'm still on high alert for Reddit shills trying to destabilize this platform, though. Just say the word and I'll come over and verbally defenestrate any shill that might appear.

parent

[–] tal@kbin.social 13 points 3 years ago*

I'm not really enthusiastic about email filters either, from a privacy standpoint. Plenty of companies that go harvest email addresses to link identities to activity.

If the CAPTCHA can't handle it, then it ain't doing its job.

parent

[–] gkd@lemmy.ml 1 point 3 years ago (1 child)

I believe you can literally just add a . To the end of your own gmail and it will go to yours. Ie hello.1@gmail.com will go to hello@gmail.com.

parent

[–] le__el@lemmy.world 13 points 3 years ago (2 children)

Actually, hello.1@gmail will go to hello1@gmail.

The one you are thinking I believe is hello+1@gmail will go to hello@gmail

parent

[–] muffedtrims@lemmy.world 7 points 3 years ago (2 children)

Correct, Gmail essentially doesn't "see" dots hello@gmail is the same as h.e.l.l.o@gmail

hello+anything@gmail will also be delivered to hello@gmail. This is great for signing up for mailing lists or subscriptions then creating a filter afterwards to do with it what you please.

parent

[–] tool@r.rosettast0ned.com 1 point 3 years ago (2 children)

Correct, Gmail essentially doesn’t “see” dots hello@gmail is the same as h.e.l.l.o@gmail

There's one exception to that. If you originally created the email address with a dot in it, as in, signed up for gmail as "hello.2@gmail.com," it's treated as a literal character in the username portion and is required.

parent

[–] fart@sh.itjust.works 0 points 3 years ago (1 child)

maybe in the past, but i did that a few years ago and switch between the dot and not

parent

[–] tool@r.rosettast0ned.com 1 point 3 years ago

Yeah, it had to have changed at some point then. It used to be required that you use the dot if you registered it with the dot.

parent

[–] reduce@infosec.pub 0 points 3 years ago (1 child)

It’s still not required in this case…

parent

[–] tool@r.rosettast0ned.com 1 point 3 years ago

Then that has changed at some point. Used to be that if you registered it with a dot in the name, you had to always use that dot.

parent

[–] PlasmaK@lemmy.ml 1 point 3 years ago

This particular quirk can be easily accounted for tbqh.

parent

[–] gkd@lemmy.ml 3 points 3 years ago

Ahh, yea that's right. Regardless, just all the more reason that it's kind of silly to do what OP is talking about. Sure, you could filter out the + signs as well but overall it's a pretty pointless implementation.

parent

[–] cstine@lemmy.uncomfortable.business 0 points 3 years ago

No, you've (maybe) limited your singular solitary instance's growth: your instance is not "Lemmy" and admins should do whatever they find works for them, is something they can easily enforce, and resolves the problem.

If you want to geoip limit signups to Skokie, Illinois? Great! If it works for you and keeps your instance from being The Problem, then it's a valid solution.

(I don't disagree that email domain blocks are not a singular solution to any abuse problem, but I also think that whatever works for the individual admin is perfectly reasonable, and email blocks CAN be worthwhile.)

parent

[+] Shinhoshi@infosec.pub -15 points 3 years ago (1 child)

BTW, it might be more inclusive language to use “allow list” and “block list”

parent

[–] Nitrate55@lemmy.ml 14 points 3 years ago (2 children)

I can't imagine being so obsessed with race politics as to think that purely technical terms like "white list" and "black list", which have never had any connection to race relations whatsoever, are somehow non-inclusive.

parent

[–] Dented-Mantle-4133@kbin.social 5 points 3 years ago

I can't either. "Allow" and "block" has always made more sense to me, though, so I wouldn't mind the change.

parent

[+] Shinhoshi@infosec.pub -7 points 3 years ago

With all due respect, it’s from NIST’s guidance