Just another Reddit migrant, not much to see here.

I subsist on a regular diet of games, light novels, and server administration.

  • 2 Posts
  • 29 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle

  • Realistically, the US Government is going to continue supporting Israel no matter what happens until the US has meaningful voting reform. Israel is an entrenched interest due to the amount of money changing hands in Washington. (defense contracts, etc.) This is not helped by the social stigma of the average American not differentiating between Israel as a political entity and Jewish people as a demographic. It’s one of those “broken by design” social constructs.

    The logical fallacy that I largely see in play is the assumption that the Republicans would have handled this any differently. While I agree that Biden’s stance is noteworthy, as a reminder that the parties are more alike than they are different on certain topics, it doesn’t change the landscape of the two leading presidential candidates. One of them is in bed with Putin and appears to have a vested interest in entrenching himself as a leader who can never lose an election. (i.e. an aspiring president for life) The other candidate is still flawed, but doesn’t represent an existential threat to the political institution itself.

    I’d much rather have an option other than Trump or Biden, but until more states enact voting reform at a local level we’re stuck with a choice of which decrepit old man is least likely to be disruptive to the entire system of government. The Republican party needs to continue its losing streak until it decides the populist authoritarian movement is a failed strategy.


  • Vote for useful things and voting reform at the local level.

    Vote for whatever keeps the system itself functioning at the federal level. If one party’s leaders are in bed with “presidents for life” or the authoritarian governments that were ratfucked to make them presidents for life, you are going to end up with a president for life.

    Important to note: If enough states enact voting reform at the local level, you no longer need a constitutional amendment to have voting reform that influences the federal level. If you are looking for real change, this is where it is. It is slow and unsexy, but don’t bitch about your federal vote meaning nothing if you’re not doing anything with your local elections.


  • Yeah, there is no need for “final solution” style accountability here. This was a project that a single developer was working on when the stars just happened to align and drive a lot of attention to it at once. A commercially oriented website in the same situation would struggle to deal with it and be forced to take out loans in order to expand staffing and infrastructure capacity.

    The phrasing of Ernest’s initial post suggests that there is at least one exploitable vulnerability that spammers are taking advantage of and can’t be openly discussed until the gates are closed. I understand the frustration and optics problem that comes with “easy and important fixes” sliding on the schedule (i.e. the topic of the other thread), but look at it this way:

    • Ernest is too slammed with work to be consciously creating more work for himself.
    • He needs the spam and bot problem to go away so ASAP so that it stops taking time away from him. This includes the missing moderation tools, spam/bot campaigns that are operating at a scale that those additional tools would have difficulty addressing regardless, and the issues he can’t talk about yet that were hinted at above.
    • If he is waiting to push out a fix to problems that would greatly reduce his workload, there are very good reasons for it.
    • If he is not able to push out fixes that reduce his workload, it stands to reason that fixes unrelated to them are also sliding.








  • And if they are scoped realistically.

    The contraction we’re seeing in the tech space this year is in large part a consequence of venture capitalist funding. A significant portion of tech sites were being funded at a loss, with the idea that profitability could be achieved after establishing a userbase. Rising interest rates pushed the VCs to put pressure on the companies they invested in: “no more free lunch, realize our gains now”. This is why you see a rash of tech sites abruptly restructuring (Discord) or completely collapsing (gfycat). Reddit falls somewhere between the two, because it’s likely they’re seeking an IPO and they don’t care about the fate of the website once they cash out. Twitter is ruled by an emperor with no clothes. Facebook can’t make as much money as it did prior to the added government scrutiny, and the Zuck has been frantically trying to diversify his company these past few years.

    This is a long-winded way of saying that ernest deserves a lot of praise here for being realistic and up front with the operating costs of running the largest kbin instance. lemmy and kbin draw inspiration from the social media platforms that came before them, but can’t budget for growth the same way that their predecessors did. It’s not going to be cheap, they aren’t going to get the free lunch that prior social media platforms had, and ernest needs to proceed with the well-being of both himself and his project in mind.


  • There are plenty of high volume, non-malicious bots that do. robots.txt is a thing for a reason, and we can see here that lemmy.ml has implemented it. Not all bots that ignore robots.txt are malicious though, just poorly designed. You can basically lump them into three categories:

    • Well-behaved bots that announce that they’re bots in the User-Agent header and obey robots.txt (note that they may still slam the server even if they obey it)
    • Mediocre bots that announce that they’re bots in the User-Agent header but ignore robots.txt (or vice versa)
    • Bad bots (malicious or otherwise) that announce their User-Agent as other things, often pretending to be other software.

    Their logs told them they had a lot of traffic from stuff identifying itself as bots. Throwing that traffic out wouldn’t break lemmy but would help them deal with the capacity problems that all of the mainstream lemmy/kbin instances had to deal with shortly after the Reddit exodus began. They fucked up and tagged kbin in the process, which definitely would have been one of the highest volume ActivityPub consumers matching their criteria.


  • Thanks for the link! Your take is pretty much the same as mine. Nothing for me to expand on, you’ve pretty much nailed it.

    PS. This is apropos of nothing, but I’ve seen you around and never stopped to tell you. You have just the coolest username and I love it.

    lol! It’s borrowed from the name of a character I made for Guild Wars 1. As the internet got bigger my older nicks became more hotly contested, but somehow this edgelordy one is never taken. :) The downside is that I can’t easily feign ignorance about stupid things I’ve said in the past, but at least most of the evidence got nuked along with my entire Reddit history.


  • Like I said, a blind sort by volume of the top n user agents in their logs containing the word bot would be enough to do it. Drop the output of that sort into a text file or a hash table, then create a user agent filter in the nginx config that blocks the specific strings seen in that file.

    It is very much the sort of thing that a single admin can do by accident, and the exact sort of problem I would expect to see with rapidly growing instances operated by a very small number of tech enthusiasts.


  • That assumes they were using an expression based filter in the webserver config itself. If they were extracting user agent strings containing the word “bot” from their webserver logs and adding them to a static list of user agents to deny (particularly if it’s an external file referenced by the config that strings can be easily dumped into), it’s a plausible explanation. I can especially see this happening if they did a blind sort by log volume and only inserted the 20 biggest results or somesuch.

    Even if this was the case, was someone in a position to observe that one of those strings contained “kbin”? Yes. Was it possible they still didn’t notice? Yes, especially if shell pipelines are involved. Was it possible for someone to notice but assume that this wasn’t the kbin software itself, but a third-party tool that someone else wrote? Also yes. Still possible that all of this is bullshit? Still yes!

    Full disclosure: I’ve worked in the webserver and webapp adjacent spaces for a long time, and I have a lot of appreciation for how much damage one person’s stupid change without peer review can do in massive production environments. :) I am admittedly biased toward applying Hanlon’s razor in these situations.


  • Yeah, your original comment came up when I did my research immediately prior to leaving a note on a niche lemmy.ml community that I subscribe to. …Which immediately federated over to the original instance, because I missed this developer comment and the other admin didn’t reply to the thread you were quoted in until several hours later. Based on the timing of the older comment I don’t think it has anything to do with your post, but you can pretend you didn’t see this. ;)

    In any event, it’s dealt with. I think it reinforces the need for proper backchannels between the highest population ActivityPub instances, but I wouldn’t be surprised if some of the politics is acting as a barrier to this since both lemmy.ml and kbin.social are directly run by their respective software developers.

    I’ve seen a few offhanded references to how kbin originated as an alternative to lemmy without the tankie implications, but I haven’t found any links to posts from ernest himself that support this. By actions alone I would say that he strongly favors interoperability over politics, but who’s to say what thoughts the developers have for each other. :)






  • A troll is insincere yet playful.

    I chuckled at least. A troll’s motivation for the rise that they seek is largely inconsequential, as is the delivery mechanism. ;) Let’s not go and disenfranchise the majority of the internet’s trolling population with narrow typecasting!

    While we’re on the topic of trolling, are you familiar with Sealioning?

    Sealioning (also sea-lioning and sea lioning) is a type of trolling or harassment that consists of pursuing people with relentless requests for evidence, often tangential or previously addressed, while maintaining a pretense of civility and sincerity (“I’m just trying to have a debate”), and feigning ignorance of the subject matter. It may take the form of “incessant, bad-faith invitations to engage in debate”, and has been likened to a denial-of-service attack targeted at human beings. The term originated with a 2014 strip of the webcomic Wondermark by David Malki, which The Independent called “the most apt description of Twitter you’ll ever see”.

    It’s a rhetorical question, no need to respond. Someone else might learn something they didn’t know before today. :)