• Dave@lemmy.nz
    link
    fedilink
    arrow-up
    18
    ·
    1 year ago

    We very often see the same username created across many instances, it’s very easy to do and Lemmy has no protections against it. Plus, there are no protections against creating multiple accounts to upvote your own posts (don’t get any ideas 😆). IP blocks wouldn’t work as instances are entirely independent, so there is no sharing of IP info across different instances.

    Currently there is at least some level of coordination across instances, though, such as Lemmy.world’s Defense HQ, where instance admins can share info about spammers/trolls so we don’t have to wait for a report from one of our own users. There’s also Fediseer, but this protects against spam instances not spam accounts on mainstream instances.

    • Anbalsilfer@sopuli.xyz
      link
      fedilink
      arrow-up
      6
      ·
      1 year ago

      We very often see the same username created across many instances

      Guilty as charged. I’ll say though, there are several legitimate reasons why one might want to do this. I personally use it as a substitute for Reddit’s multireddit feature, by grouping community subscriptions across different instances by theme. As long as users use the same username across instances I don’t think this practice should be automatically regarded as an attempt to sockpuppet. It that was the goal, the accounts would definitely not be using the same username across all the instances.

      • Dave@lemmy.nz
        link
        fedilink
        arrow-up
        4
        ·
        edit-2
        1 year ago

        I didn’t intend to imply that by using the same username across instances you were breaking some sort of rule. Different instances have different moderation policies, different federation policies, and different intents. Having multiple accounts in good faith should not be an issue and was not what I was trying to imply.

        Rather, the intention was to show that we know bad actors do this with nefarious intent. Here’s an example (they show zero comments as they have been banned with content removed - also I think these ones only had posts not comments anyway):

        lemmy search showing many search results for the same name across many instances indicating escort services

        • TheAnonymouseJoker@lemmy.ml
          link
          fedilink
          arrow-up
          7
          arrow-down
          7
          ·
          1 year ago

          These are racist people that want to stereotype and put down India merely for having top 2 IT industry workers in the world, and getting the job vacancies they feel entitled to. These assholes will tell you how India is responsible for 95% of all IT scam calls, but will never tell you how its never India but almost always Western countries (easily above 85% of global) developing ransomware and locking up people’s data for $300-500 per victim.

      • taladar@sh.itjust.works
        link
        fedilink
        arrow-up
        4
        ·
        1 year ago

        Personally I have accounts on multiple instances because I wanted to make communities in different languages and some instances focus a lot more on one language than others and also because the SFW instances defederated the NSFW ones. I do not really interact with the same posts though.

    • dan@upvote.au
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      1 year ago

      there are no protections against creating multiple accounts to upvote your own posts

      They don’t even have to be real accounts. Lemmy uses the ActivityPub protocol, and nothing’s stopping someone from creating an ActivityPub server that federates with a Lemmy instance and spams upvotes from randomly-generated usernames. The server could just pretend that every username is a valid one.

      Of course, I think something like that would be defederated pretty quickly.

      • Dave@lemmy.nz
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Yes, there’s fediseer that can help with that sort of thing. However, I think if it wasn’t spam, it may not get noticed as quick as you’d think. Create a lemmy.world account, post a meme, and use your special server to throw 50 or 100 upvotes at it, and probably no one would realise.