I am also ‘Andrew’, the admin of this server. I’ll try to remember to only use this account for posting stuff.
lemmy.world recently updated from version 0.19.3 to 0.19.10. This change - for Lemmy communities to federate out posts with the community name as a hashtag - was introduced in 0.19.4, so that might be the other reason why this has only just become an issue for you.
The attacker seems to be the admin of those two instances. Both instances have their registrations closed.
The alternative theory would be that these instances had open registrations, but rightly closed registration down after the admins noticed the bots. chinese.lol is on 0.18.4 with an admin with a 2 year old account, lemmy.doesnotexist.club has an admin with a 1 year account, and it was also that instance that the ‘nicole’ person has used before. This downvote attack would need to be a long time in the planning for what you’re suggesting to be true.
There’s an open issue for that kind of thing here: https://github.com/LemmyNet/lemmy/issues/818
I don’t think that blog author is male, btw.
It’s harder to detect, but wildly optimistic if they think that people are going to manually type URLs out. It feels like this latest manoeuvre is just to score a win in the arms race against them.
I think that’s what he meant, yeah (no existing DB migration scripts, etc). I don’t know much about it, but I imagine it was probably always going to involve someone more familiar with Lemmy diving into the trenches.
Probably not. It’s fairly rare for those sorts of API endpoints to be covered by mobile apps.
He’s mentioned this before, but I’ve never been able to find an actual PixelFed Group (it doesn’t appear to be the same thing as what they call Collections). I’ll have another look when pixelfed.social enables them this weekend (but I suspect parsing titles for the posts will be a nightmare).
Also, ‘smithereen’ is tagged but I’m not sure of its status (all I found was 1 private instance run by the dev, federated with 1 “explicitly-free-speech” Akkoma instance).
Clarkson has been trying to warn us for years, and we haven’t been listening. He punched a producer when his dinner wasn’t on time, to highlight the impending delays to food deliveries after Brexit. He left the BBC to work for Amazon, presenting a show that was a shadow of it’s former self, to illustrate how billionaires diminish everything they touch.
He couldn’t be clearer with his messaging, but the UK continues to ignore him.
I once did some office work for a tobacco company, where you were allowed to smoke at your desk. I don’t smoke, but I had a few ciggies when I was there, because you realise that you’ve never really pointed at anything, until you’ve pointed at it with a cig in your hand. It’s just a better way to point at stuff (I don’t make the rules).
The microwave is a fundamental part of the Make Tea -> Forget About Tea -> Reheat Tea cycle.
Also, I have to put the bag in first, because otherwise I’ve no idea how much room I need to leave for it (which you’d think I’d be able to eyeball by now, but apparently not).
You don’t need to apologise. I wasn’t trying to give you a hard time (sorry if it seemed like that). The remote posts I linked to in my earlier comment have now gone (maybe I was being given a cached version before - that’s a possibility I often forget about).
Imgur can also handle videos with audio. The main restriction with them is that the MP4s have to be less than a minute.
I’ll embed one here, which may or may not work, depending on what you’re using (if it doesn’t embed, the post is here)
PieFed is just a Fediverse platform that aims to inter-op with Lemmy in much the same way that it aims to inter-op with any other Group-based platform (MBIN, PeerTube, NodeBB, Wordpress).
Lemmy’s “quirks” are the reason why your account won’t see Polls from MBIN, or channels from PeerTube, or posts from NodeBB, or backfilled content from Wordpress.
It’s not my intent to criticise Lemmy, but these are verifiable problems, whereas it doesn’t seem fair to criticise PieFed for problems that you can’t clearly remember.
Account -> Activity Alerts will show you everything for which you’ll get a notification.
There’s a Lemmy community at [email protected] (although I’ve found that chatting about TV is harder than it looks).
I go there for the post-episode TV discussions (though I don’t log in). It can interesting to read people’s theories for something like Severance, although the whole experience can end up being depressing (because of mod shenanigans, the over-use of spoiler syntax, and the dissonance / over-reaction created when some show that the hive-mind has already determined is the best thing ever has a duff episode)
Wordpress if that is counted as federated
It’s an option for the blog owners to select, but it’s more federated than Loops (which currently isn’t federated at all). As a random example, here is a Wordpress blog post that was federated out to Mastodon, and then federated out to PieFed.
I don’t know. It’s not something I’m familiar with - it might just default to saying ‘closed’ if it doesn’t have the data.
It’s interesting that the obvious bot accounts on those instances were set up in mid-March last year, so I’m guessing that these are somebody’s army that they’ve used before, but overplayed their hand when they turned it on the DonaldJMusk person. The admins can reasonably be blamed for setting up instances with open registrations and no protections and then forgetting about them, but I’d be wary of blaming them for being behind the attack directly. The ‘nicole’ person is unlikely to have used their own instance - it’s probably just someone with the same MO as whoever owns the bots, finding and exploiting vulnerable instances.