I’m looking for a network and/or internet with strong authentication which is open for unique human users only. Sure, bots could still use someone’s credentials but at least their scale & impact would be limited.
If you’ve any suggestion on how to implement that, then it’s a million-dollar idea.
The “I’m a human” test that only takes a few seconds and then lets you do what you like for an hour was always vulnerable to ‘auth farms’. Pay some poor bastards in the third world a pittance to pass the test a thousand times an hour, let the bots run wild. And the bots have gained the ability to pass the tests themselves, at least by boiling the oceans in some datacentre while the VC money holds out.
Finding the people running the bots, fitting them with some very heavy boots and then seeing if they can swim in the deep ocean is probably needlessly cruel, but I’d be up for tarring and feathering a few. Once the videos got out, the rest might think harder about their life choices…
People downvote me when I say it. That’s all cope. We’re not wrong; if and when this goes mainstream, it’ll attract the same bad actors just as heavily.
Of course, there are surely already a few here testing the waters.
There’s no algorithm to be played in the fediverse. The reward is too low for all the work of making a post visible, and it won’t carry to the next post, essentially starting all over again.
I think there are some differences that make the fediverse more resilient to this. For example, the absence of cumulative account karma keeps out the reddit style karma farming. The ability to ban whole instances also makes it easier to kick out bad actors. Instance admins could also implement their own rules like switching to an invite based system to reduce bot spam. Also it seems to me that reddit is actively encouraging this kind behaviour to inflate their user statistics and there is no incentive to tolerate this kind of spam for a fediverse server admin.
It infuriates me to no end almost everyday I get new plasticized paper ads in my snail mail. Like yeah keep destroying the planet in hopes of selling more junk to destroy the planet with. And my city made it mandatory ! They are not allowed to skip a house.
I wonder if we could make only the sign-up page of Lemmy and Piefed public to the internet, and the rest only accessible through login and verification of being actually bloody human? Could use anti-scraping measures…
I don’t need one of those stupid ID verifications. Something else should be that instead, but what, I do not know. Whatever helps counter AI scraping and preserves anonymity.
If the idea of a healthy Fediverse requires people moving instances whenever one finds themselves close to bottom-feeders and opportunistic parasites, we already lost.
I see your point, though for me it’s not so much the requirement of moving inasmuch it’s the ease of doing so.
With traditional social media, you’d need to move entirely to another social media platform while you might not even be able to enjoy similar content. With lemmy&piefed, you can do that.
That’s the job of the web server, not of the application that runs on it.
There is already software you can get that feeds a never-ending maze of text to AI scrapers, some of which is AI generated and/or designed to poison LLM training. The problem is that these still use up a ton of bandwidth.
A never-ending maze would mean the scrapers just hammer our servers forever. Better to lead them into a honeypot and automatically ban their IP. Like PieFed does.
There are a lot of strategies. afaik a tar pit tries to waste the attacker’s resources by delaying our responses to their traffic? A honey pot tries to funnel bot traffic towards a place which only bots would go to. Once they go there you know they’re a bot and they can be banned.
Yes PieFed has a setting for that. It makes scrapers give up pretty fast but ruins the experience for people without an account so I only use it on really bad days.
It’ll happen in the Fediverse too.
I’m looking for a network and/or internet with strong authentication which is open for unique human users only. Sure, bots could still use someone’s credentials but at least their scale & impact would be limited.
If you’ve any suggestion on how to implement that, then it’s a million-dollar idea.
The “I’m a human” test that only takes a few seconds and then lets you do what you like for an hour was always vulnerable to ‘auth farms’. Pay some poor bastards in the third world a pittance to pass the test a thousand times an hour, let the bots run wild. And the bots have gained the ability to pass the tests themselves, at least by boiling the oceans in some datacentre while the VC money holds out.
Finding the people running the bots, fitting them with some very heavy boots and then seeing if they can swim in the deep ocean is probably needlessly cruel, but I’d be up for tarring and feathering a few. Once the videos got out, the rest might think harder about their life choices…
People downvote me when I say it. That’s all cope. We’re not wrong; if and when this goes mainstream, it’ll attract the same bad actors just as heavily.
Of course, there are surely already a few here testing the waters.
There’s no algorithm to be played in the fediverse. The reward is too low for all the work of making a post visible, and it won’t carry to the next post, essentially starting all over again.
I think there are some differences that make the fediverse more resilient to this. For example, the absence of cumulative account karma keeps out the reddit style karma farming. The ability to ban whole instances also makes it easier to kick out bad actors. Instance admins could also implement their own rules like switching to an invite based system to reduce bot spam. Also it seems to me that reddit is actively encouraging this kind behaviour to inflate their user statistics and there is no incentive to tolerate this kind of spam for a fediverse server admin.
karma is meaningless to seo outside of account restrictions. the people doing this as a job aren’t doing it for imaginary internet points
it doesn’t matter what individual instances do as long as the largest ones have open signups
We are all rats. When this ship sinks, we will float to the next, or (decide to) drop off.
All things considered, how much would actually be lost?
The alternative being…
Squeak
This comment made me realise that the internet could have been born, lived, and died, within my lifetime.
Like phone calls, and texting, bad actors ruin everything that they touch.
Even snail mail.
It infuriates me to no end almost everyday I get new plasticized paper ads in my snail mail. Like yeah keep destroying the planet in hopes of selling more junk to destroy the planet with. And my city made it mandatory ! They are not allowed to skip a house.
Idk their new album sounds pretty good
Good actors too, it’s the nature of capitalism.
And when that happens, we move instances.
I wonder if we could make only the sign-up page of Lemmy and Piefed public to the internet, and the rest only accessible through login and verification of being actually bloody human? Could use anti-scraping measures…
Yes. If you can’t fight the death of the www, embrace it! Help making it happen!
/s
I don’t need one of those stupid ID verifications. Something else should be that instead, but what, I do not know. Whatever helps counter AI scraping and preserves anonymity.
Lemmy also has an admin setting like that. Additionally there will be private, federated communities available in version 1.0.
If the idea of a healthy Fediverse requires people moving instances whenever one finds themselves close to bottom-feeders and opportunistic parasites, we already lost.
I see your point, though for me it’s not so much the requirement of moving inasmuch it’s the ease of doing so.
With traditional social media, you’d need to move entirely to another social media platform while you might not even be able to enjoy similar content. With lemmy&piefed, you can do that.
That’s how it’s been on my mbin instance (fedia.io) for a while now.
That’s discord model.
Fediverse needs to have a layer which traps AI in a never-ending maze.
That’s the job of the web server, not of the application that runs on it.
There is already software you can get that feeds a never-ending maze of text to AI scrapers, some of which is AI generated and/or designed to poison LLM training. The problem is that these still use up a ton of bandwidth.
A never-ending maze would mean the scrapers just hammer our servers forever. Better to lead them into a honeypot and automatically ban their IP. Like PieFed does.
So just find scrapers and bot farm owners IRL and burn down their houses, easy
What about a maze that adds a few hundred ms to the response time with each request, so the load gets less the longer it’s trapped?
I haven’t tried to make something like that. I think it’d be hard to do that without also exhausting our resources too.
Ah, that makes sense
Is that how tarpitting works? I didn’t know.
There are a lot of strategies. afaik a tar pit tries to waste the attacker’s resources by delaying our responses to their traffic? A honey pot tries to funnel bot traffic towards a place which only bots would go to. Once they go there you know they’re a bot and they can be banned.
Sadly that only works for scrapers, content engaging bots are immune to it.
How would that layer distinguish AI from non-AI?
Yes PieFed has a setting for that. It makes scrapers give up pretty fast but ruins the experience for people without an account so I only use it on really bad days.