Lemmy has multiplied it’s number of users (maybe more accurately accounts) in just few days. How much do you think is the percentage of bot accounts? Is Lemmy having problem with bot farming?

  • Very_Bad_Janet@kbin.social
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    Have all of the Lemmy instances (and kbin ones, too) now added email requirements, captcha, and maybe the little paragraph asking why you should have an account that Beehaw does?

    Also, how do you identify bot accounts? Can you bulk ban accounts or.do they all have to be examined and dealt with individually?

    ETA: I wasn’t suggesting the paragraph. Just wondering what the instances are putting in to prevent bots. I actually tried to sign up for Beehaw, wrote my little paragraph, and then got the pinwheel of death, lol. I was never able to sign up, but lucked out with a kbin.social account. I have to add that it’s pretty disappointing to be downvoted for simply asking a question. Feels like what I left at Reddit.

    • funkyb@kbin.social
      link
      fedilink
      arrow-up
      1
      arrow-down
      1
      ·
      1 year ago

      good grief i hope not. Email & captcha are reasonable; a short form essay on why you should be graced with the ability to participate is super cringe.

      • JackFromWisconsin@midwest.social
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        Sounds like it sorts out the right kind of people? I’m not aware of anyone actually asking you to write an essay, no one would do that. 2 short answer questions does not an essay make.

      • rm_dash_r_star@lemm.ee
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Yeah I was a bit weirded out by that, it’s like what, am I joining a cult? Anyway I actually signed up on a number of instances in search of one I like and only a couple were using an application. The rest were just captcha plus email.

        I think they should come up with a better mechanism than an application. I understand the need to verify a signer is actually a human being, but an application is pretty off-putting. Problem is there’s bots that can get around captcha and email authentication, AI keeps getting smarter.

        • ඞmir@lemmy.ml
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          “ChatGPT, write me a paragraph about why I want to join an internet forum in first person”

          • Salamander@mander.xyz
            link
            fedilink
            arrow-up
            0
            arrow-down
            1
            ·
            edit-2
            1 year ago

            It may be an AI, or it can also be a real human that is lying. The point of the application filter is to significantly slow down these approaches to bring their impact to a more manageable level. An automated AI bot will not be able to perform much better than a human troll with some free time because any anomalous registration patterns, including registration spikes and periodicity, are likely to be detected by the much more powerful processor that resides in the admin’s head.

            On the other hand, a catch-all domain e-mail, a VPN with a variable IP, and a captcha-defeating bot can be used to generate thousands of accounts in a very short amount of time. Without the application filter the instance is vulnerable to these high-throughput attacks, and the damage can be difficult to fix.