• thrawn@lemmy.world
        link
        fedilink
        arrow-up
        10
        ·
        1 year ago

        And it’s easy. Society spends so much time and effort making life easier via improvements like simple image uploading and sharing, so of course some piece of shit will use it for this. Just a few clicks and they’ve created headaches for thousands of people. It requires no ability so the barrier of entry is as low as being the kind of trash that likes that stuff.

      • jeffw@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        ·
        1 year ago

        Thanks. Can’t unsee it. It was in my app (Memmy), but I should probably clear that cache.

        • Natanael@slrpnk.net
          link
          fedilink
          arrow-up
          2
          ·
          1 year ago

          On Android you can long press an app icon to get to app properties (from launcher or app switcher) and look for storage and then wipe cache

      • rjs001@lemmygrad.ml
        link
        fedilink
        arrow-up
        1
        arrow-down
        1
        ·
        1 year ago

        Wouldn’t clearing it immediately rather than reporting it to the police be ill advised?

  • Melody Fwygon@lemmy.one
    link
    fedilink
    English
    arrow-up
    16
    arrow-down
    1
    ·
    edit-2
    1 year ago

    My guess is that someone noticed that Lemmy doesn’t yet have as robust moderation tools as Mastodon and decided they’d federate "NoNoNo"1 images all over the place just to be a troll

    1
    CSAM
    CP

    Very illegal and naughty images of kids

  • pr06lefs@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    So why not disable images, including thumbnails? Wouldn’t that solve it? Imagur was created because reddit didn’t host images.

  • ashtefere@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    1 year ago

    This is the biggest design flaw of lemmy.

    Instances should host separate content, and aggregation of separate instances should be up the client.

    Instead we got the worst of all worlds. It means that lemmy can never truly scale performance wise or survive legal wise.

    Hopefully they solve it in some way, but I don’t see how unless they do the above and totally remove cross instance caching

  • kev@lemmy.kevhomeit.trade
    link
    fedilink
    arrow-up
    3
    arrow-down
    18
    ·
    1 year ago

    If you are the only one using it , and you don’t federate with a instance like that then that its not going to happen.

    • Jamie@jamie.moe
      link
      fedilink
      arrow-up
      14
      ·
      edit-2
      1 year ago

      Someone could potentially decide to post something like that in a memes community to cause trouble, which would be worrying for a self-hoster like me. My instance isn’t subscribed to anything remotely sketchy, so it sounds like I’m unaffected here, but it could happen.

      Ignore the previous, that’s literally what they did. I went in and manually purged it from the command line by removing every image from the last 24 hours. For other lemmy admins wanting to do the same (assuming a standard docker setup): sudo find /srv/lemmy/example.com/volumes/pictrs/files -type f -ctime -1 -exec shred {} \;

      • Björn Tantau@swg-empire.de
        link
        fedilink
        arrow-up
        6
        ·
        1 year ago

        Thanks, haven’t been on my instance for a few weeks and I come back to this shit show. Bye bye memes of the last two (just to be sure) days. I wonder how I can even prevent that shit from happening again.

      • AntBas@eslemmy.es
        link
        fedilink
        arrow-up
        4
        ·
        1 year ago

        You need to use shred instead of rm. If you use rm the data still lives on your drive until it gets overwritten

        • Jamie@jamie.moe
          link
          fedilink
          arrow-up
          3
          ·
          1 year ago

          I made dedicated posts about it and corrected the mistake there, I missed this comment. Thanks for pointing it out.

    • gabe [he/him]@literature.cafe
      link
      fedilink
      arrow-up
      37
      arrow-down
      1
      ·
      1 year ago

      What happens if someone decides to subscribe to a seemingly innocent community that later becomes a target for such content to be posted? Because that’s precisely what happened here.

      I mean this very kindly, but seeing that you seem to operate your own instance this very serious misunderstanding of the risks involved with hosting a lemmy instance has me deeply concerned.

  • Bipta@kbin.social
    link
    fedilink
    arrow-up
    89
    arrow-down
    1
    ·
    1 year ago

    You can look into Cloudflare’s CSAM setting, but I’m not exactly sure what it does.

    I don’t understand how a web host is legally responsible for what their users post as long as there’s active moderation removing it in a timely manner.

    • Natanael@slrpnk.net
      link
      fedilink
      arrow-up
      8
      ·
      1 year ago

      FYI in USA the law CDA section 230 only preempts state law but not federal law. If something which is federally illegal lands on your server you need to deal with it ASAP

    • gabe [he/him]@literature.cafe
      link
      fedilink
      arrow-up
      59
      ·
      1 year ago

      You are correct, there is safe harbor provisions on the matter. There is a legal responsibility to report and store the content securely when it is reported as an admin.

      • KIM_JONG_JUICEBOX@lemmy.ml
        link
        fedilink
        English
        arrow-up
        22
        arrow-down
        1
        ·
        1 year ago

        It’s like it’s not enough that you deal with all the technical shit, updating to new versions, checking shit out from GitHub, running builds, paying for the goddamn thing, then you are also responsible for babysitting content? Fuck that. Unless you have a good group of mods/admins it is really difficult to do.

        • Aux@lemmy.world
          link
          fedilink
          arrow-up
          14
          arrow-down
          8
          ·
          1 year ago

          That’s why you either sell your users to the advertisers or charge a monthly subscription. Free internet doesn’t work.

            • KIM_JONG_JUICEBOX@lemmy.ml
              link
              fedilink
              English
              arrow-up
              4
              ·
              1 year ago

              I can do all of the above, except for police content.

              And Reddit of course had unpaid mods to do that.

              So like I say, it can be done, you just need the right team of mods/admins for your own server.

              • ShittyRedditWasBetter@lemmy.world
                link
                fedilink
                arrow-up
                3
                arrow-down
                8
                ·
                1 year ago

                Cool, you and your 5 buddies have a great time. Some of us would like to see a viable alternative to reddit who respects privacy, and doesn’t crash every other day.

                Fediverse is going to be known as a kiddie porn haven with the level of professionalism and maturity they have with the major servers.

                • nomadwannabe@lemmy.ca
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  1 year ago

                  I have yet to see a single problem with Lemmy over months of daily use. An instance may have crashed in that time but I didn’t notice not seeing certain instances when scrolling, and I don’t seek out particular communities. Helps that I’m hosted on a less popular instance, and the lemmy.ca admins seem to run a tight ship.

                  I block a couple of communities a day, but that seems to be expected. I also haven’t seen any kiddie porn.

                  Less discussion than Reddit, and less specific communities, but that’s been easy to forgive because well, fuck Reddit.

                  If an alternative pops up at some point, I’ll be sure to give it a try. Lemmy is doing just fine for me.

  • t�m@lemmy.ml
    link
    fedilink
    arrow-up
    27
    ·
    1 year ago

    Here I thought I could create a server and then use that as a instance only to hold my profile where I could then use that to interact across the fediverse

    • Scrappy@feddit.nl
      link
      fedilink
      arrow-up
      25
      arrow-down
      2
      ·
      1 year ago

      You can absolutely do that, just make the profile registration private

          • BaguetteSamurai@lemmy.one
            link
            fedilink
            English
            arrow-up
            7
            ·
            1 year ago

            Yes, but people can still browse content from your instance without logging in. There is nothing stopping people from viewing illegal material through your instance.

            • interdimensionalmeme@lemmy.ml
              link
              fedilink
              arrow-up
              0
              arrow-down
              4
              ·
              1 year ago

              Section 230 makes this but an issue. It would be like suing the phone company. Especially if you don’t moderate. If you moderate then it can be said what is left had your endorsement. If you don’t moderate, then you are simply a victim of vandalism.

          • t�m@lemmy.ml
            link
            fedilink
            arrow-up
            1
            ·
            1 year ago

            Ok, I think I might be misunderstanding the issue; so it’s more of bad actors rather than a copy of images in cache?

    • XTornado@lemmy.ml
      link
      fedilink
      arrow-up
      5
      ·
      edit-2
      1 year ago

      Yeah I have wanted that from day one. I want it to work like mail my identity on my domain that I can bring anywhere, store my comments, posts, subscriptions and that’s it, maybe direct messages or explicitly saved posts. Not every damn post that I read / subscribe.

  • pinkdrunkenelephants@sopuli.xyz
    link
    fedilink
    arrow-up
    3
    arrow-down
    14
    ·
    1 year ago

    This is why federation sucks. It doesn’t fulfill its intended purpose, users are still at the mercy of site administration, and the way it’s structured leaves too many holes for nefarious people to take advantage of. It’s not good for the Internet.

    We need a better system.

  • AliOski@feddit.nl
    link
    fedilink
    arrow-up
    11
    ·
    1 year ago

    What does CSAM exactly mean? (I understand the point of the meme completely just never heard of such abbreviation.

    • pinkdrunkenelephants@sopuli.xyz
      link
      fedilink
      arrow-up
      20
      arrow-down
      2
      ·
      1 year ago

      It’s child porn, and as horrifying as you’ve been told it is. Some scumbag trolls were posting it on lemmy.world’s memes sub and so .world finally decided to close open signups.

        • Nechesh@beehaw.org
          link
          fedilink
          arrow-up
          17
          arrow-down
          1
          ·
          1 year ago

          Porn is a legal thing that normal people enjoy. The term CSAM takes a stance that it is always abuse. I think they are basically interchangeable but CSAM is the currently preferred term.

            • ursakhiin@beehaw.org
              link
              fedilink
              arrow-up
              4
              arrow-down
              1
              ·
              1 year ago

              Sometimes, terms need changing to separate it from something else. Porn in itself is legal and fine. When adding children in the mix it’s easy to get caught up in the porn part of the discussion rather than the child part.

              Separating the terms puts the focus more on the child abuse part.

        • funkless_eck@sh.itjust.works
          link
          fedilink
          arrow-up
          39
          ·
          1 year ago

          a) “CP” is a very online phrase that I imagine hasn’t permeated popular culture for good reason

          b) calling it “pornography” is tacitly implying it is arousing and/or serves a purpose, by calling it “abuse material” you remove any positive connotations

          • CoderKat@lemm.ee
            link
            fedilink
            English
            arrow-up
            13
            ·
            edit-2
            1 year ago

            I think being more specific is also a good thing. Two letter acronyms are too broad. As CSAM, it’s unambiguous what it refers to. But CP means many things. Eg, in software dev, it’s often used for “control plane”. Some video games (eg, Pokemon Go) use it for “combat power”. I think ESO used it as “champion points” (though might have been a different MMO).

      • Freitag@feddit.de
        link
        fedilink
        arrow-up
        12
        arrow-down
        9
        ·
        edit-2
        1 year ago

        Bullshit, child porn is “cp”. CSAM means Child Sexual Abuse Material

        • Nechesh@beehaw.org
          link
          fedilink
          arrow-up
          7
          arrow-down
          1
          ·
          1 year ago

          What would you say is the difference? I feel like the terms are interchangeable. The comment you replied to didn’t give the exact abbreviation but it gave the essence of what is meant by the picture.

          • 𝒍𝒆𝒎𝒂𝒏𝒏@lemmy.one
            link
            fedilink
            arrow-up
            8
            ·
            1 year ago

            By OC trying to imply a difference, one could be led to assume that OC believes there is some part of the illegal material that they do not consider abuse.

            I vehemently disagree with that line of thinking. It is abuse, and that is why it is illegal.

            • pinkdrunkenelephants@sopuli.xyz
              link
              fedilink
              arrow-up
              3
              arrow-down
              4
              ·
              edit-2
              1 year ago

              Who in their right mind thinks calling CP is validating it in any way? Just because some morons decided to make a politically correct term for it doesn’t change what it is.

              • Nechesh@beehaw.org
                link
                fedilink
                arrow-up
                3
                arrow-down
                1
                ·
                1 year ago

                The politically correct term CSAM is to differentiate it from ordinary porn which is legal and at least somewhat socially acceptable and ensure that people understand that when children are involved, it is always abusive. The terms mean the same thing, but being precise with language is important.

        • pinkdrunkenelephants@sopuli.xyz
          link
          fedilink
          arrow-up
          6
          arrow-down
          1
          ·
          1 year ago

          That’s absurd. People aren’t stupid. We’re capable of understanding context and playing semantical games with something so serious is quite honestly pretty offensive.

  • Tash@kbin.social
    link
    fedilink
    arrow-up
    42
    ·
    1 year ago

    I would love to have the EFF chime in, but there are some protections for you as a host under the Online Copyright Infringement Liability Limitation Act (OCILLA) - or safe harbor provision in the USA.

    As to how that has been tested legally on federated content, I don’t know. Perhaps another elder of the internet can tell me how Usenet servers handle it.

    • gabe [he/him]@literature.cafe
      link
      fedilink
      arrow-up
      16
      ·
      1 year ago

      You are right, there is safe harbor protections here. It’s a legal mess that must be navigated carefully. We will see how things progress.

      • treadful@lemmy.zip
        link
        fedilink
        English
        arrow-up
        7
        ·
        1 year ago

        While correct, you still may end up having to deal with the law about it. The whole “you can’t beat the ride” thing. Could be a ton of hassle and legal fees.

        • Tash@kbin.social
          link
          fedilink
          arrow-up
          8
          arrow-down
          2
          ·
          1 year ago

          What are you implying here? That @gabe should never have bothered with running a server? What about the server you are connected to right now? Should they shut down because of what may travel across it?

          No.

          They’re protected under the same rules as somebody running a WiFi hotspot at a coffee shop. As long as they are doing everything within reason to be a good steward of their local network (which is what Gabe is doing) then they are protected.

          • wagesj45@kbin.social
            link
            fedilink
            arrow-up
            9
            ·
            1 year ago

            Doesn’t seem like he was implying anything. Just stating the fact that part of the burden of citizenship is sometimes having to interact with law enforcement, maybe even go to trial, even if you’ve done nothing wrong.

          • Natanael@slrpnk.net
            link
            fedilink
            arrow-up
            1
            ·
            1 year ago

            FYI not all jurisdictions deal with website hosting (storage and distribution) as equivalent to hotspot/ internet services (dumb relay)

          • treadful@lemmy.zip
            link
            fedilink
            English
            arrow-up
            8
            arrow-down
            1
            ·
            1 year ago

            I’m not suggesting anyone should or shouldn’t do anything, nor that I’m not grateful for people that do. Just saying it’s a potential downside that people should seriously consider before hosting any public access systems.

            They’re protected under the same rules as somebody running a WiFi hotspot at a coffee shop. As long as they are doing everything within reason to be a good steward of their local network (which is what Gabe is doing) then they are protected

            Hopefully, yeah. But again, there’s still this potential of the coffee shop of having all their equipment seized and having to deal with a law enforcement investigation and maybe even the courts. Even if the risk of actual jail time and monetary penalties is low, it’s something people should consider before doing it.

            This is one of the reasons I’m not running a public access network or TOR exit node at home even if I think those are worthwhile things to do.