this post was submitted on 08 Apr 2025
215 points (96.9% liked)
Fedigrow
1238 readers
68 users here now
To discuss how to grow and manage communities / magazines on Lemmy, Mbin, Piefed and Sublinks
Resources:
- https://lemmy-federate.com/ to federate your community to a lot of instances
- [email protected] to organize overall fediverse growth
- [email protected] to keep tabs on where new users might come from :)
Megathreads:
- How (and when) to consolidate communities? (A guide)
- Where to request inactive or unmoderated communities? (A list)
Rules:
- Be respectful
- No bigotry
founded 11 months ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
The attacker is the admin of these two instances. Both instances have their registrations closed.
When I look, both have open registrations and don't even have a captcha? You see registrations as closed?
It could be that Fediseer is outdated. I looked at the instance's fediseer page.
https://gui.fediseer.com/instances/detail/chinese.lol
https://gui.fediseer.com/instances/detail/lemmy.doesnotexist.club
Edit: Their registrations are indeed open. Perhaps they opened it just now?
Though it is also suspicious why the owner leaves the registrations open, requires no captcha, no approval nor any email confirmation, and the admin of lemmy.doesnotexist.club has been inactive since their account creation. Seems suspicious to me.
They have both had open registrations for at least several hours. I think perhaps there's something wrong with Fediseer's detection?
Given the issues, I'm guessing these instances have been open for some time. lemmy.doesnotexist.club has definitely had a few "Nicole" accounts and some trolls.
I checked the web archive. The registrations have been open since 2023. I think it's safe to assume that the admin is indeed the one behind this and possibly also behind the nicole spam. And it has been a year since these bot accounts were created and they are still being created, the admin does nothing, does not interact with anyone, but still hosts the instance.
https://web.archive.org/web/20230809200352/https://lemmy.doesnotexist.club
We desperately need some system to fight against these type of attacks. It is still not much of a problem. Creating bot accounts and then spamming the entire Fediverse isn't hard but defending against it will be in the future.
Why do you assume the admin is behind it? If you have an instance that has open registrations and no captcha, then bots will take advantage of that. It doesn't mean the admin is the one doing the attacks.
In fact, such instances are more common than they should be since open registrations with no captcha is the default configuration, last I checked 😑
.lol