Sorry everyone I know how much you love the attention she gives you, but I’ve implemented some quick and dirty filtering for private messaging.
We now have the ability to automatically mark PM’s as deleted or read, depending on content inside of them. If we accidentally filter something you legitimately wanted (ie, not Nicole) please let me know.
If any other instances would like to implement this, here’s the code. Note that you’ll need to set your hostname at the top here for some reason I haven’t exactly identified.
SET lemmy.protocol_and_hostname = 'https://lemmy.ca/';
CREATE TABLE private_message_filters (
id SERIAL PRIMARY KEY,
phrase TEXT NOT NULL,
behavior VARCHAR(10) NOT NULL CHECK (behavior IN ('delete', 'mark_read'))
);
CREATE OR REPLACE FUNCTION filter_private_messages()
RETURNS trigger AS $$
DECLARE
banned_phrase_record private_message_filters%ROWTYPE;
BEGIN
FOR banned_phrase_record IN
SELECT * FROM private_message_filters
LOOP
IF LOWER(TRIM(NEW.content)) ILIKE '%' || LOWER(TRIM(banned_phrase_record.phrase)) || '%' THEN
IF banned_phrase_record.behavior = 'delete' THEN
NEW.deleted := true;
RETURN NEW;
ELSIF banned_phrase_record.behavior = 'mark_read' THEN
NEW.read := true;
RETURN NEW;
END IF;
END IF;
END LOOP;
RETURN NEW;
END;
$$ LANGUAGE plpgsql;
CREATE TRIGGER trg_filter_private_messages
AFTER INSERT ON private_message
FOR EACH ROW
EXECUTE FUNCTION filter_private_messages();
To add filter words:
insert into private_message_filters (behavior, phrase) values ('delete', 'spamtestdelete');
insert into private_message_filters (behavior, phrase) values ('mark_read', 'spamtestread');
If you want to quickly disable / enable filtering while testing:
ALTER TABLE private_message DISABLE TRIGGER trg_filter_private_messages;
ALTER TABLE private_message ENABLE TRIGGER trg_filter_private_messages;
I’ll leave it up to you to figure out what phrases to filter on. MAKE SURE YOU TEST. If there’s an error, private messaging could break completely. You should not get an error message from the UI while sending a message with a banned word.
This is sorta OK for this one case, but we really need more hardened and easy solutions as the spam problem will only get worse. The DMs are very vulnerable, which is why services like bsky disable them for all new accounts for example.
Went ahead and opened some issues
100% agreed, this was intended as a quick fix and not a long term solution. There should also be rate limiting on both the sending + receiving instance. Maybe the ability to mark an account as an “Authorized bulk sender” but otherwise if you send more than X DMs to Y different people within Z hours, you get blocked.
Both your issues LGTM, thanks for writing them up!
But… but… no one else pretends to want to fuck me around here.
But I love her and she loves me.
I saw her send DMs to Not Dr. Wesker, too.
I’m sorry to be the bearer of bad news.
I actually only got one today for the very first time. I was insulted it took her so long to get to me, so I wrote this
I’ve only had one, and it was the first ever wave; for some reason, i never got another one. I scared her away :(
Today I received my third pm from Nicole. I feel special!
Please be serious, this is a serious community.
I will consider your request in 3-5 business days. Thank you for your patience.
I love her, she loves me
I’m her he, she’s my she
Though for looks she’s only fair
And her figure isn’t there
Her figure is much bigger in the bank, well I declare
Her papa, he has dough, he has dough, and
And she’s his only child, and she’s awfully wild
So I love her and she loves me
Aww I’ve never even gotten a Dm from her
Hang in there.
Oh my god! They killed Nicole!
“You bastards”? #KyleBrovlofski
You bastard. Nothing will stand between Nicole and I. Our love cannot be stopped.
I still got the notification via Android, but the message was gone and was curious if y’all had finally nuked this problem.
But, finally get Nicole’d and my only chance for a real, meaningful relationship goes up in smoke. Thanks Obama.
You can also just insert arbitrary strings into the
local_site_url_blocklist
table as Lemmy only checks the validity of the URLs when editing the site through the API. This has the advantage of preventing the messages even getting written to the DB. Example:insert into local_site_url_blocklist (url) values ('Hi, I''m Nicole! But you can call me the Fediverse Chick :D');
It would be cool if it could be limited to PMs. Now I can’t even comment the copypasta as a joke
Hi, I’m Nicole! But you can call (spam evasion) me the Fediverse Chick :D
Just throw in a zero width space and really throw people off.
Nicole: Write that down!
Nice try, but we added some sanitization for zero-width char shortly after :)
I’m still waiting for my DM… :(
Oh that’s clever, I like that.
That’s neat, nice find!
Oh I just got the same DM twice from her overnight. LoL
Is she like a test account for these filters?
I’ve got DMs from her for almost two years, every 3 months, like clockwork. The photos changed over time, which I found interesting.
I won’t be sad to not get any more DMs though. They’re annoying.
Who the hell is Nicole?
I just got a message from her 20 minutes ago (Mar 16 2025 16:17:08 AM GMT-4) . Is there anything I need to do on my side? Or is the filtering delayed?
Edit: And another one at 7:20:13
Edit 2: I’ve now had 4 identical messages from her since I posted this comment.
I think they’re just evading our filters. We’ll have to keep tweaking.
I also received one (my first) after this post was made. I blocked the user so I can’t go back to the message to check the timestamp.
i get my nicole fix as the form of user submitted posts, she doesn’t message me anymore
Great!