Our server went down last night, after we received some messages from our provider that someone had uploaded illegal pornographic photos.

They stated that they had contacted us before ( they didn’t ) which would give us opportunity to remove them before the site going down.

The user and community where these pictures were located, we’d banned about a month ago, and it wouldn’t be possible to view them from lemmy itself, but we have yet to code purging dangling pictrs images automatically with user and community deletion, obviously now a priority for us.

We were able to trace things down and delete them, and bring the site up this morning.

Again sry for the site being down. If you find any pornographic materials on lemmy ( against our site rules ), let us know so we can remove them ASAP and keep lemmy running.

  • soferman@lemmy.ml
    171·
    3 years ago

    I’d like to be able to report content like that so you guys can delete it quickly. I remember asking about reporting possibilities, but I don’t remember well what answer there was for it. But that’s a sentiment I still have at least!

    • AgreeableLandscape@lemmy.ml
      18·
      3 years ago

      The report button is being worked on. In the meantime, please send a PM to one of the admins listed on the homepage sidebar, if it’s urgent, message all of us. Or for less serious issues like spam, mention one of us in a comment to the offending post.

      • sirsquid@lemmy.ml
        1·
        3 years ago

        Nice to know a report feature is being worked on. Will this be something were many reports cause something to be hidden until an admin/mod can look at it? Might be a good idea.

        Sounds like you need a better host too. Who are you with right now?

    • joojmachine@lemmy.ml
      11·
      3 years ago

      this, people had to create an entire community just to report scams some users tried a couple of weeks back, a report feature is definitely needed

    • Dessalines@lemmy.mlOPM
      6·
      3 years ago

      Reporting is somewhat done on the back end, but adding reporting to the front end is a bigger issue down the road.

  • Anachron@lemmy.ml
    15·
    3 years ago

    Wow, this sucks!

    I hate when people use good faith projects and do bad stuff with them.

    Also quite surprised on how bad the current hosting provider handled the situation.

    It just looks like “I dont care what reputation I’ll get, as long as I have fixed the issue that was put onto me”.

    No worries,- lemmy is just in its beginnings and I already like it better than reddit (ok, thats not too hard, to be fair).

  • TheAnonymouseJoker@lemmy.ml
    165·
    3 years ago

    I knew something shitty was going on.

    IMO there should exist for Lemmy an uptime or a notice site on a separate server, which can tell us atleast what is going on briefly.

    I suggest sifting through the images uploaded on the server, if they are not millions, which should not take too long as Lemmy is still not too huge. We can figure out a way to process images automatically for NSFW content in the future.

  • soferman@lemmy.ml
    31·
    3 years ago

    Seems like thumbnail loading doesn’t work anymore when making posts for some reason

          • soferman@lemmy.ml
            1·
            3 years ago

            Nah, I still don’t get auto thumbnails nor auto titles for posts. Is it possibly because I post so much on #worldnews ? Or maybe it’s just on my end?

            • AgreeableLandscape@lemmy.ml
              1·
              3 years ago

              Probably your end. Lemmy doesn’t have the ability to block thumbnails from sites or users. My guess is that the source site isn’t allowing other sites to fetch their images.

              • soferman@lemmy.ml
                11·
                3 years ago

                It is consistant on every source. If you look in #worldnews you’ll see all my recent posts are lacking a thumbnail, and auto titling isn’t happening either.

  • lemmysmash@lemmy.ml
    1·
    3 years ago

    I’m about to host a lemmy instance and I’m worried about such incidents.

    we have yet to code purging dangling pictrs

    Would you please explain what are dangling pics and how to delete them?

  • lavidaloca@lemmy.ml
    1·
    3 years ago

    Just wanted to point out that Cloudflare has a CSAM feature that you can voluntarily turn on. It will search and automatically flag any child abuse content it finds and let you know in a timely way, so you can take care of it early. Also, it blocks anyone from accessing it of course.

    Figured since everything here is publicly readable anyways, the data privacy part won’t be as much of a concern.

    • pinknoise@lemmy.ml
      1·
      3 years ago

      Please don’t mitm lemmy with cloudflare if possible! They wouldn’t only be able to see public stuff but also anyone’s browsing behaviour and passwords. Also they could inject malicious javascript and (non-javascript) csrf exploits.

      • lavidaloca@lemmy.ml
        1·
        3 years ago

        All fair points! I figured in the larger scheme of things that any data Cloudflare receives will not be of much use to them considering how large they are and how much they handle. And the tradeoff would be exposing some data to Cloudflare, but also a much better fighting chance at tracking down and removing such material. If there is a way to make that work I think it is at least worth looking into because of the benefits.

        • pinknoise@lemmy.ml
          1·
          3 years ago

          any data Cloudflare receives will not be of much use to them

          It likely won’t, but they operate under a jurisdiction that doesn’t accept the souvereignty of other states and actively engages in espionage and acts of terrorism online.

          the tradeoff would be exposing some data to Cloudflare

          This would expose all lemmy data to cloudflare and allow them to alter it! Also they can link lemmy users to other sites and they hinder users that need to use anonymity networks.

          Lemmy desperately needs a better moderation concept to fight illegal (and spammy) content, but using a service that endangers users can’t be a solution to any problem.