Here you can see 2 day old post warning about the danger of not using email/captcha verification: https://lemmy.ml/post/1345031
And here are stats of lemmy platform where it shows that we gained 200 000 lemmy users in 2 days: https://lemmy.fediverse.observer/dailystats
Another tracking site with the same explosion in users: https://the-federation.info/platform/73
What do you think? Is it some sort of a bug or do people run bot farms?
Edit2: It’s been now 3 days and we went from 150 000 user accounts 3 days ago to 700 000 user accounts today making it 550 000+ bot accounts and counting. Almost 80% accounts on lemmy are now bots and it may end up being an very serious issue for lemmy platform once they become active.
Edit3: It’s now 4th day of the attack and the amount of accounts on lemmy has almost reached 1 200 000. Almost 90% of total userbase are now bots.
Edit 3.1: my numbers are outdated, there are currently 1 700 000 accounts which makes it even worse: https://fedidb.org/software/lemmy
I ONLY SEE OTHER HUMANS WHO EAT FOOD WITH THEIR MOUTH HOLES
{ "type": "comment response", "message", "I too, am certainly a human, and not a robot"}Beep boop
01 received. Returning 0b1000101
Haha, yes, totally normal human th
“error:PDP_DETECTED_FATAL_ERROR”
ERR: Expected 0b1000101 in return. Received 0b0
syntax error, malformed JSON.
I think it should be “message”: instead of “message”, (colon instead of comma)
Thatsthejoke.gif
The word “halibut” means “holy flatfish” (hali=holy + butte=flatfish) … I too am not a bot… Follow for more fish facts!
As a
large language modelhuman I agree
This is incorrect human. Please go about your regular day and don’t forget to visit www.maybeascam.ml !
Thanks, will check it out. :)
I’m not a bot and I can’t believe that website works! I’m now making 2,341.22 an hour!
Wow, I was just mailed a check for 64GB of RAM!
Everyone on Lemmy is a bot except me
All your base are belong to us
Everyone on Lemmy is me, except this bot.
😠
Test: if it says “hey guys, remember how great Reddit was, we should totally go back!?” - then it’s a bot:-P.
My conspiracy theory is that it’s Spez creating the bots as revenge
That’s my theory too. He’s acting like a cornered animal and needs to drive traffic back to reddit. What better way to do that than to break the website power users have been migrating to and advertising on Reddit?
Then June 30 the straggling migrants still holding out til the end will come over to a broken website.
I think spez hopes that their broken spirit and desperation will help drive people back to reddit, but a bot influx this huge, he must be legitimately worried.
It could also be spez bootlickers, but I would be shocked if someone who had the same knowhow to build a bot army was simultaneously stupid enough to not see the bigger picture happening at corporate.
You have too much faith in redditors
hey guys, remember how great Reddit was, we should totally go back!?
Nice try, bot! :-P
(Edit: I want to boost your comment, but I don’t want my record to show that I boosted a comment like THAT!:-D)
Well, technically anyone can also see your upvotes and downvotes…
That’s worrying. Though at least it seems they’re mostly confined to a few particular instances. Defederating is a great tool that will definitely mitigate the worst of it, but at the same time this is uncharted water - there’s no real way of knowing what exactly will happen in a large scale attack.
Just creating accounts isn’t an attack, but it’s going to suck when there actually is one. I wonder if they’ll try to be subtle and use AI or recycled content, or if they’ll just use the accounts for spam or DDoS?
Probably they are getting ready for some vote manipulation and astroturfing for the long run.
You know, in case Lemmy and the Fediverse really get mainstream enough to move the public opinion in some way.Having a thousand accounts that can upvote a seemingly innocent post made by an active and “real” account is always useful.
Yeah good point. I think these particular bot instances are being way too obvious to do any major damage - not when it’s as simple as it is to defederate them - but what’ll happen when it’s not 100k bots on one instance, but 1000 instances with 100 bots apiece?
Let’s hope Lemmy gets the tools needed to deal with this. I wonder how Mastodon does it? They’ve been around a while, I’m sure they’ve had similar issues.
These things are always going to be an issue on Lemmy though. Alt detection will basically be impossible.
Every new account isn’t a bot, though. We don’t have real numbers to work with yet.
When reddit migration begun we saw a huge bump in users and it was steadly stabilising and less users were joing, then this huge bump happened. You can go browse lemmy instances and see how many instances are ghost instances with 0 posts and comments that have tens of thousands of users.
Do also note- instances with little activity aren’t that unusual though-
My instance for example- I don’t really have any communities here, other then a few local to my server. As such, its activity… is pretty low. Everything happens elsewhere.
Does your instance have tens of thousands accounts?
Nah, < 100. So, it hasn’t been hit by a big bot wave at least.
There a new influx in the user migration as well, as some subreddits started pinning lemmy and kbin.social instances on their subs. Also if you go on protest subreddits (such as ModCoord and Save3rdPartyApps) almost every post has a thread/comment redirecting people to the fediverse.
If you check the numbers from initial wave you will notice how realistic numbers look.
https://the-federation.info/platform/73 to see those instances open the link and sort instances by user amount.
Edit: Just noticed that this site is not up to date. There are actually around 1000 instances on lemmy now and the site shows a little over 300 instances.
I love how beehaw defederated lemmy.world because too many people signed up but a bot instance with almost 50k users is fine. Sorry if I come across as harsh but I just increasingly see that instance as a complete joke.
i pretty much consider beehaw a separate thing of its own at this point.
In fairness, that instance probably hasn’t started interacting with their communities just yet, or else they would consider defederating. I doubt that they spend enough time to start trying to defederate from every instance over x amount of users, only the troublesome ones. They probably don’t have the manpower to scan for every instance over x amount of people, and to defederate from them, if they were already have enough trouble keeping up with sh.it.just.works and lemmy.world’s userbases.
I work in tech, this wouldn’t surprise me.
Where there are eyeballs there is spam. People even put spam in the Google Analytics referral field and that’s only ever going to get seen by the site owner.
It really says nothing about the health of the ecosystem, if it’s moderated and not filling the frontpage it’s only an issue for the server admins.
I’ve fought spammers and one alone could create these numbers in a day.
And there are people in the thread arguing that the number of bots is overblown. :/
Those are the bots, gaslighting you.
Where are you getting that 90% figure? I’m seeing stratospherically higher activity than I was a week ago, I’m willing to buy half to 2/3 of those accounts being a combination of alt accounts, duplicate accounts (e.g., people moving off beehaw) and bot accounts, but 90% bots sounds implausible.
Nobody is making 1.6 million bots to target 100,000 users.
What about bots to talk to the bots thought?
The platform has no measures against farming bots that’s why the number of bots is this stupid high, it’s very easy to do at the moment.
But everyone’s evidence that it’s happening a lot is that there are lots of new users, and that it’d be easy to make it happen.
That’s conjecture, not evidence.
You were asked to source the number you’re using.
Damn. Am I bot?
1.2 mil bot accounts? Can they each send me $1?
How about 1.6m (from 1.7m total) bot accounts?
Shit, I’ll take a penny from each.
I’ve yet to see any of them start posting. On my instance none of them could pass email validation because the emails were fake. I imagine this is true for many instances with a ton of bot sign-ups.
I think just reporting sign-ups as “users” is misleading. The user count on lemmy should reflect only approved/activated accounts, imo.
Another problem is right now the only way to clean them up is to access the database directly, there are no user management tools in the application. I think that’s a skill you should have if you want to run an instance successfully, but I can imagine some may be able to follow the setup, particularly the ansible setup, but be at a loss for how to properly manage it once set up.
Drivel. We are normal meat units filled with flesh. Now if you will excuse me, I am off to absorb nourishment from organic matter.
Zuckerberg?
I love to sit on the… the thing and just, you know, shoot one out
Sir, are you aware you’re leaking coolant at an alarming rate?
001100
010010
011110
100001
101101
110011
You must not use the code of codes!
01101001
10010110
10010110
01101001
edit: lmao got’em
don’t tell me to fuck off that’s rude
Are you referring to a separate thread I commented on yesterday with a totally separate user where I said “Nazi punks fuck off?”
If you took offense to that brother I’m sorry I stand by my words. Even moreso today, even.
What I’m curious in is why you commented on an unrelated comment in a different thread, with either a secondary account or you weren’t connected to it at all?
no they’re joking about the binary
Yay! (Not a bot)
i, for one, welcome our robot overlords.
