this post was submitted on 06 Mar 2024
251 points (88.9% liked)

Fediverse

27885 readers
158 users here now

A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).

If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!

Rules

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy

founded 1 year ago
MODERATORS
 

Highlighting the recent report of users and admins being unable to delete images, and how Trust & Safety tooling is currently lacking.

top 50 comments
sorted by: hot top controversial new old
[–] ConstipatedWatson@lemmy.world 64 points 6 months ago (1 children)

This link has been posted and discussed on Reddit too.

Of course, we shouldn't care about what people on Reddit think (and I noticed this post by chance since I log on there very rarely now), but some users in the thread genuinely ask about joining Lemmy and so I guess it's useful to know about possible obstacles to trying it that they may perceive.

[–] steal_your_face@lemmy.ml 44 points 6 months ago (2 children)

That OP has been crying everywhere about the Lemmy devs being mean to him. Saw a few threads of his here on Lemmy.

[–] CeeBee@lemmy.world 65 points 6 months ago (12 children)

Ya, reading the GitHub issue sounds entirely like burnt out devs being abused by users. It's a massive issue in open source.

The Late Night Linux and Linux Dev Time podcasts talked about exactly this in a recent episode. It can be extremely demoralizing to do all this work for free for a project only to be inundated by ungrateful people demanding you fix something or implement a feature they want. Many open source projects have died because of that.

[–] masterspace@lemmy.ca 24 points 6 months ago* (last edited 6 months ago) (12 children)

We're not talking about a user demanding you release a flatpak build targeting their personal linux distribution running in a VM'd WSL, we're talking about a consumer facing social app that doesn't include the functionality for a user to delete something they added.

You know what the acronym used for describing the most basic functional web app api is?

CRUD - Create, Read, Update, Delete

load more comments (12 replies)
[–] spiderman@ani.social 16 points 6 months ago

while i think there are people like that i think this particular issue is a serious issue that should be handled properly. i think the conversation should have been much professional from both sides, but nonetheless this issue addresses a serious problem.

[–] Flax_vert@feddit.uk 9 points 6 months ago

That's how a Minecraft server I ran died. Too many people telling me how to run it and trying to break things when I was asleep.

load more comments (9 replies)
load more comments (1 replies)
[–] onlinepersona@programming.dev 55 points 6 months ago (6 children)

I don't agree with the tone of the Lemmy devs, but they are right: it's opensource being worked on mostly in the free time of people. Do not treat the devs like they are paid to do your bidding, because they aren't. If you donated and have expectations, you don't understand the meaning of a donation.

Imagine if the author had a woodworking workshop on their compound where they made things out of wood; figurines, furniture, tools, sculptures, and so on. Say they opened it up to the public so that guests could have a look, play around, spend some free time there, and maybe even use the equipment there. But then guest started demanding the author buy newer equipment, make sculptures more to the guest's liking, made the workshop more accessible to invalids, put up the national flag, play the radio, and a host of other things. All the while not footing the bill for anything, not helping clean up, not volunteering to help in any fashion.
Then the author refused and invited the guests to help. But instead, the guests went off and made a blog saying the author was selfish, cold, self-centered, egoistic, rude, and what not.

This is what the author of this article and people in that github discussion come over as. If those people came into my workshop and told me how to do things without helping out in any way, I'd rightfully tell them to fuck right off.

Articles like these that are practically demanding change will not and do not improve the dialogue. They are actually bad for opensource as a whole because they give people who don't understand opensource the feeling that they have the right to complain, the right to demand, the right to expect, the right to be entitled to an opinion and an outcome.

That's a thumbs down from me dawg.

CC BY-NC-SA 4.0

load more comments (6 replies)
[–] sudneo@lemmy.world 54 points 6 months ago (2 children)

The fact that Lemmy’s core team is taking a fairly laissez faire position on moderation, user safety, and tooling is problematic, and could be a serious blocker for communities currently hosted on Lemmy.

At this point, most of the solutions the ecosystem has relied on have been third-party tools, such as db0’s fantastic Fediseer and Fedi-Safety initiatives. While I’m sure many people are glad these tools exist, the fact that instances have to rely on third-party solutions is downright baffling.

Honestly, what? Why would be baffling to have third party tools in this ecosystem? It would be baffling if that was the case for Facebook. Also the devs did work on some moderation features, but they probably have tons of other stuff to work on, all for an amount of money which is a low salary for one developer.

load more comments (2 replies)
[–] rglullis@communick.news 39 points 6 months ago (7 children)

Instead of playing the blame game, let me see if I can help with a solution: I am fairly certain that I can take the "admin" functionality that I built for fediverser and use it as the basis for a "moderation dashboard". It's a Python/Django application that can communicate with the Lemmy server both through the API and the database. The advantages of it being a "sidecar system" instead of being built "into" the Lemmy code itself is that I am not blocked by any of the Lemmy developers and the existing instance owners do not need to wait for some fork to show up.

I can propose a deal: at the time of writing, there are ~200 people who upvoted this article. If I get 20 people (10% of the upvoters) to either sponsor me on Github or subscribe to my Europe-based, GDPR-subject suite of fediverse services, then I will dedicate 10 hours per week to solve all GDPR-related issues.

How does that sound? To me it sounds like a win-win-win situation: Instance admins get proper tooling, Lemmy devs get this out of their list of concerns and users get a more robust application for the fediverse.

[–] Xyre@lemmus.org 8 points 6 months ago

In a similar vein, I've seen a lot of auto moderator implementations created. If instead of creating yet another project, people started contributing to existing ones we'd have a good core set of functionality that could be shared across instances. Competing implementations are fine, but at some point the efforts get spread so thin that progress is limited.

[–] gabe@literature.cafe 5 points 6 months ago

I wish you the best of luck on this and I truly hope you do this, but this is what the lead dev of Sublinks tried to do. That's the missing piece here. He tried making an external mod tooling system. Maybe you'll have better luck than he did. I really hope you do.

load more comments (5 replies)
[–] Murvel@lemm.ee 32 points 6 months ago (1 children)

Lemmy devs being man children when confronted with GDPR compliance.

And if Lemmy if supposed to better Reddit in basic fucking decency then GDPR is absolutely crucial.

[–] Jumuta@sh.itjust.works 20 points 6 months ago (24 children)

how are you supposed to do gdpr compliance on a federated system though?

[–] maynarkh@feddit.nl 22 points 6 months ago (1 children)

You are responsible for data collected by your own instance. If a deletion request comes through, you are responsible for deleting it from your account, and forwarding the deletion request and responses to other instance you federate with. You are in the clear as long as you don't keep data you legally can't, and have sufficiently informed other instances of your obligations.

[–] Badeendje@lemmy.world 5 points 6 months ago

No, if you collected the data and shared it with others, simply informing the others is not enough. This is why the platform needs tools for admins to comply.

A proper method, that allows the users to nume their account could already be enough.

[–] Badeendje@lemmy.world 8 points 6 months ago* (last edited 6 months ago)
  • By defining all information that is processed and why.
  • By not processing and storing any personal identifiable information (an IP address is PII for example) without a clearly defined need.
  • When stored ONLY using data for the defined purposes. This also means shielding data that should be shielded.
  • By implementing the mechanics for someone to be forgotten (delete my account, should delete all info, especially PII).
  • Making sure the mechanics to federate these changes/deletions exist.
load more comments (22 replies)
[–] deadsuperhero@lemmy.world 12 points 6 months ago (2 children)

Hey everyone, I just wanted to thank you for the lively conversation and thought-provoking insights. We don't have to agree on every point (or at all), but I've decided to synthesize a lot of thoughts and ideas from these conversations into a blog post: https://deadsuperhero.com/2024/03/economic-musings-on-federated-networks/

[–] rglullis@communick.news 23 points 6 months ago* (last edited 6 months ago) (1 children)

I know you said it is a brain dump, but your follow up still seems mostly an emotional reaction to how the devs responded rather than a reasoning synthesis process.

E.g, your "Where Fediverse Software Differs", it seems like you want to pay off the set up you've placed in the previous paragraph (about the difficulty of being an open source developer), but this payoff never comes and instead you end up the argument with "The feature requests valid, and the devs responded like dicks".

Even if we take "the feature request was valid" for granted, it does not follow that the devs must act on it right away. If the Lemmy devs acknowledged the issue and said "You are absolutely right and we strongly advise anyone hosting an instance in the EU if they are worried about GDPR", then what? Do you think that whoever wrote the "perfectly valid feature request" should still be pushing for making it a higher priority? On what grounds?

Also:

The operators, who to some degree help the project gain visibility, support, and money, are themselves doing unpaid labor: community building, moderation (...)

shouldn't ever be used as an excuse to justify free labor from developers. This is not Self-Loathing and Display of Low Self-Steem Olympics. Anyone that comes to me with a "I'm not gaining anything from my work" argument will promptly receive "The fact that you can not establish boundaries and are martyring yourself is not my problem" as a response.

The fact that developers of FOSS software project are able to tell users "If you want something done, you need to give us the resources or do it yourself" should be lauded, not criticized or be seen as "dicks".

If instance owners are dealing with bad users "and not getting paid for it", they can do two things: close down the instance, or put proper boundaries and tell what they are willing and not willing to do for free. Alternatively, they can do what I do and make the relationship explicitly transactional: I'm more than willing to work a lot to solve my customer's problems, but this is only after they actually paid me for it. The fact that I only accept paying customers makes my instance noticeably easier to manage. Even if I'm charging way less than what some people would donate to their favorite instance, the fact that all the users from the instances are paying make for an excellent filter.

The common denominator is relatively simple to understand: good optics of a project leads to more users, leads to more communities, leads to people building all kinds of apps and tools for those communities, leads to more people being willing to donate to a project.

This "donation-based" approach needs to change. Mastodon has no problems with "optics", and its "Founder and CEO" is reportedly making 30000€ as yearly salary. This is ridiculously low. This is less than what an intern makes at Facebook. The three Lemmy devs are sharing less than 4k€/month. You can make more money by working part-time on Uber Eats. To think that this is enough to claim "they are making some money" is frankly absurd.

If society in general is so tired of exploitative Big Tech, society needs to give a strong signal that it's willing to pay for the alternative. If we don't want to have the most brilliant minds of our generation working on how to optimize the amount of ads that you get to see online, then we need to show that those building better solutions can be properly rewarded. It's not up to the developers to try to build out everything perfectly and then go around begging for people for breadcrumbs and their seal of approval.

To sum up: I'm not saying that developers need to be worshipped because they can do what others can't. I'm also not saying that the Lemmy devs were right in how they communicate with its users, but I am saying that they are absolutely right in establishing their priorities and not let their work be dictated by someone that is not putting any Skin on The Game.

[–] laverabe@lemmy.world 9 points 6 months ago (1 children)

The problem sort of is capitalism right? These public good projects should have public funding. Imagine if the public funding for open source software projects was like that of the Apollo program in the 60s (2.5% of gdp).

[–] rglullis@communick.news 6 points 6 months ago* (last edited 6 months ago)

I am not sure I'd be using any mass communication platform that is primarily developed and/or funded by any government.

But anyway, I really don't like to use hypotheticals as an excuse to not take action. Yes, it would be better if there was more public support for open source. But it doesn't. Should we just shrug our shoulders and do nothing on our own? Why give away our agency?

load more comments (1 replies)
[–] anders@rytter.me 11 points 6 months ago (14 children)

@deadsuperhero Damn..breaking GDPR is a big problem

load more comments (14 replies)
[–] chiisana@lemmy.chiisana.net 7 points 6 months ago (27 children)

Was going to say "another one of these?" but, wow, the article really further highlights the childish nature of the Lemmy devs... Can't wait for Sublinks to reach feature parity and become main stream, so we can leave this dark phase behind.

[–] Eyck_of_denesle@lemmy.zip 49 points 6 months ago (7 children)

You don't understand how open source works. You are not entitled to any features. Let the devs go on their own pace. A lot of open source projects shut down because of similar reasons.

[–] EmilyIsTrans@lemmy.blahaj.zone 34 points 6 months ago* (last edited 6 months ago) (1 children)

Likewise, an open source project can totally die if they refuse to engage with the needs of the users. The lack of moderation and content management tools have been a longstanding criticism of Lemmy, and instances will migrate to alternatives that address these concerns. It is a genuine legal liability for instance operators if they are unable to sufficiently delete CSAM/illegal content or comply with EU regulations.

[–] Eyck_of_denesle@lemmy.zip 7 points 6 months ago* (last edited 6 months ago) (1 children)

But opensource projects are more likely to get dropped by devs than losing their userbase from what I've seen. I could be wrong. Both our points are true. That's the best part of fediverse. If one doesn't like lemmy, they are free to choose an alternative. I just don't agree with demanding features from open source developers. There is a distinct line between demanding and requesting. I'm not saying lemmy is perfect. Maybe Sublinks would be better. Let's wait. But even Sublinks won't be sustainable if users do not respect developers time and patience.

[–] FlyingSquid@lemmy.world 10 points 6 months ago (1 children)

I think there is also a distinct line between demanding, for example, a new animated avatar feature and demanding a way to delete child porn.

load more comments (1 replies)
[–] deadsuperhero@lemmy.world 25 points 6 months ago* (last edited 6 months ago)

While I think you're correct about it ultimately being their project, and that users are in no place to demand or expect anything, this thing takes on whole other dimensions once a project is all about building a social platform. Particularly one where volunteers host part of the network themselves.

It's one thing to look at some random demand to write everything in a P2P architecture because DNS is too centralized. When I worked on Diaspora, I literally saw people demand stuff like that, and laughed it off. I'm trying to build a platform that exists today, not some pixie dream bullshit compromised of academic circle-jerking.

But when it comes to basic table stakes for participating in a network that already exists, things change a bit. This is especially true when you're connecting to a global network that has:

  • Hate Speech
  • Targeted Harassment Campaigns
  • Child Pornography
  • Extreme Gore and Violence

Suddenly, it makes a lot of sense to say "you know what, admins are going to want to filter this shit out, maybe it's reasonable for them to have some tools and fixtures that are part of core."

Unfortunately, these devs are the kind of people who scream angrily when someone says "Hey, this thing doesn't actually respect local image deletes / GDPR stuff / content deletion on account deletion". To me, that's fucking insane.

[–] masterspace@lemmy.ca 9 points 6 months ago* (last edited 6 months ago) (1 children)

You don't know how social networks work. They only survive based on network effects, if they don't have the most basic functionality that users expect (like complying with privacy legislation), then they will fail to reach critical mass and be outcompeted and die.

If the devs don't want to provide the most basic functions that any user of a social network would expect, they're welcome to be downvoted to hell and have their project go back to being one of the millions of forgotten and unviewed personal github projects.

Open source projects die because it takes both technical talent and attention to your users to make a project successful, and for-profit companies often pay different people to do those.

[–] DrCake@lemmy.world 13 points 6 months ago* (last edited 6 months ago) (1 children)

The entire point of the “fediverse” is to combat the network effect. Don’t like Lemmy? Move to another app and still communicate with people on Lemmy. Plus it’s all open, can’t find an app you like? Build one or wait for someone to build one you like.

[–] masterspace@lemmy.ca 4 points 6 months ago

The entire point of the “fediverse” is to combat the network effect.

No, it's not.

The purpose of the fediverse is to decentralize control of the network, it does not eliminate network effects in any way shape or form. At the end of the day a social network is only as valuable as the users using it and contributing content to it. If they don't find lemmy pleasant to use, they're not going to say "let me jump to mastodon" they're going to go to Reddit.

Build one or wait for someone to build one you like.

You really don't understand network effects if you think you can just sit around and wait for basic functionality and expect your network not to die.

load more comments (4 replies)
[–] 1984@lemmy.today 31 points 6 months ago* (last edited 6 months ago) (4 children)

I disagree strongly that they are childish. They are 100% correct in what they are saying here. Also this article doesn't "highlight" their behavior, it's actually "cherry-picking" behavior that puts them in a bad light. Similar to tabloids read by the lowest iq crowds.

You don't demand anything from open source devs. You feel gratitude for what you have.

load more comments (4 replies)
[–] TxzK@lemmy.zip 11 points 6 months ago (1 children)

Yeah same. I've been looking forward to sublinks for quite a while now. I'm jumping to it as soon as it's ready

[–] toasteecup@lemmy.world 6 points 6 months ago* (last edited 6 months ago) (1 children)

What is sublinks?

Update: there was a link in the article, thanks though!

[–] TxzK@lemmy.zip 10 points 6 months ago (2 children)

https://sublinks.org/

"Sublinks, crafted using Java Spring Boot, stands as a state-of-the-art link aggregation and microblogging platform, reminiscent yet advanced compared to Lemmy & Kbin."

[–] deadsuperhero@lemmy.world 12 points 6 months ago

Yeah, I'm pretty excited about it. Apparently the Pangora (Lemmy fork) dev joined forces, and the new UI is starting to look great.

https://bytes.programming.dev/notes/9qi6rc2avj3gn9dx

I can't wait to migrate from Lemmy to it. Looks good and all Apps should be working with it

Followed Sublinks on Mastodon for updates 😼

[–] asdfasdfasdf@lemmy.world 10 points 6 months ago (1 children)

Java is horrible. And Lemmy is open source. We could just fork it and have the best of both worlds.

[–] sunaurus@lemm.ee 12 points 6 months ago

The core issue here is that there are too many things to do, and too few developers to do them. By the way, for a huge number of these things that need to be done, there is most likely at least one person who thinks it’s the absolute highest priority for Lemmy. Forking would not help fix this issue, it would only make it worse.

In other words: if you’re a Rust dev, you can just fix it in Lemmy anyway, so there is no benefit from forking. If you’re not a Rust dev, then after forking, you will have a new repo to create issues on, except you’ll have 0 devs to actually fix them.

load more comments (23 replies)
load more comments
view more: next ›