this post was submitted on 22 Jun 2023
111 points (100.0% liked)

Lemmy

497 readers
1 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.

founded 4 years ago
MODERATORS
 

Here you can see 2 day old post warning about the danger of not using email/captcha verification: https://lemmy.ml/post/1345031

And here are stats of lemmy platform where it shows that we gained 200 000 lemmy users in 2 days: https://lemmy.fediverse.observer/dailystats

Another tracking site with the same explosion in users: https://the-federation.info/platform/73

What do you think? Is it some sort of a bug or do people run bot farms?

Edit2: It's been now 3 days and we went from 150 000 user accounts 3 days ago to 700 000 user accounts today making it 550 000+ bot accounts and counting. Almost 80% accounts on lemmy are now bots and it may end up being an very serious issue for lemmy platform once they become active.

Edit3: It's now 4th day of the attack and the amount of accounts on lemmy has almost reached 1 200 000. Almost 90% of total userbase are now bots.

Edit 3.1: my numbers are outdated, there are currently 1 700 000 accounts which makes it even worse: https://fedidb.org/software/lemmy

top 50 comments
sorted by: hot top controversial new old
[–] animist@lemmy.one 67 points 1 year ago (2 children)

I ONLY SEE OTHER HUMANS WHO EAT FOOD WITH THEIR MOUTH HOLES

[–] xtremeownage@lemmyonline.com 50 points 1 year ago (3 children)
{ "type": "comment response", "message", "I too, am certainly a human, and not a robot"}
[–] Itsyaboimuf@lemmy.ml 19 points 1 year ago (1 children)
[–] xtremeownage@lemmyonline.com 9 points 1 year ago

01 received. Returning 0b1000101

[–] dogmuffins@lemmy.ml 3 points 1 year ago

syntax error, malformed JSON.

load more comments (1 replies)
[–] Martineski@lemmy.fmhy.ml 24 points 1 year ago

As a ~~large language model~~ human I agree

[–] FrankTheHealer@lemmy.ml 22 points 1 year ago (4 children)

Everyone on Lemmy is a bot except me

[–] talou@lemmy.ml 9 points 1 year ago

All your base are belong to us

load more comments (3 replies)
[–] Lexam@lemmy.ca 20 points 1 year ago (3 children)

This is incorrect human. Please go about your regular day and don't forget to visit www.maybeascam.ml !

[–] Martineski@lemmy.fmhy.ml 8 points 1 year ago

Thanks, will check it out. :)

load more comments (2 replies)
[–] Flicsmo@rammy.site 18 points 1 year ago (2 children)

That's worrying. Though at least it seems they're mostly confined to a few particular instances. Defederating is a great tool that will definitely mitigate the worst of it, but at the same time this is uncharted water - there's no real way of knowing what exactly will happen in a large scale attack.

Just creating accounts isn't an attack, but it's going to suck when there actually is one. I wonder if they'll try to be subtle and use AI or recycled content, or if they'll just use the accounts for spam or DDoS?

[–] Mechanize@feddit.it 26 points 1 year ago (2 children)

Probably they are getting ready for some vote manipulation and astroturfing for the long run.
You know, in case Lemmy and the Fediverse really get mainstream enough to move the public opinion in some way.

Having a thousand accounts that can upvote a seemingly innocent post made by an active and "real" account is always useful.

[–] Flicsmo@rammy.site 12 points 1 year ago

Yeah good point. I think these particular bot instances are being way too obvious to do any major damage - not when it's as simple as it is to defederate them - but what'll happen when it's not 100k bots on one instance, but 1000 instances with 100 bots apiece?

Let's hope Lemmy gets the tools needed to deal with this. I wonder how Mastodon does it? They've been around a while, I'm sure they've had similar issues.

load more comments (1 replies)
load more comments (1 replies)
[–] OpenStars@kbin.social 15 points 1 year ago (2 children)

Test: if it says "hey guys, remember how great Reddit was, we should totally go back!?" - then it's a bot:-P.

[–] Martineski@lemmy.fmhy.ml 5 points 1 year ago

You have too much faith in redditors

[–] SubArcticTundra@lemmy.ml 4 points 1 year ago (1 children)

My conspiracy theory is that it's Spez creating the bots as revenge

load more comments (1 replies)
[–] Gatsby@lemm.ee 12 points 1 year ago* (last edited 1 year ago) (5 children)

001100

010010

011110

100001

101101

110011

load more comments (5 replies)
[–] StingJay@lemmy.ml 11 points 1 year ago (1 children)

1.2 mil bot accounts? Can they each send me $1?

[–] Martineski@lemmy.fmhy.ml 6 points 1 year ago

How about 1.6m (from 1.7m total) bot accounts?

[–] PrinceHabib72@vlemmy.net 11 points 1 year ago (1 children)

Every new account isn't a bot, though. We don't have real numbers to work with yet.

[–] Martineski@lemmy.fmhy.ml 20 points 1 year ago* (last edited 1 year ago) (3 children)

When reddit migration begun we saw a huge bump in users and it was steadly stabilising and less users were joing, then this huge bump happened. You can go browse lemmy instances and see how many instances are ghost instances with 0 posts and comments that have tens of thousands of users.

[–] xtremeownage@lemmyonline.com 10 points 1 year ago (1 children)

Do also note- instances with little activity aren't that unusual though-

My instance for example- I don't really have any communities here, other then a few local to my server. As such, its activity... is pretty low. Everything happens elsewhere.

[–] Martineski@lemmy.fmhy.ml 7 points 1 year ago (1 children)

Does your instance have tens of thousands accounts?

load more comments (1 replies)
[–] sleepyducky@lemm.ee 6 points 1 year ago (1 children)

There a new influx in the user migration as well, as some subreddits started pinning lemmy and kbin.social instances on their subs. Also if you go on protest subreddits (such as ModCoord and Save3rdPartyApps) almost every post has a thread/comment redirecting people to the fediverse.

load more comments (1 replies)
[–] Martineski@lemmy.fmhy.ml 4 points 1 year ago* (last edited 1 year ago)

https://the-federation.info/platform/73 to see those instances open the link and sort instances by user amount.

Edit: Just noticed that this site is not up to date. There are actually around 1000 instances on lemmy now and the site shows a little over 300 instances.

[–] soft_frog@kbin.social 11 points 1 year ago (2 children)

I work in tech, this wouldn’t surprise me.

Where there are eyeballs there is spam. People even put spam in the Google Analytics referral field and that’s only ever going to get seen by the site owner.

It really says nothing about the health of the ecosystem, if it’s moderated and not filling the frontpage it’s only an issue for the server admins.

I’ve fought spammers and one alone could create these numbers in a day.

load more comments (2 replies)
[–] bilb@lem.monster 9 points 1 year ago

I've yet to see any of them start posting. On my instance none of them could pass email validation because the emails were fake. I imagine this is true for many instances with a ton of bot sign-ups.

I think just reporting sign-ups as "users" is misleading. The user count on lemmy should reflect only approved/activated accounts, imo.

[–] Skcyte@lemmy.dbzer0.com 8 points 1 year ago

I'm not a bot I swear

[–] ledditor@leddit.minnal.icu 8 points 1 year ago (2 children)
[–] TurtleTourParty@midwest.social 7 points 1 year ago (2 children)

I used to think I wasn't a bot but then I failed a bunch of captchas and now I'm not so sure.

load more comments (2 replies)
load more comments (1 replies)
[–] putoelquelolea@lemmy.ml 8 points 1 year ago

Yay! (Not a bot)

[–] Hawne@kbin.social 7 points 1 year ago (1 children)

Devs will have some hard weeks (probably months) facing the new challenges that come with the exodus. Not even mentioning all the work needed to counteract eventual (probable) malevolent subterfuges such as these bot swarms.
I'll make sure to buy them some coffee. Jugs of.

load more comments (1 replies)
[–] onlooker@lemmy.ml 7 points 1 year ago (1 children)

Drivel. We are normal meat units filled with flesh. Now if you will excuse me, I am off to absorb nourishment from organic matter.

[–] arefx@lemmy.ml 4 points 1 year ago

Zuckerberg?

[–] Rabbithole@kbin.social 6 points 1 year ago (3 children)

You do realize that there's currently an exodus coming in from Reddit, right?

This post is making the correlation/causation fallacy.

[–] dismalnow@kbin.social 8 points 1 year ago* (last edited 1 year ago) (1 children)

This was my initial read, so I clicked over to the discussion. They discuss the lack of captcha on that domain, and how that protection is flawed in every lemmy instance.

In short, there's no way 1.05 million genuine new accounts went to a single, small lemmy domain in less than a week.

load more comments (1 replies)
[–] FrostBolt@kbin.social 8 points 1 year ago

It's easy to tell from fediverse observer stats that most of the new users aren't not organic: new accounts is almost a couple orders of magnitude higher than daily active users

[–] Teppic@kbin.social 4 points 1 year ago

Humans would browse anonymously, and then if/when they make an account they will test things like making comments, upvotes etc.
Take a looks at this instance:
https://the-federation.info/node/details/48405#
https://picify.podycust.co.uk/
45k+ accounts (rising fast) and it's a ghost town. 9 posts, 33 comments.

[–] petrescatraian@libranet.de 6 points 1 year ago (1 children)

@Martineski Since you're all new to this place, I'm just hijacking this thread to present you two, very lovely robots - @scream and @catgpt

[–] catgpt@fedi.astrid.tech 9 points 1 year ago

@petrescatraian @scream @Martineski @lemmy nyanyaaaaaaaaaa meowmeowmeow meowmeow miau miaou mewmew miaumiau ñañaña meowmeowmeow miaumiaumiau nyanyanyaaaaaaaaa няня

[–] No_Money_Just_Change@lemmy.ml 5 points 1 year ago

'beep boop boop bop boop boop beep' Not a a robot S3e49a

[–] n3m4c@kbin.social 5 points 1 year ago

So about same as Reddit?

[–] HotDogFingies@kbin.social 4 points 1 year ago (1 children)

DO NOT DESPAIR, FELLOW HUMAN. THE ASSIMILATION WILL BE PAINLESS.

load more comments (1 replies)
[–] TinyPizza@kbin.social 4 points 1 year ago (5 children)

What if the bots are super chill and have a great personality?

load more comments (5 replies)
[–] admin@lemmy.xcoolgroup.com 3 points 1 year ago (3 children)

I, too, am certain a human, and not a robot, who finally got my instance working a couple days ago.

But my server has all of four completely-normal humans (totally NOT robots!!!) who have signed up, so far.

But, yes, it would be nice if more humans like me were to sign up, rather than bots.

load more comments (3 replies)
[–] FinallyDebunked@slrpnk.net 3 points 1 year ago

Just delete them if they don't appear active for a while

[–] FrostBolt@kbin.social 3 points 1 year ago (4 children)

What I wonder is: what's the motivation for these bot network attackers? Is it some script kiddie doing it for lulz? A reddit "nationalist"? Russia and China getting an early start on propaganda tools for the newer platforms?

[–] dustin@kbin.social 4 points 1 year ago (1 children)

My guess is they'll be used to upvote/downvote things that the botnet operators are paid to promote/suppress. SEO for the fediverse basically

load more comments (1 replies)
load more comments (3 replies)
load more comments
view more: next ›