Absurdist, Security Architect (Magician), Beer and Bourbon connoisseur, Gamer, lover of Dark Humor (Lovecraft was a comedian), Maker, Apistevist, Agnostic, Atheist.
Could you please create a middle ground between the nuclear option (banning sites) and the whack a mole option of banning users. It would be effective to be able to ban communities (at least temporarily) during bot spam attacks while you wait for admins to police up their site. Could there also be a way for admins to notify other admins that their site is spamming garbage so that admins know that their board is the cause of a problem and what that problem is?
I’m providing a best guess on that. I may be wrong. Who knows maybe it’ll be “xtxt” or xt^2 pronounced “extasy.”
Glad to be of service.
It’s cute how you think I’m going to take legal advice from you. You do you, have a nice evening.
Wether or not doxing is unlawful depends on many things, even here in the U.S. Your absolute statement is false because it’s dependent on context that you haven’t considered.
I’m not the one that has to be satisfied with the solution. I just wanted to point out an example where it would matter that deleting an account could hide a crime. If you don’t like the doxing example, another example would be someone posting sensitive information (Airman Jack Teixeira).
I’m basing what I have said off of work I have done with attorneys in similar situations. I don’t know evidentiary law, but I wouldn’t want to be accused of destroying evidence of something. But my question stands. Why should someone who has doxed someone get away with it by deleting their account? How is that ethical?
I’m at a loss. You’re saying that things that you said publicly are private? Or you’re saying that they become private because you delete your account? Assume you dox someone. I need to find out if that happened. As an admin I’d be able to see that
I would need to be able to provide this to authorities if they provided needed legal documentation. Why do you think that privacy dictates you should be able to commit a crime, and get away with it by deleting your account?
I created a process to remove the bot accounts from my database without crashing my site. I have tested and it looks like all functions are working. If you need help because you suddenly have thousands more accounts than you would suspect ask me for the procedure. I’ll gladly provide it.
I was able to identify bot accounts by looking at creation times. They accounts are grouped by “batches” where the account creation times are within seconds of each other. That’s not typically going to happen with random humans creating accounts.
I WAS WRONG I ASSUMED (and I know better) that it wasn’t possible for me to have 3000 accounts created within a day or two of going live. I ASSUMED what I saw was accounts that were NOT local, I WAS WRONG I created a process to remove the bot accounts from my database without crashing my site. I have tested and it looks like all functions are working. If you need help because you suddenly have thousands more accounts than you would suspect ask me for the procedure. I’ll gladly provide it.
I was able to identify bot accounts by looking at creation times. They accounts are grouped by “batches” where the account creation times are within seconds of each other. That’s not typically going to happen with random humans creating accounts.
I’m sorry, I included an edit on my original post. If I can do anything else to rectify the problem my assumption caused, let me know. Thank you for your help.
At this point, I’m not certain anymore. Luckily all the accounts use values that are easy to identify them. I’ll figure out how to remove them. Sorry for the false alarm work.
I always assume I’m wrong first, I may have put that in the wrong spot. Where should I put that in the query? I put it under the Select statement.
I grabbed the first 292 names in that query, there are thousands of results. Then I compared that list to the output of the query that includes “password_encrypted.” There are matches. LOTS of matches. I’ll give you ONE person_id of a result that is in both lists. 38291
SELECT * from local_user; provides a list of users that has a password_encrypted field. That list is exactly equal (all the same accounts are listed) to what I get from: select p.name, p.display_name, a.person_id, a.email, a.email_verified, a.accepted_application from local_user a, person p where a.person_id = p.id;
So I can see a persons a.email (email address), a.person_id, and their password_encrypted (hash) by correlating these tables, can I not?
I don’t know how to make this not about me. So, I’m just going to say it. Friday I closed a 13 year old Reddit account. Saturday and Sunday I brought up multiple Fediverse servers. I now have Mastodon, Lemmy, PixelFed, Owncast, and NextCloud working. I have yet to get Element Chat and PeerTube running. They will happen by Friday. When I opened my Owncast I killed my Twitch account. When PeerTube is up and running I drop YouTube. My point is, I want to thank Reddit for providing me the motivation to leave corporate social media and switch to my own platform. I’m not going back… I’m going forward.
They should have been forced to do it the other way. “You advertise as free, so you have to provide this for free.”