hitagi (ani.social)

howdy

  • 128 Posts
  • 435 Comments
Joined 1 year ago
cake
Cake day: June 21st, 2023

help-circle








  • This Lemmy instance is much harder to maintain due to the fact that I can’t tell what images get uploaded here, which means anyone can use this as a free image host for illegal shit, and the fact that there’s no user list that I can easily see. Moderation tools are nonexistent on here.

    0.19.4 provides a way to see uploaded images (although not the best) but this version was only recently released so I can see where the frustration is coming from especially since the CSAM attacks happened nearly a year ago. At the time, I had to make a copy of pictrs, view everything on a file manager, and manually remove those images. People can still upload images without anyone seeing it however.

    It also eats up storage like crazy due to the fact that it rapidly caches images from scraped URLs and the few remaining instances that we still federate with.

    This was fixed in 0.19.3 (released 7 months ago) where you can disable image “caching”. This has solved storage costs for us together with pictrs’ image processing.

    plug in an expensive AI image checker to scan for illegal imagery

    It’s unfortunate that we need this. Not everybody has the resources to run fedisafety nor does everyone live in USA where they can use Cloudflare’s CSAM scanner. I think a good way to deal with the issue is to have images that are not public, not be stored (or have no private images at all). This way images can be easily reported.

    Overall, I understand the frustration and to some degree I also feel the same but I also limit my expectations considering the nature of the project.




  • Sorry. This one is actually my fault. I was using lemmy-thumbnail-cleaner to remove “thumbnails” prior to v0.19.3 (the version that gave the option to disable Lemmy from making a copy of every picture that federates over).

    I felt it was necessary to remove those because it used up a lot of storage space and there might have been files there that I haven’t been able to clean out (such as images that copied over from several CSAM attacks in the past).

    Everything seemed to be fine until I noticed some recent local images were being removed. Thankfully, it did not remove any older local image. I can restore some of these manually but it will take some time. Everything should be fine now though and any new image shouldn’t be removed.

    Is this related to disabling iframes? https://ani.social/post/2612139?scrollToComments=true

    It’s not related to disabling iframes. For disabling iframes, I just added a CSP header to disable iframes from other websites except YouTube and Vimeo (I can’t think of a better way to fix this TBH). This should prevent weird behavior from other websites downloading files now.

    edit: I am going to make a post about all of this and a lot of other info as part of “June 2024 notice” but I’m a bit busy with school right now and other personal matters.






  • Thanks for letting me know. I’ll have a look again today. I made changes when we migrated so that might be the cause.

    edit: It looks like this is an issue in 0.19.4 for servers that disable external image cache. lemmy.cafe (0.19.4) has this issue but mander.xyz (0.19.3) does not. I’ll see what I can do.

    editedit: HOPEFULLY its fixed now(?) I disabled iframes. Lemmy is weird. Sometimes it wants to load the iframe. Sometimes it doesn’t. I don’t really understand what’s going on to be honest.