Hi, I have noticed for three days now not being able to post comments from my Lemmy.world account while connected via Tor (I was left waiting for a spinning wheel )! I thought at first It might be a problem with LW servers but after three days, I concluded they are banning Tor and VPN users from posting, I Have found a user post on their help community about VPN and tor ban.
then I tried signing-up to lemm.ee but was greeted with a couldflare of non ending page reload after solving captcha. so I created this account hoping to test this instance and ask Lemmy users with privacy concerns about where this is headed and should we expect the rest of Lemmy instances to go the way of reddit and entirely ban users behind proxies ?
The fact that very big instances hold the majority of the communities and discussions on lemmy and the fediverse in general is concerning. and adopting tactics like shadow banning and dark patterns is concerning as well. I dropped reddit for the same practices and I will drop Lemmy if it carries on like this.
I’d be shocked if the dbzer0 (piracy) instance blocked it.
I’d also expect that this has more to do with cloudflare than the specific instances.
Lemmy.world had announcement a while ago that they won’t support creating content with VPN and Tor due to CSAM spam that is going on
It’s limited to voting and commenting right?
posting and commenting.
voting should work: https://lemmy.world/post/11967676
Though I know what this is for, but I am against blocking VPNs and Tor since it prevent privacy-conscious people like me and other people such as dissents or other having high risks of like harassment online.
The instances being affected the most are those with open registration, and don’t block registration from temporary email providers, and have don’t have like automatic filter or using Fediverse softwares not providing such.
Though given Lemmy development may not support blocking registration by emails or filtering keywords or filtering federation of very new accounts/new account having no profile, manual approvement registration or applying bots filtering repeating spams may be enough without blocking VPNs or Tor I think
I’m also against blocking proxies, but we the privacy minded folks are a minority that actually uses vpn or tor for everyday internet browsing. There are lots of bots and malicious actors using our resources to spam large instances, and if I were managing a popular fediverse instance, I too would have been forced to consider blocking vpn/tor, even if I didn’t want it.
I think using Cloudflare isn’t very Fediverse.
You probably need to find a different instance.
I am posting on lemmy.ml and piefed.social via Tor browser without issues.
Yes, I am exploring other instances right now, I can post from sh.itjust.works fine, but I kinda arbitrarily disconnects me from time to time, It must be a bug. will check other instances if needed.
The nice thing about Lemmy is that you can always host your own instance, even if it’s only for your own individual use. You can basically use your own instance as a proxy - other instances will not see how or from where you are connecting to your instance.
Large instances are being attacked almost constantly at this point in smaller and bigger ways. Almost all measures we implement to combat these attacks come with some trade-offs for the rest of the userbase.
Hi, I liked using Lemm.ee and the way you managed that instance. but cloudflare is a pain in the butt for everyone using VPNs or Tor, and I also understand the struggle of keeping an instance safe from trolls posting illegal stuff. anyways it seems this is the trend most websites are adopting these days, so I will have to make do with what works for now.
FWIW: I’m always on VPN and I’ve never had an issue with lemmy.ca
Me neither!
It likely depends on the instance.
Only instances using cloudflare won’t work.
But commenting using a LW account used to work a week ago, they must have actively changed something.
Each time you start your Tor browser after having closed it, it could be using a different Tor circuit, isn’t it ? Maybe the Lemmy instances you’re using only blocked a few IP addresses that are Tor based. You can check what you are using each time, clicking on the circuit icon next to the lock icon in the Address bar.
On LW I have been trying for over 3 days, and restarted the browser many times, cleaned the identity, changed the circuits many times as well. I am not concerned about that account. I just wasn’t expecting it to catch up with the fediverse this quickly.
Oh.That’s too bad :(
It depends on the instance, you just have to try different instances until you find one that works for you. For what it’s worth I’ve found that dbzer0 works okay with Tor Browser.
Yes, I use my account with VPN and have never had any problems
How else do you prevent spam/illegal content originating from behind those locations?
There is nothing stopping you from running your own private Lemmy instance to get around those restrictions.
It crossed my mind to host my own instance, but I am not very confident in my tech skills. It might create more security issues than it solves.
It definitely will. Past CSAM spam used abandoned or ignored instances to smuggle into the larger ones.
When you build something yourself, you also become responsible for what goes through it.
Simply disabling registration of new accounts using Tor/VPN should be sufficient and won’t affect existing users.
Although, requiring verification of accounts made via those would be a better approach. Require captchas to prevent automated posting. Automatically mark posts made from new accounts and/or via Tor or a VPN for moderation review.
There are way to mitigate spam that aren’t as blunt and overreaching as blanket banning entire IP ranges. This approach is the dumbest, least competent way of ensuring any kind of security, and, honestly, awfully close to being needlessly discriminating. Fuck everyone from countries with draconian internet censorship, I guess?
Late to the party, but what was your solution OP?
I’m currently weighing my options, that’s how I found this post :)
change instance, try smaller instances, like https://sh.itjust.works/ or https://lemmy.dbzer0.com/
Lol World and ee didn’t want them so they became a sh.ithead, that would explain why that instance has the most groyped up users.
