Yeah so, someone just straight up posted child porn on Lemmy Shitposts. Jesus christ this is getting out of hand.

Sick fucking bastards

  • betwixthewires@lemmy.basedcount.com
    link
    fedilink
    arrow-up
    142
    arrow-down
    3
    ·
    1 year ago

    Any vulnerability will be exploited. The fact that Lemmy federates and caches media by default is a huge vulnerability in a decentralized network. This was inevitable, I’m just glad I didn’t wind up having to see it myself.

    • jet@hackertalks.com
      link
      fedilink
      English
      arrow-up
      44
      ·
      1 year ago

      Growing pains of the fediverse. Hopefully we tackle this early and don’t have repeats

    • Double_A@discuss.tchncs.de
      link
      fedilink
      arrow-up
      18
      arrow-down
      1
      ·
      1 year ago

      How is this a specific weakness of lemmy though? What’s stopping people from posting CSAM on reddit or facebook or whatever?

      • edric@lemm.ee
        link
        fedilink
        arrow-up
        41
        arrow-down
        2
        ·
        edit-2
        1 year ago

        Those sites are centralized and governed by a single private company, so they can have a dedicated team of content moderators to check and verify illegal content. Federation and how lemmy caches content on all federated instances means when someone posts illegal stuff on one instance, every other connected instance gets a copy too. So random guy running an instance in his room has to go find the content and purge it themselves even though it wasn’t posted directly on their instance, or they can be held legally liable depending on the country they’re in. It’s also the reason (whether you agree with it or not) why instances like .world preemptively blocked piracy communities.

      • DarkWasp@lemmy.world
        link
        fedilink
        arrow-up
        6
        ·
        1 year ago

        They use specific tools connected to a database that automatically detect and disallow that material from being posted.

      • betwixthewires@lemmy.basedcount.com
        link
        fedilink
        arrow-up
        2
        ·
        1 year ago

        If something like that gets posted to reddit, it is in a single database (even if it is reduntant and/or distributed) controlled by a single entity and can be removed. Cleanup is a breeze.

        In Lemmy, since servers cache federated media, it gets saved across multiple servers. Every single admin has to be notified and then manually do the cleanup on their server.

    • T156@lemmy.world
      link
      fedilink
      English
      arrow-up
      24
      arrow-down
      1
      ·
      1 year ago

      Lemmy.world is in Finland, though. The FBI doesn’t have jurisdiction there, and they would have to report it to the corresponding Finnish counterpart.

    • Deftdrummer@lemmy.world
      link
      fedilink
      arrow-up
      10
      arrow-down
      71
      ·
      edit-2
      1 year ago

      Yep, since they’re so concerned about what is and is not legally posted to their servers they can walk the walk now and contact the FBI.

      Downvote if you love kiddy porn.

            • Graphine@lemmy.worldOP
              link
              fedilink
              arrow-up
              9
              arrow-down
              2
              ·
              1 year ago

              The frustration comes from the fact that r/piracy is still up on Reddit and they specifically don’t allow links or references.

              So, in a way they’re being much more strict than Reddit, which is a much bigger and well known site. I can understand a little bit of the frustration.

            • Grimy@lemmy.world
              link
              fedilink
              arrow-up
              7
              arrow-down
              31
              ·
              1 year ago

              Lemmy.world is the biggest instance by quite a bit. Anything it bans sees a sharp drop in engagement. It’s a death sentence to certain communities so there’s something to be salty about.

                • Grimy@lemmy.world
                  link
                  fedilink
                  arrow-up
                  4
                  arrow-down
                  15
                  ·
                  edit-2
                  1 year ago

                  I am on that instance, that doesn’t change the thousands of lemmy world users who have stopped engaging with it. Even worst, I have to split my time between them, so I myself am engaging less with it even thought it was my first account.

                  I’m also not interested in having a dozen lemmy account and obviously neither are most folks. My viewing and commenting ends up being disjointed.

                  I’d like to watch lemmy as a whole grow, not just what the admins of lemmy.world deem acceptable to be mildly associated with. There was zero legal risk with being federated with dbzer0, a complete farce.

                  For all this talk about Reddit being shit, this is the exact kind of behavior that made it shit.

          • madcaesar@lemmy.world
            link
            fedilink
            arrow-up
            17
            ·
            1 year ago

            I’m upset about the piracy thing, but fully support the action against stopping CSAM no matter the cost.

            The dude above is just dense me thinks.

  • Mossy Feathers (They/Them)@pawb.social
    link
    fedilink
    arrow-up
    92
    arrow-down
    4
    ·
    edit-2
    1 year ago

    Time to stop browsing new. Jesus. I hope they get caught and locked up for a long time.

    Edit: wtf, it still shows up browsing by top hour despite shittons of down votes. That’s an actual issue. Sorting by “top” anything should not include heavily down voted posts. I hope lemmy.world is working with the FBI and whatever country this garbage is coming from to fuck them up.

    • Graphine@lemmy.worldOP
      link
      fedilink
      arrow-up
      27
      arrow-down
      2
      ·
      1 year ago

      I just did that but I didn’t see it. Guess I should count myself lucky though.

    • Graphine@lemmy.worldOP
      link
      fedilink
      arrow-up
      36
      arrow-down
      1
      ·
      1 year ago

      At first I was confused and thought I was on a porn sub, then I was confused as to why this was a shitpost, then I looked closer at her physique and I wanted to gouge my eyes out.

      What is wrong with people?

        • Graphine@lemmy.worldOP
          link
          fedilink
          arrow-up
          12
          ·
          1 year ago

          I mean, is CP really prominent enough to find easily? Unless they flat out did a specific search. But I don’t see why you would, I was just as scared as a teen when I was looking up how to get weed shipped to my house lmao. Noped out.

          • Aussiemandeus @lemmy.world
            link
            fedilink
            arrow-up
            28
            arrow-down
            1
            ·
            1 year ago

            On the darkweb there’s shit everywhere.

            But even 4chan bans child porn and they’re a bunch of degenerates.

            That’s my only concern for Lemmy is it becomes a home for degenerate cunts

            • El Barto@lemmy.world
              link
              fedilink
              arrow-up
              25
              ·
              1 year ago

              Degenerate cunts are everywhere, unfortunately. Online and offline. I think Lemmy is doing alright so far.

              • lightnsfw@reddthat.com
                link
                fedilink
                arrow-up
                1
                ·
                1 year ago

                In the last 6 months 2 dudes in the same department at my job have been arrested for cp/doing pedo shit. I don’t trust anyone anymore.

            • SkyeStarfall@lemmy.blahaj.zone
              link
              fedilink
              arrow-up
              6
              ·
              1 year ago

              Lemmy is overall well moderated. There will always be bad actors. The difference is whether they are properly removed and handled, or allowed to fester.

          • blargerer@kbin.social
            link
            fedilink
            arrow-up
            17
            ·
            1 year ago

            I can’t remember the News organization that did the reporting, but CSAM content grew a LOT during the pandemic, and learning of this, a news agency wanted to look into it, see how easy it was to find, they tried just doing some basic searches (the search terms for which they didn’t reveal) in major search engines, and turned up a lot of content, specifically in Bing I think off the top of my head. They nearly got in trouble with the FBI because of it. So yeah, if you go looking for it, apparently shockingly easy to come across.

        • kool_newt@lemm.ee
          link
          fedilink
          English
          arrow-up
          5
          ·
          1 year ago

          Is this something edgy teens do to other social medias? It makes most sense that someone or some group that doesn’t like the recent success of Lemmy and the Fediverse would be behind this.

          Now, what type of group is well known for breaking laws, having no concern for the well-being of people, and could do something like this with virtually no risk to themselves? And which of these groups in particular is known for having foreign ties to a country and people in that country that could facilitate this type of activity with little risk to themselves?

          • SpaceCowboy@lemmy.ca
            link
            fedilink
            arrow-up
            1
            ·
            1 year ago

            Now, what type of group is well known for breaking laws, having no concern for the well-being of people, and could do something like this with virtually no risk to themselves?

            Unfortunately that describes multiple groups. But given the tactics, (if it is indeed an organized group) likely it’s the 50 Cent Party, possibly in retaliation for defederating hexbear.

            • kool_newt@lemm.ee
              link
              fedilink
              English
              arrow-up
              1
              ·
              1 year ago

              That only really describes large corporate or state actors, anyone else is at serious risk of handling CSAM.

  • baked_tea@discuss.online
    link
    fedilink
    arrow-up
    59
    ·
    1 year ago

    Today I saw a post on a gardening instance self hosted by someone, which contains only one gardening community.

    It was small and OP said thanks to the few frequent visitors and traffic from other instances accounts but they are shutting it down since someone posted (I assume) CSAM material on their instance. Doesn’t want to risk it of course so a nice community now has to leave.

      • OsrsNeedsF2P@lemmy.ml
        link
        fedilink
        arrow-up
        25
        arrow-down
        2
        ·
        1 year ago

        Crazy to think Spez actually got a kick out of moderating a community flooded with CSAM

        • lightnsfw@reddthat.com
          link
          fedilink
          arrow-up
          10
          arrow-down
          1
          ·
          1 year ago

          Reddit bans people for advocating violence against child molesters but not other demographics so it’s plausible Spez supports child molestation. Why else would your site care about protecting those animals.

          • Asymptote@lemmy.dbzer0.com
            link
            fedilink
            arrow-up
            9
            arrow-down
            1
            ·
            1 year ago

            I got banned for making fun of them hiring an admin whose father had just happened to be raping kids while he was home.

            Of course he was totally unaware of the child raping so my memes were mean and uncalled for and hurt their fee fees.

  • Xylight (Photon dev)@lemmy.xylight.dev
    link
    fedilink
    English
    arrow-up
    46
    ·
    edit-2
    1 year ago

    The post was federated to my server, not the image. Am I fine? Unfortunately to purge it I’ll have to look at it.

    I’ll add a feature to photon where you can purge posts directly from the modlog so you don’t have to view the post.

      • VonReposti@feddit.dk
        link
        fedilink
        arrow-up
        14
        ·
        1 year ago

        Fair warning in some jurisdictions it is illegal to be in possession of CSAM. In my country if you’re lucky the LEO responding to your call will say “delete that shit right and forget it ever existed. Otherwise I’d have to arrest you for possession of CSAM”

        There’s really no distinction here between reporting a discovery of CSAM and actually being in possession of it since you are already in possession of it in the eyes of the law when you discovered it.

        • exterstellar@lemmy.world
          link
          fedilink
          English
          arrow-up
          8
          ·
          1 year ago

          Not saying you’re wrong and I’m not a lawyer either so I don’t know, but that sounds pretty stupid for multiple reasons.

          1. How would any website moderator even be able to moderate their site and report it to the authority if just by reporting it they’re confessing to doing something illegal. There would be nothing stopping people from posting it everywhere if there’s no legal mechanism for reporting it.
          2. “Possession” a.k.a ownership is a huge part of the law. You can’t just say that just because I’m aware of something existing, I’m in possession of it. By that logic I can go to any jewelry store, look at a diamond and it becomes mine.
          • VonReposti@feddit.dk
            link
            fedilink
            arrow-up
            1
            ·
            1 year ago

            Thing is, it doesn’t get reported unless it’s the police doing their own investigation. The law is absurd on that point and needs to be changed so “possrsion” doesn’t mean “stumbled upon it by pure coincidence”

            So I entirely agree with you, it’s just hard to change such laws because who wants to be the politician who suggested to relax a CSAM law. It is a touchy subject here since child pornography technically was legal for a few years after pornography was legalised.

          • VonReposti@feddit.dk
            link
            fedilink
            arrow-up
            1
            ·
            1 year ago

            Thing is, it doesn’t get reported unless it’s the police doing their own investigation. The law is absurd on that point and needs to be changed so “possrsion” doesn’t mean “stumbled upon it by pure coincidence”

            So I entirely agree with you, it’s just hard to change such laws because who wants to be the politician who suggested to relax a CSAM law. It is a touchy subject here since child pornography technically was legal for a few years after pornography was legalised.

      • DarthBueller@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        1 year ago

        I’d be more likely to reach out to a carefully chosen DA rather than LEO - far less risk of running into troglodytic idiocy, more likely to have someone who can listen, process, and draw correct conclusions and if necessary connect you with LEO capable of doing the same. But then again, this is not an area I have any experience in.

    • Grimy@lemmy.world
      link
      fedilink
      arrow-up
      7
      ·
      edit-2
      1 year ago

      Just delete it and you will be fine. You can find it on Google images, it’s not a ultra virus that sends you straight to jail when the pixels hit your eyes.

      The only way I can see it being a problem is if someone is running a whole community about it on your instance.

  • minorsecond@lemm.ee
    link
    fedilink
    English
    arrow-up
    43
    ·
    1 year ago

    I’m so glad I didn’t end up spinning up my own instance like I was planning. I feel sorry for the mods and admins.

    • Deiv@lemmy.ca
      link
      fedilink
      arrow-up
      10
      arrow-down
      1
      ·
      1 year ago

      You could just block sign-ups or have a vetting process in place

      • minorsecond@lemm.ee
        link
        fedilink
        English
        arrow-up
        26
        ·
        1 year ago

        Right, but I’m worried about federation. Wouldn’t that mean that the CSAM would end up on my server as well?

          • Rykzon@discuss.tchncs.de
            link
            fedilink
            arrow-up
            10
            arrow-down
            1
            ·
            1 year ago

            Yes, so it would if it gets posted to any community you follow yourself. This is an absolute cluster fuck and not worth it if you are not prepared to deal with moderating illegal stuff even on your one user instance. Some people are just way too naive and ignorant of the laws around stuff like this. In Europe your are way more at risk as a platform/website provider/hoster than you are in the US and this can bite you in the ass really hard if you are unlucky.

    • Dojan@lemmy.world
      link
      fedilink
      arrow-up
      71
      ·
      1 year ago

      Sex offender list? In my country it’s a super serious crime, you’ll get imprisoned.

      There was a guy a while back that got assaulted by masked police in his own home because police believed he was a paedophile because they’d been tipped off that he had child porn.

      He didn’t. His boyfriend (who was 30) was just really twinky. Sadly there were no repercussions for the police.

      • BruceTwarzen@kbin.social
        link
        fedilink
        arrow-up
        42
        ·
        1 year ago

        Fuck, you just reminded me of a story that happened like 10 years ago. We were drunk as fuck and my friend said that they have just finiahed their pool at their parents house and we thought it would ve a great idea to take a dip at 6 in the morning. So we were pooling around, when suddenly the police arrived. They didn’t even see us, they went straight for the front door. We snuck out and my friend who (i believe) still lived there, went to the police and talked to someone. He was in cuffs vefore he said much.
        We sat in their neighbours porch and kinda watched ir all pan out. They took computers and everyone who lived there with them. We were shocked, but also so drunk we could barely even stand.

        So turned out that somehow they found out that there is child porn on their family computer, which was there because his little brother was like 12 and super horny and he was horny for girls his age. It was such a mess.

        • Dojan@lemmy.world
          link
          fedilink
          arrow-up
          2
          ·
          1 year ago

          Gods yeah that’d be a problem here too. If your horny underaged kid takes nudes of themselves and send them to their friends, they’ve committed at least three crimes.

          1. They’ve produced sexual material of minors
          2. They possess sexual material of minors
          3. They’ve spread sexual material of minors

          All of which could land you in a whole heap of trouble.

    • T156@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      1
      ·
      1 year ago

      Cna you just delete it? I thought that you would have to go through a special procedure, or to report it to the authorities first, before doing that.

      • Rescuer6394@feddit.nl
        link
        fedilink
        arrow-up
        11
        ·
        1 year ago

        that depends on the laws where you live.

        anyway, the dev said it detects a ton of false positive, so they will / already have set up the tool to just flag the images, and then a human need to look at them and decide.

        still in its hearly stages

  • Cyrus Draegur@lemm.ee
    link
    fedilink
    English
    arrow-up
    35
    arrow-down
    4
    ·
    1 year ago

    jesus fucking christ i guess imma log off lemmy for a while and maybe check back in 2 weeks

    god damn holy shit what the fuck

  • Meldroc@lemmy.world
    link
    fedilink
    English
    arrow-up
    21
    ·
    1 year ago

    I’m hoping the Lemmy devs are working on some better moderation & filtering tools. The mods have their hands full…

    • T156@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      1
      ·
      1 year ago

      IIRC, it’s on the roadmap, but the devs also have their hands pretty full with everything else.

  • morgan423@lemmy.world
    link
    fedilink
    English
    arrow-up
    21
    ·
    1 year ago

    Holy crap. That’s insane! I was wondering what prompted the admins to do the sign up restriction. Makes perfect sense now.

  • Mefek@lemm.ee
    link
    fedilink
    arrow-up
    21
    ·
    1 year ago

    Thanks for the warning, please tell me it has been removed at this point

    • Sethayy@sh.itjust.works
      link
      fedilink
      arrow-up
      11
      ·
      1 year ago

      Most have yeah, it took admins by surprise, but every instance I’ve seen has been really proactive about it.

      I believe someone shared a tool to automate the process, so hopefully soon it won’t be a problem any longer