• rockSlayer@lemmy.world
    link
    fedilink
    arrow-up
    115
    arrow-down
    2
    ·
    10 months ago

    Tell your friend to log the IP address and report it to the authorities. They might need to turn over the entire modlog as well

  • db2@sopuli.xyz
    link
    fedilink
    arrow-up
    73
    ·
    10 months ago

    There’s always someone who doesn’t mind ruining it for everyone else. Probably safest to just delete all the images, that way there’s no need to look.

  • maaj@lemmy.ca
    link
    fedilink
    arrow-up
    31
    arrow-down
    9
    ·
    10 months ago

    Your friend should have restricted account creation.

    • robotrash@lemmy.robotra.sh
      link
      fedilink
      English
      arrow-up
      68
      ·
      10 months ago

      Federation still causes those images to be saved on your hardware, even if the account that creates it is hosted somewhere else.

        • pinkdrunkenelephants@sopuli.xyz
          link
          fedilink
          arrow-up
          11
          arrow-down
          1
          ·
          edit-2
          10 months ago

          It’s serious flaw of federation #19865438736 that’ll go ignored even when innocent instance admins end up getting jailed over it

      • whofearsthenight@lemm.ee
        link
        fedilink
        English
        arrow-up
        9
        ·
        10 months ago

        This is kinda a major problem with lemmy, and the idea that they don’t have CSAM detection on the roadmap is going to make wide adoption a near impossibility. The other thing though is that even automated CSAM detection isn’t 100%, so hosting your own instance likely means you’re going to have to view CSAM and other fucked up shit at some point to properly moderate it, even if you’re just hosting for yourself. Tbh I was strongly considering hosting my own instance because it’s not like, that hard/expensive, but this saga has turned me completely off of that idea, even just for myself.

        This actually makes me wonder how much reddit mods deal with this type of thing instead of paid employees like facebook, which has a paid army dealing with content moderation on facebook. Oh, and talking about xitter now which has neither volunteer mods and no moderation team since Elon fired them all, I assume that the freaks have just decided that’s their hosting platform of choice.

        • robotrash@lemmy.robotra.sh
          link
          fedilink
          English
          arrow-up
          4
          ·
          10 months ago

          I’ll be honest, I’m probably just going to do a scheduled wipe of the pictrs directory of my local instance every week or whatever. I’ve done them manually a few times and they’ve had zero affect on my experience.

          • KairuByte@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            1
            ·
            10 months ago

            If your local instance is just you, and you never post on your local instance, you could likely just wipe the local images nightly without any issue. Unless I am mistaken, any missing images would simply be downloaded again, since they all originated from another instance.

            • robotrash@lemmy.robotra.sh
              link
              fedilink
              English
              arrow-up
              2
              ·
              10 months ago

              Yep, just me. That not a bad idea. Even I post something would other instances reference mine or would it matter once it’s synced?

              • KairuByte@lemmy.dbzer0.com
                link
                fedilink
                arrow-up
                1
                ·
                10 months ago

                Actually that’s a good question, I’m not familiar enough with how lemmy works to be 100% certain. My initial assumption is that you’re pushing your info to another instance, and it’s never actually hosted on your own apart from the fact that it’s federated, and you’re viewing it.

    • rob64@startrek.website
      link
      fedilink
      arrow-up
      16
      ·
      10 months ago

      I think it was an issue where the CSAM was being copied to servers via normal federation with the instance(s) being spammed.

  • 𝕸𝖔𝖘𝖘@infosec.pub
    link
    fedilink
    English
    arrow-up
    29
    arrow-down
    10
    ·
    10 months ago

    I’m glad s/he was able to nuke the CSAM, even if other material was nuked with it. This crap is why I’m not hosting.

    Please, call it CSAM (child sexual abuse material) and not CP (child pornography). The children in these photos/videos can’t make pornography, they’re sexually abused into making this material. CP insinuates that it’s legitimate porn with children. CSAM, on the other hand, calls it what it is: sexual abuse of children.

    • Trantarius@programming.dev
      link
      fedilink
      arrow-up
      33
      arrow-down
      2
      ·
      10 months ago

      That is needlessly pedantic. I have never heard of anyone using the word pornography to imply legality or moral acceptability. There is no such thing as “legitimate” CP, so there is no need to specify that it’s not ok every time it is mentioned. No one in their right mind would presume he’s some kind of CP supporting monster for failing to do so.

      • TheFrirish@jlai.lu
        link
        fedilink
        arrow-up
        12
        ·
        10 months ago

        If we spent more time fixing things rather than naming them the world would be a better place.

      • 𝕸𝖔𝖘𝖘@infosec.pub
        link
        fedilink
        English
        arrow-up
        9
        arrow-down
        6
        ·
        edit-2
        10 months ago

        No one in their right mind would assume that OP is. But the term was created to legitimize the material. So, while you’re correct in that it is picky, it is also picky for a reason. Words are powerful. We should fight to not empower the legitimation of that term, among other things.

        • Trantarius@programming.dev
          link
          fedilink
          arrow-up
          2
          ·
          edit-2
          10 months ago

          But the term was created to legitimize the material.

          Do you have a source for that? I can’t find anything that states the origin of the term itself is seedy. Besides, it’s just a plain description: it’s pornography with children in it.

          The only sources I can find that support CSAM over CP claim that CP somehow implies consent. But I’m saying that simply isn’t the case. I am not saying that words arent powerful. I am not saying that no words ever need to be changed. I am saying that these words don’t need to be changed.

          Based on those same sources, I’d speculate that this outrage is just misplaced anger. They almost immediately start talking about how bad sexual abuse is, which is not really relevant to whether it should be called CP or CSAM. Just because CP is bad, does not mean the term CP is bad.

          • 𝕸𝖔𝖘𝖘@infosec.pub
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            10 months ago

            Honestly, I don’t care what you choose to call it. Our world warrants us certain freedoms, and how we use those freedoms will set the stage for the future world. As you’ve said, CP implies consent. If you would like to spread the implication that these children somehow consented to be part of this sexual abuse material, then keep calling it CP. I, with the rest of those who wish to not spread the lie that they consented, will call it CSAM.

      • madejackson@lemmy.world
        link
        fedilink
        arrow-up
        2
        arrow-down
        14
        ·
        10 months ago

        Just because you aren’t affected doesn’t mean it is no problem. This isn’t needlessly pedantic, it just shows your ignorance and idiocy.

        • Afghaniscran@feddit.uk
          link
          fedilink
          arrow-up
          8
          ·
          10 months ago

          Not even close. Giving it a new name doesn’t magically fix the problem. Join the real world, no matter what name you give something, it’s still the same thing.

          If I really wanted to seek some sort of discrepancy in the way its being named I’d argue youre changing the name so you can one day defend yourself by calling your noncey stash “legitimate” and therefore it is abuse material.

          All in all, who gives a fuck what name its got. It’s pure, unadulterated idiocy to think abused children are hurting because of the fact us non-abusers call it child porn and not sexual abuse material.

          • madejackson@lemmy.world
            link
            fedilink
            arrow-up
            2
            arrow-down
            5
            ·
            edit-2
            10 months ago

            Well I didn’t say it fixes the problem. I’m just saying you’re ignoring it. By ignoring the issue, you’re empowering the issue. Which is definitely worse than not doing anything. So your opinion is wrong and ill-educated.

            • Afghaniscran@feddit.uk
              link
              fedilink
              arrow-up
              2
              ·
              10 months ago

              Exactly what issue is being ignored by not changing an already established name for something thats already widely agreed to be vile and disgusting?

              • madejackson@lemmy.world
                link
                fedilink
                arrow-up
                1
                arrow-down
                2
                ·
                edit-2
                10 months ago

                Are you serious? Instead of doubling down on your ignorancy by asking rhetorical questions you could also try to inform yourself. The answer to your question is in OP’s post:

                The children in these photos/videos can’t make pornography, they’re sexually abused into making this material. CP insinuates that it’s legitimate porn with children. CSAM, on the other hand, calls it what it is: sexual abuse of children.

            • Lutz@lemmy.world
              link
              fedilink
              arrow-up
              3
              ·
              10 months ago

              Do you have an ad deal for this book or something? Bernays can eat a bag of dicks, this is case where the name doesn’t matter. The concept of it is always bad full stop. There’s no need to be pedantic. Honestly, I feel calling it CSAM could be detrimental because I didn’t know what that stood for before this thread. If I had just seen a post with “CSAM” in the title, I would have scrolled right on by because it meant nothing to me. Everyone knows what CP is and everyone knows it’s disgusting.

              • 𝕸𝖔𝖘𝖘@infosec.pub
                link
                fedilink
                English
                arrow-up
                1
                ·
                10 months ago

                Nope. But he’s the father of modern propaganda. Doesn’t really matter if you agree with him, you’ve been influenced by him and you wouldn’t have known it (me, too. Everyone). The thing is, CP is only disgusting if you’re right in the head. Many people aren’t. They see it as exciting child porn, when it’s abuse (you see it as abuse, I see it as abuse, they see it as porn). The term change is a type of rebranding. I didn’t know what CP stood for until a few months ago, when they started talking about CSAM on tv and radio. Before then, I would have seen CP on this post and would have scrolled past. Being concerned with formal rules is the basis of our society, what brands CSAM as ‘abuse material’ and not ‘child pornography’.

    • neeeeDanke@feddit.de
      link
      fedilink
      arrow-up
      9
      ·
      10 months ago

      I know that guy Tobias Fünke, althought he also is a analysist. He had some clever abreviation for that as well!

  • pinkdrunkenelephants@sopuli.xyz
    link
    fedilink
    arrow-up
    13
    arrow-down
    2
    ·
    10 months ago

    I’m not gonna lie, I’m surprised it took this long for some dipshit to try something like this. Lemmy’s security has more holes in it than a piece of Swiss cheese and we’re fools if we think it’s viable enough for it to serve as a long-term home for new social media.

    We really, really need a better social structure than federation.

    • KairuByte@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      16
      ·
      10 months ago

      Lemmy’s security has more holes in it than a piece of Swiss cheese

      This has very little to do with security. There’s inherently “insecure” about posting CSAM, since the accounts and images were likely posted just like any other.

      What really needs to happen, is some sort of detection of that kind of content (which would likely require a large change to code) or additional moderation tools.

            • KairuByte@lemmy.dbzer0.com
              link
              fedilink
              arrow-up
              6
              ·
              10 months ago

              Software development is a balancing act. You need to pick and choose not only what features to add, but when to add them. Sometimes, mistakes are made in the planning and you get a situation like this.

              What likely happened, is that these kinds of features were deemed less likely to be needed, since the majority of lemmy users will never run into the need of them and there is technically a way to handle the situation (nuking your instances image cache.) But you’ll likely see a reshuffling of priorities if these kinds of attacks become more prevalent.

    • 𝒍𝒆𝒎𝒂𝒏𝒏@lemmy.one
      link
      fedilink
      arrow-up
      9
      ·
      10 months ago

      Lemmy’s security

      I think you mis-spelled moderation tools, nice quick fix would have been to block posts from new users on X instance and have a pinned post briefly covering why - they’ll eventually run out of instances that don’t have open signups IMO or just give up.

      Another mod tools option would be rate limiting of posts, i.e. users can only make a new shitpost every 10-15min, rather than unlimited times per minute

  • Carlos Solís@communities.azkware.net
    link
    fedilink
    arrow-up
    10
    ·
    10 months ago

    In the meanwhile, my YunoHost based instance that still hasn’t managed to make Pict-RS work and therefore can’t even store images even if it wanted to is doing juuuuust fine

    • Etienne_Dahu@jlai.lu
      link
      fedilink
      arrow-up
      6
      ·
      10 months ago

      Come to think of it, if you’re the only user, it’s kinda protecting you, isn’t it? (hello fellow Yunohost user!)