this post was submitted on 18 Jan 2024
130 points (95.8% liked)

Fediverse

28490 readers
602 users here now

A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).

If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!

Rules

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy

founded 2 years ago
MODERATORS
 

A few months ago I released the Defederation Investigator, a tool to verify the federation status of Lemmy instances. With this new update, I've expanded it to support multiple Fediverse softwares, including:

  • Mastodon
  • Misskey
  • Mbin
  • Pleroma & Akkoma
  • Friendica

This works both ways: you can verify which Mastodon (et al) instances have defederated your Lemmy instance, as well as check the federation status of an instance running any of the supported softwares.

Like most of my works, this tool is FOSS and available on my team's GitHub.

Limitations

Many microblogging platforms, Mastodon included, offer admins the possibility of hiding their blocklists from the public. As it turns out many instances have chosen this approach, so the available information can be pretty limited at times.

Also, this update has increased the pool of instances from a couple hundred to over 2 thousand, so query times have increased significantly. You can reduce them by deselecting some softwares from the query page (hint: most fedi instances are Mastodon ones, so by deselcting them you'll cut out over half of the pool).

What about Kbin?

To my knowledge, Kbin doesn't share its federation status through an API like most softwares do. Furthermore, given recent events, I have little faith in the Kbin project. Instead, I chose to support its community driven fork: Mbin.

What about Peertube and Pixelfed?

I tried looking through their API docs and wasn't able to find any endpoints sharing either federation or defederation statuses. If anyone is familiar with any of these softwares and has any ideas on what to do to retrieve such information feel free to contact me, I'd love to add support for both.

What about ...?

Want more softwares? Feel free to propose them. I'd like for this tool to support as many projects as possible.

you are viewing a single comment's thread
view the rest of the comments
[–] gabe@literature.cafe -3 points 10 months ago (5 children)

Oh my God. This is really, really, REALLY bad. I know this looks like a useful tool but extending this to software that isn't lemmy is going to make the rest of the fediverse enraged. Tools like these are used as active harassment vectors. Theres a reason why the other fediverse instances that make these tools are affiliated with kiwifarms. Seriously please consider disabling non-lemmy software interaction immediately!

[–] Nerd02@lemmy.basedcount.com 6 points 10 months ago (4 children)

I'm sorry could you please elaborate on why the rest of the Fediverse would be enraged, or how this could be used for harassment? I don't think I follow. I'll admit, I only interact with the Fediverse through Lemmy so maybe there's some dynamics of the Masto-sphere I'm not picking up.

My understanding is that Mastodon admins can choose to hide their /domain_blocks endpoint to either outside users or even to all non admins. (source), and as a matter of fact almost a thousand of the 1700 Mastodon instances I'm querying already do so, so really I can only get the federation status of the few hundred that remain.

I think the admins that prefer not to show their defeds, in fear of harassment, are already hiding them, so it should be ok for me to query the remaining ones.

[–] gabe@literature.cafe -1 points 10 months ago (3 children)

There are aspects of the wider fediverse culture that is ignored on lemmy, and thankfully its lack of interoperability has helped it avoid trouble (for now). I'm really not sure how to explain to you how it could be used for harassment as it requires a bit of detailed background to how the wider fediverse functions and its history and I don't really know if it would convince you if I did explain it in enough detail. Just because data is publicly scrape-able doesn't mean it's acceptable to do so.

[–] Nerd02@lemmy.basedcount.com 6 points 10 months ago (1 children)

Well of course I can't guarantee that I would be convinced, even after hearing that but explanation aside

Just because data is publicly scrape-able doesn’t mean it’s acceptable to do so.

Isn't it? If, an instance admin, has the possibility of hiding some data to the public and refuses to do so, it's either:

  1. Because they are fine with the public accessing it
  2. Because they are ignorant and unaware of such a feature, which I honestly don't think is an acceptable excuse (after all users have entrusted this person with their data, ffs)

At the end of the day what I am doing is nothing more than what any user could do by checking the "Moderated servers" section of the about page of any Mastodon instance.

I'm sorry but I'm really am not seeing the logic behind your point.

[–] gabe@literature.cafe 2 points 10 months ago (1 children)

Do you know what kiwifarms is? Just curious.

[–] Nerd02@lemmy.basedcount.com 5 points 10 months ago* (last edited 10 months ago)

I didn't, up until yesterday night when you mentioned it. Had a quick Google search and read the wikipedia page, holy fuck there's some sick people out there. But I still fail to see how defed.xyz could help them doxx or otherwise harass people.

I don't want to be the author of software used for harassment, obviously, but I don't think you could use my tool for that, even if you wanted to.

load more comments (1 replies)
load more comments (1 replies)
load more comments (1 replies)