I discovered yesterday evening that Lemmy.ml is blocking all inbound ActivityPub requests from /kbin instances. Specifically, a 403 ‘access denied’ is returned when the user agent contains “kbinBot” anywhere in the string. This has been causing a cascade of failures with federation for many server owners, flooding the message queue with transport errors.

This doesn’t appear to be a mistake; it has been done very deliberately, only on Lemmy.ml. Lemmy.world and other large instances do not exhibit the same behavior. It also isn’t a side effect of the bug introduced in Lemmy 0.18. You can observe by sending the following in a terminal

> curl -I --user-agent "kbinBot v0.1" https://lemmy.world/u/test
HTTP/2 200
[...]

> curl -I --user-agent "kbinBot v0.1" https://lemmy.ml/u/test                                
HTTP/2 403
[...]

> curl -I --user-agent "notKbinBot v0.1" https://lemmy.ml/u/test
HTTP/2 403
[...]

> curl -I --user-agent "placeholder-user-agent" https://lemmy.ml/u/test
HTTP/2 200
[...]

Additional evidence of this not being a Lemmy 0.18 bug:

  • This occurs when making web requests to any location on the Lemmy.ml webserver, not just ActivityPub endpoints.

  • Go to https://fedidb.org/software/lemmy and pick an instance running 0.18.0. Perform the above commands, replacing the URL for Lemmy.ml with that particular instance’s address.

If this continues, my instance may need to defederate from Lemmy.ml. This is especially problematic because Lemmy.ml continues to federate information outbound to other kbin instances while refusing to allow inbound communication from them.

Spoofing the user agent is less than ideal, and doesn’t respect Lemmy.ml’s potential wish to not be contacted by /kbin instances. I don’t post this to create division between communities, but I do hope that I can draw awareness to what’s going on here. Defederating /kbin instances entirely would even be better than arbitrarily denying access one-way. This said, we should all attempt to maintain a good-faith interpretation until otherwise indicated by the Lemmy developers. It’s possibel that this is a firewall misconfiguration or some other webserver-related bug.

Relevant comment from me (#354 - [BUG] Critical errors/failed messages during messenger:consume)

Edits:

  • Yes, people have already tried reaching out to the Lemmy instance admins in their Matrix room with no answer.

  • Someone has posed a question on Lemmy.ml about the block here: https://lemmy.ml/post/1563840

  • Serosh
    link
    fedilink
    32 years ago

    This is utterly baffling and goes against the whole idea of the Fediverse. To take advantage of the impending mass migration, just days before Reddit shuts down their universal API access for good, this all leaves a very bad taste in my mouth.

    So users now have to choose between two already-smaller communities when making the transition? This is only going to make a semi-complicated process even more confusing, and end up pushing users back to Reddit.

    I had mostly used Lemmy.ml up to this point, but I didn’t leave Reddit to join another u/spez dictatorship. What a disappointing turn of events. Kbin is now my primary.

    • hugz
      link
      fedilink
      22 years ago

      Decentralisation means a clash of egos

      • ginerel
        link
        fedilink
        12 years ago

        I don’t think it’s a case of a personal ego here. I think it’s something different, that has to go with the main devs’ ideology. I feel like @feditips 's concerns are quite valid.

    • Rottcodd
      link
      fedilink
      12 years ago

      goes against the whole idea of the Fediverse.

      Presuming for the sake of argument that it’s a deliberate move by .ml to freeze out kbin users, it only really goes against the idea of the fediverse in that it’s an underhanded way to accomplish something that was meant to be done openly. By design, every instance is entirely free to choose whether or not to federate with any other.

      What a disappointing turn of events. Kbin is now my primary.

      And (again presuming for the sake of argument that it’s not simply a glitch), that’s the fediverse working exactly as intended. Just as every instance is free to choose which instances to federate with, every user is free to choose which instances to join or follow.

      • DreamerOfImprobableDreams
        link
        fedilink
        12 years ago

        True, but the original intent was that defederation would be a nuclear option, reserved only for instances that totally failed to moderate stuff like hate speech, bot activity, etc-- given that it damages the Fediverse as a whole.

        The lemmy.ml admins are free to federate or defederate from other instances as they please-- and we’re free to criticize their decision as we please, too.

      • ChemicalRascal
        link
        fedilink
        12 years ago

        They’re Tankies. Don’t confuse Tankies and communists, even if there’s a certain historical adjacency there. They are ultimately different concepts.

    • Kabe
      link
      fedilink
      0
      edit-2
      2 years ago

      No need to get on the high horse just yet. This is much more likely to be a sever/sync issue than some kind of shadowy conspiracy.

      If lemmy.ml wanted to defederate, they’d just go ahead and do it.

      • BraveSirZaphod
        link
        fedilink
        12 years ago

        I’m not sure how much you know about networking or HTTP, but from the evidence posted, this very much is not the kind of thing that just accidentally happens.

      • assbutt
        link
        fedilink
        02 years ago

        How? I’d love to block some instances, but nobody ever fucking explains how.

        • iAmTheTot
          link
          fedilink
          12 years ago

          On kbin (which you are) you can go to /d/theinstanceyoudontlike and there’s a block button, just like every user page and magazine page.

        • ZickZack
          link
          fedilink
          12 years ago

          Go to the relevant domain’s front page (e.g https://kbin.social/d/kbin.social for kbin.social).
          The URL scheme is “https://kbin.social/d/DOMAINHERE” assuming you are currently on kbin.social.
          On the right in the sidebar you can see “Domain” and below that options to subscribe or to block.
          Really it’s the same thing as magazines, just that you generally don’t visit the domain itself.

  • Onii-Chan
    link
    fedilink
    02 years ago

    Lemmy.ml is a hive of authoritarians. I’ll be glad to not have to see their oppressive fascist fantasies here.

    • ReCursing
      link
      fedilink
      12 years ago

      From what I hear, they’re authoritarian communist, not fascist. Fascism is not just a synonym for authoritarianism, it’s a specific economically far right authoritarian political position.

      • Onii-Chan
        link
        fedilink
        02 years ago

        Same end result; oppression of the masses, rejection of human rights and personal liberties, concentration of power and corruption. Fascist, authoritarian communist, tomato, tomAto, as far as I’m concerned. Their ideologies all stand directly on the throat of freedom and I want nothing to do with anyone who believes total control of the people is a positive thing.

        • Machinist3359
          link
          fedilink
          22 years ago

          The distinction between a square and a rectangle is important, even if you don’t like right angles and parallel sides. Fascism is a flavor of authoritarianism which is uniquely worse and focused on genocide.

          • Colombo
            link
            fedilink
            02 years ago

            Fascism is not focused on Genocide. Even for Nazism, Genocide is only a (welcomed) byproduct.

            • !deleted233369
              link
              fedilink
              02 years ago

              It’s just a coincidence that all fascist governments end up genociding the shit out of one group or another, right?

              • @argv_minus_one@beehaw.org
                link
                fedilink
                0
                edit-2
                2 years ago

                So do communist governments (e.g. Holodomor, Uyghurs in China). So do capitalist governments (e.g. Native Americans, Irish). Genocide is not unique to fascism, unfortunately.

                • Machinist3359
                  link
                  fedilink
                  12 years ago

                  Not unique, but uniquely central. Fascism cannot exist without a persecuted outgroup. In other contexts, genocide is generally a state consolidating power or resources, but not the focus of these state projects.