I KNOW IT SUCKS, I KNOW IT IS NOT WHAT YOU WANT, BUT PLEASE DISABLE YOUR DAMN OPEN MASTODON INSTANCE REGISTRATIONS

@jerry I would never sign up for an instance that wasn't open. I'm not going to be pre-judged by anybody. Just. No.

Ewww.

I understand the administrative burden, but 🤢.

@clonezone @jerry

AI bots yaaaaaay

Honestly, Jerry is doing an amazing job.

I mean if you don't like to be pre-judged, you can always self-host?

@13reak You lock down registrations, you're excluding anyone not willing to write an essay justifying themselves.

And there was no attack on Jerry in that.

@clonezone Seriously? Write an essay? The most you have to do is prove your human by just saying some things. I know you feel like it's a personal attack on you, but it isn't

@13reak

@lydiaconwell @clonezone @13reak
> excluding anyone not willing to write an essay justifying themselves.
But, but. But now those monsters are all able and willing to write you way better than typical nerdy person has patience for. We recently joked about #verified mastodon users, but it will be no joke if a silicon based #noai hater will figure this out, with a little help of protein-based malice. Time to make a good typo and skewed grammar detector. For instances open or not alike.

@clonezone Nothing wrong with open registrations, but it should be done VERY intentionally and only by someone willing to take on that administrative burden. It should be private by default.

@13reak

@rbos
The "administrative burden" for open registration doesn't rest on the admins of that instance.

- It falls on every user who sees the spam it causes and reports that to their own admins.
- It falls on the admins of all the other instances who have to process these reports, act on them and maybe have to decide if it's better to silence or defederate that instance rather than whacking dozens or hundreds of spambots originating there.
- It falls on all those people who have to clean up the mess after someone got taken in by a scam.

@clonezone @13reak

@clonezone @13reak It doesn't have to be an essay.
I don't require much, but I really only give accounts to people I know (IRL or virtually)
@chewie Totally fine. But, then, I'm not planning on signing up to your instance. 🙂
@clonezone @13reak most instances require literally 1-2 sentences. It's usually just to prove you're human. Some instances go a little farther than that, but it's up to you whether you want to sign up for those. I've had 2 accounts on instances without open registration and I didn't write more than a single sentence for either

@tarix29 Nope. Not going to justify myself in the least to anyone.

Again, I understand that there are administrative costs to this.

But. No. 🤬. Way.

@clonezone @tarix29 But then why are you even here?

Every post on a social platform is a de facto justification, you just want the privilege of being assumed a good guy when there are waves of folks cogently arguing why it's so important to require folks to demonstrate good faith before welcoming them to the community.

@clonezone @tarix29 Consider that a less entitled attitude may be warranted by the nonprofit nature of the platform.

There are no ads, no trackers, no paywalls, no nothing. Each user increases the administrative and technical burden of their instance, and there's nothing to recoup that cost aside from donations. If a user doesn't donate to their instance, then strictly speaking, that's all they are: a burden. The instance is measurably worse off with them on it.

Isn't it a little rude to act like you're entitled to an instance's server space for free?

@tarix29

Wouldn't a bot be able to generate those sentences?

@clonezone @13reak

@argv_minus_one @clonezone @13reak most servers prompt you to write something that a bot probably wouldn't write. Obviously it may possible for LLMs to sneak pass that (it's not a perfect defense), but there's plenty of empirical evidence that it massively cuts down on the amount of moderation work
@tarix29 @argv_minus_one @clonezone @13reak Case in point: https://plush.city/@mawr/114835317201038991 . And quite frankly I don't see how one could reliably separate LLM responses from human ones, or just lies from truth (since many bots use usernames that appear to be real people names).
✨Soff✨ Mawr :dragnwitch: (@[email protected])

Attached: 4 images Spammers have been programmatically creating accounts on Mastodon instances for years. Sometimes they post once and never again, sometimes they post on a schedule. Sometimes they never post, like a waiting botnet. As Mastodon's anti-spam solutions are effectively nonexistent, most instances in our network require manual approval of new accounts. Up until recently, it was easy to spot a spammer; their join reasons were generic. ChatGPT spammers have now arrived. #MastoAdmin #FediAdmin #spam

✨Plush✨City 🏙

@13reak @clonezone @jerry dude I do a lot of self hosting myself but if you really think hosting a fucking social network is something everyone should be doing you really need to go outside and touch some grass. Get in touch with reality. I swear everyone in this thread is a fricking psychopath.

No. Not everyone should close their instances. Most are open and for good reason. Gatekeeping is not a valid solution.

@clonezone @jerry i don't think you necessarily have to write an essay? just a few sentences about yourself?

@clonezone @jerry

even if all the admin want to do is pre-judge that you're not an AI bot?

@mrose Yes, even in that case.

I will not justify myself to anyone.

@clonezone Unpopular opinion: as an instance administrator I actually agree (minus the overreaction):
1. As a user I overthink what the other side want in that response. There's also fear of rejection.
2. Beyond following rules, I don't see any way to distinguish whether a user's intention is valid or not (not to mention they can lie), especially as a general service provider.
For as long as I can keep eyes on them, my instances are open registration, but ultimately we need automated tooling.

@clonezone @jerry while I agree that the administrative burden is indeed something that needs to be taken into account and worked on, I think this would be a change for the better for absolutely everyone.

A lot of people are calling you out on this, notably minorities who have had to go through harassment and that kind of shit – I am one of them – but I also think I understand where you are coming from. The first time I had to do something like that, I was really anxious about it too, but it wasn't at all anything like I was imagining. I think you may have a much more complicated idea of what it's actually going to entail.

You're not going to be vetted by a committee and judged on everything you're saying, you know, it's just going to be a basic sentence like, "Hey, I want to join because of that" and at best, you have to say that yes, you actually have read the proofs and you agree, or hell, you might even have to prove that you've read the rules because there is a little cheeky hidden thing you had to say in your presentation. That's it. That's pretty much how most of these things work. 

Some instances will try and be for some specific groups only. Like, some instances might be just for trans people, for example, and if you're a cis dude, for example, yeah, you're not allowed there, and that's okay, this place is not meant for you. You can probably be on another place that is federated to that place. And if you can't accept that, well... I don't know what to tell you. 

Other places might try and have a certain culture, and if it is deemed that you don't fit that culture, well, too bad, you have to find another instance. And yeah, it might suck being rejected, but at the end of the day, hey, it might be their loss too! 

And finally, and this would be the most common thing, it would be we don't want you to be a bot, we don't want you to be a scammer, and we don't want you to be a Nazi (you're not trying to imply that you are either of these). But if someone is incapable of not using ChatGPT to write just a few sentences about themselves, or can't hold themselves from dogwhistling in three sentences, well, fuck them, that's just the the system working as intended. 

@jerry what is that and what does doing that mean
@lamb @jerry open registration allows anyone to create an account at any time without moderation having to approve it. The instance you're on (transfem.social) has approval-based registration. For every user I as an administrator have to go into a setting panel, view the new sign ups and hit a button to Approve or Deny. Part of what I look out for there are usernames and emails with obvious hateful references (such as 88, ss and other dog whistles) and the reason they have for joining. On transfem.social, we have words like racial slurs banned from usernames so nobody can register a username with slurs in it. Iirc mastodon doesn't even have the ability to denylist certain words. Combine that with open registration, and basically, it's an all-you-can-eat buffet for bad actors with zero ways of filtering them out.
@lamb @jerry And it's fucking annoying because a big enough instance like defcon.social might have users we want to see. We can't filter out their new registration, and so we play a cat-and-mouse game of banning users who misbehave. Even in the case where fedi software allows "allowlisting" users that's still manually approving every user from that instance which is just not possible for the thousands of instances around us without adding significant moderation workload.
@puppygirlhornypost2 @jerry @lamb
Out of interest: is there someway of feedback connection between instances, so that the Admin of the home instance has the possibility to know if one of his users misbehaves on other instances, so he can more easily find the bad actors?
So that moderation effort isnt singled out for every instance alone?
@RDogPinK When you report a user or one of their posts the report form gives you the option to send it to their instance admins as well (if they're from another instance).
@puppygirlhornypost2 Most folks were focused on quote boosts but username rules was one of the moderation features added in Mastodon v4.5. Finally.
@puppygirlhornypost2 @jerry @lamb I only found out what 88 meant recently by watching 'Mystery Road: Origin' on TV, so what if I had actually chosen 88 as a random number?
@jtb @puppygirlhornypost2 @jerry @lamb
Then every german mastodon user would have reported you. Lesson learnded, iguess

@moin @jtb @puppygirlhornypost2 @jerry @lamb

To paraphrase an old Reddit post:
“If your username ends in 86, people will assume you are 40 years old. If it ends in 69, you are definitely 12 years old.”

@moin isn't 88 a good luck thing in China? context is everything.

that said, the context for that is worlds apart and should be obvious on inspection

@jtb @puppygirlhornypost2 @jerry @lamb

@moin @lamb Well, this one wouldn't have. Not just based on an 88. [email protected] might be born in 88.
@jtb It's not helped by 8 being a common "lucky" number for Asia at large.
@jtb @puppygirlhornypost2 @jerry @lamb I've had a few conversations with well meaning folks who were born in 1988 or whatever, not realizing the message their ID was unintentionally sending. They usually changed their ID.

@dragonfrog @jtb @puppygirlhornypost2 @jerry @lamb

What about Michael_Irvin_88?

There were quite a few well-known players with that number in the NFL.

I realize that hardcore NFL fans and mastodon users have a somewhat limited intersection, but there must be a few of them.

@VileOx @jtb @puppygirlhornypost2 @jerry @lamb oh for sure, same as being nerdy about Norse mythology and civilisation and stuff. Nothing wrong with the being into the actual historic period. But if you put a Valrknot as your avi and have a user name that references Odin, you are screaming "I'm a Nazi" and driving a lot of people to avoid you

You may not realize you are, which is why it's a kindness to inform someone of the message they don't realize they're sending.

@VileOx @jtb @puppygirlhornypost2 @jerry @lamb I onc broke the shoelaces on my black Doc Marten boots and was near a shoe store that only had white ones in the right length.

A little later someone kindly informed me that there is a whole boot lace colour code in the punk scene and my white laces on black boots said "I'm a white supremacist".

I bought black laces at the next opportunity.

@dragonfrog @jtb @puppygirlhornypost2 @jerry @lamb

Hardcore dive in the Norse mythology and Mastodon are a match made in Valhalla. I am with you so far. In addition, threre are not so many people who are really into it.

NFL is not even a subculture (unless the whole of the USA is), it is as mainstream as it can be. There are literally millions fans, thousands of whom wear 88 jerseys. Many of the wearers are African-American, and so are the players.

So if I were an admin/moderator, I would probably let it be.

P.S. Some of these things are quite culture specific. Even 4/20 means very different things depending on which shore of the Atlantic you are at.

P.P.S. I would also change the shoelaces, but that is a hyperspecific cultural niche I wonder what would the punk scene aficionados think of a black guy rocking black Doc Martens with white shoelaces (and being quite oblivious of their arcane knowledge).

@jerry

It does not suck.

It is what we want.

We are the eliitti.

No one is getting in.

@jerry For what?
@Mombi @jerry preventing bots, fascists, racists, trolls, etc.
@jerry please don't scream at me, I did!
@jerry well, I am deleting on average 4 bots per day.... and I don't mind. I could delete even 10.
@xChaos @jerry The real people those bots are bothering might mind

@mikelovesbikes yes, this is why I am deleting them. But it is just propaganda botnet, they don't target any specific users.

@jerry

@jerry I've removed the ability to register to my instance at all, the perfect solution ​
@jerry
Many instance admins didn't realize that: Running an online service is a huge responsibility. It's okay if they feel like they're out of capacity and decide to close reg completely.
But it's not okay to open-reg and pay no heed to moderation, and let the service one poison the online space.

@jerry

The default instance is overwhelmed even if they tried.

The default should be $Random.

@jerry I've literally seen accounts that are 88 / HH / some variation of such with swastikas as their profile picture on open signup instances. They get removed (usually), but not before they spam slurs towards marginalised people--the damage being already done there. It happens on every large open sign up instance and literally seconds of reviewing signups will avoid this. Same for the "verify mastodon" accounts that are clearly malicious

@jerry there has to be a better way.

Most Mastodon instances being closed registration delayed my Mastodon signup by years.