How (racist/sexist/whatever) harassment on Mastodon works:

1. Harasser replies to their target's post, with the reply set to "followers only", saying the most vile stuff you can imagine.

2. All the harasser's followers join in on the harassment, posting more vile stuff.

3. Nobody but the target and the harassment crew can see the vile stuff that was said.

4. Target is traumatized. Nobody else can see why.

5. Everybody says "I don't see it so it's not happening."

https://community.hachyderm.io/blog/2024/08/12/hachyderms-introduction-to-mastodon-moderation-part-1/

Hachyderm's Introduction to Mastodon Moderation: Part 1

The first post in a series about Mastodon moderation tooling. This post focuses on context for the upcoming posts.

Hachyderm Community
If you're a white person on the Fediverse and you've never seen someone called a slur, or threats made against them--congratulations! You don't follow any dirtbags. But, it's happening every day and it's being hidden from you.

"But Dave, why don't they moderate?"

They do. The harassers spin up new instances to get around block lists.

"But Dave, why don't they show the receipts?"

The brave ones do, when they have the energy. It invites a huge amount more harassment, so showing receipts *always* causes psychological damage.

Some folks are willing to tank that damage to get the word out. Most people understandably just want it to stop.

Addendum to this (thanks @flippac !): the receipts a victim of harassment could show won't help stop anything, it's all sock puppet accounts. The most information they can share is "see look, this *happens*. It happened to *me*."

Which, let's be honest, isn't that useful in the white supremacist patriarchal world we live in. A few new people will learn to believe the victims of harassment. That's not much return on investment when the cost is needing more therapy.

Last post I'm going to make in this thread. If you want more visibility into this underside of the Fediverse, follow the #fediblock hashtag (and send some mental thanks and good vibes to MarciaX while you're at it, you're benefiting from the work of a Black woman).

If you want to do something about this, I know of two things anyone can do:

1. Open or comment on issues at https://github.com/mastodon/mastodon/issues

2. Share this info. Steal my posts in good health, or write this issue up in your own words.

@dave Thank you for sharing this. There are a lot of open issues marked with the "moderation" https://github.com/mastodon/mastodon/issues?q=is%3Aissue%20state%3Aopen%20label%3Amoderation (many of them also marked as "suggestion"). Do you have any suggestions of which of these proposals (if any) would help to mitigate the issues you're describing? Is there anything that should be done at the ActivityPub level? https://github.com/w3c/activitypub/issues

@dave

The harrassers didn't know, that I have a loose block-Finger. I blocked already some of them.

And des, I already know the Hashtags #fediblock for getting Info on Accounts to block. Also my admins are eager to block any of such bullshit for the whole instance.

@dave
>The most information they can share is "see look, this *happens*.  It happened to *me*."
That's the value of receipts
@dave @flippac I am not accusing anyone nor denying the harassment, but it's also worth keeping in mind that screenshots don't really prove anything, especially given how the accounts are sockpuppets.
If one is inclined to believe you, they'll probably believe you when you just say you were harassed. If one's inclined to accuse you of lying, they can easily dismiss screenshots as fabricated.
So the people who "need more proof" are generally not people who are gonna be convinced by it anyway.
@flesh @flippac I agree, and generally when people are posting screenshots it's in response to "I don't see it so I don't believe it's happening". it's not to accuse a particular sock puppet.

@dave

Would this change (in the code/design) be helpful, do you think: for posts that are in reply to something, give the original poster the ability to {reveal publicly, if non-public} and/or {completely delete, for everyone} those replies.

Maybe someone has come up with a better idea, but that's what comes quickly to my mind.

@flippac

@woozle @dave "no followers only replies [except from my own followers as that's the closest thing we have to proper filters]" in the first place would be good

@woozle @dave (so: first of all, situations where somebody's doing it in good faith like when they'd happily set it to the other person's followers aren't subject to new misbehaviour...

...but also nobody wakes up to an immense volume of shit to shovel overnight)

@flippac That sounds like an excellent suggestion.

I'm not sure where to poke to try and make this happen, but I'll keep my eyes open for opportunities.

@dave

@woozle if you go up to my OP, I added a new reply this morning that includes a link to the Mastodon github. That's the place to open an issue if you have a suggestion.

@flippac

@dave @woozle @flippac already suggested in 2023, but shot down by people who are not being harassed. 😑

https://github.com/mastodon/mastodon/issues/26937

Harassment: Followers-Only toots should NOT be visible to nonfollowers mentioned in the toot · Issue #26937 · mastodon/mastodon

Pitch FollowersOnly toots should NOT be visible to any non-follower mentioned in the toot, even if their handle is explicitly mentioned in the toot. Scenario : @[email protected] toots followers-on...

GitHub

@eobet

I'm not sure that's the best solution either -- though I see no reason why it couldn't be a per-post or per-user option.

I'm sure that'd get shot down, too; there's been a lot of "not invented here" syndrome at Masto Central. Maybe now that it's under new(ish) leadership, they'll reconsider some of these decisions?

Failing that: one of these days, I will dig into the code...

@dave @flippac

@woozle @dave @flippac all I can do is to add my voice to that thread, so I did.

@dave

@flippac i shared ages ago how this happens with folks targeting trans and/or disabled folks and/ or BIPOC, and all it did was jumpstart more harassment and nothing changed. some servers still don't give a fuck so reporting doesn't work either.

@dave receipts about sockpuppets are less useful like that, yeah

(which: this is what the victim has because this is how they did it)

@flippac @dave

Thank you very much for explaining this.

@dave i think if you're going to show receipts, then you should post them followers only. seems only right.

i wish more people would do this, but at the same time, i would never *ask* someone to do that; it's not fair on them.

But it does have a purpose. as you are pointing out, lots of folks don't know this is happening.

@dave Is there a shit mastodon says account yet? Maybe people could anonymously shame the harassers by messaging screenshots and posting them that way.
@semitones @dave the harassers know where the Screenshots come from. They were part of the "interaction".
@semitones @dave harrassers have no shame. They prefer anonymity because they hate repercussions in the real world.
@semitones @dave
Willst Du den Scheixx noch verbreiten? Dann ist das hier bald wie X.
Und ein Pranger gehört ins Mittelalter.

@dave

I'm confused, what invites aggression in reporting a jackass?

@kevinrns white men who harass DO NOT appreciate being called out. They double down to exert control or cause harm if someone dares to point out what they're doing.

All groups do it, but it's absolutely a patriarchal white supremacy thing. It's similar to how white men believe they belong in all spaces and will throw a fit if they are excluded.

@dave

No, using reporting. To mods. Its not public. I dont understand.

@kevinrns ah. Reporting to mods is not what I'm describing in that second example. I'm talking about posting screenshots to prove to people that harassment is happening.

Reporting to mods doesn't stop harassment because most harassment is from sock puppet accounts.

@dave But Dave, we do moderate the shit out of these people, their later sockpuppet accounts, and we defed from the instances where they can create new accounts algorithmically (i.e. faster than we can ban them).

Certain cases have even been reported to law enforcement.

There is no escape from the banhammer if the moderator crew is motivated enough.

Keep those reports coming.

#moderation

@szakib @dave
@semitones
> anonymously shame the harassers

You can't shame teh bots, then if you do bot operators group-masturbate to such post on Xshit or Turdgram.

Though LEA-bat factor could possibly be achieved in semi-automated way:

1. Preferences -> Sensitive Content -> [ x] Allow grep reporting
[x] Allow grep reporting on PM

If you set this feature on, your feed will be a subject to automatic assesment (threats detection). If the cached content will be flagged, yours and the other instance admin (or designed moderators) will get noticed.

Next could be:
2. Preferences -> Advanced Settings -> [ x] mute mutes all followers of the muted

Self explanatory.

That said, never ever get excited by the slur aka "don't feed the troll". Mute, move on.

(If you live in some of a few free countries and) there are *real* threats in your feed, do not reply to the harraser, get your mute face to the nearby Police station and formally report. Policemen do not like stats going south so eventually they'll react.

Hope this helps.

@dave
I appreciate the explanation of the problem. It's quite enlightening. Is there anything actionable I can do as non-moderator that happens to be on the Fediverse? Presumably raising awareness helps, but is there anything else I should be doing?

@chocobo13 You can explain it to those who still thinks it's not happening.

Harassers also sometimes target hashtags or groups, so you could watch those (e.g. #MutualAid or #BlackMastodon and definitely #FediBlock) and help by reporting anything you might see there.

Also, read https://infosec.exchange/@thenexusofprivacy/112956213079993182

@dave

The Nexus of Privacy (@[email protected])

5 things white people can do to start making the fediverse less toxic for Black people https://privacy.thenexus.today/start-making-the-fediverse-less-toxic/ 1. Listen more to more Black people – and amplify their voices 2. Think before you post 3. Call in, call out, and/or report anti-Blackness when you see it 4. Support Black people and Black-led instances and projects 5. Approach it intersectionally The article also has links to anti-racism resources and appendices with a list of common mistkes to avoid and blocklist resources for moderators. Thanks to everybody who gave feedback on earlier drafts! EDIT, 8/19: I updated #2 (which previously started with "Post Less"), and also made some other changes in the underlying article - including a bit more discussion about how anti-Blackness isn't just a US problem. Read on for some excerpts (1/N) #fediverse #mastodon #antiracism

Infosec Exchange
@dave Sorry to hear this. Do block people you don't like, seek out ones you do. You have to work to make Mastodon the place you want it to be. Sorry that you have to work harder than white people; if I could change that, I would.

@dave

I AM a white person on the Fediverse and I myself was offended from time to time by one ore another idiot (blocked them, of course), but I've INDEED never seen someone called a slur, or threats made against them - or myself.

So thank you so much for explaining those harrassment issues occuring on the Fediverse! What a pity!

@dave they probably also don't follow any/many marginalised people to see them talking about it, heh.
@dave Oh wow! Finally I understand! 🤯
@dave

But Dave, couldn't Mastodon just not allow you to reply followers only to a public post?

Dave: "Sure it could, but the harassers would simply run a system on their instance that doesn't have that restriction. The Fediverse is more than just Mastodon. And Mastodon is open source so they could also still use Mastodon but remove that restriction."

@MxAlba @dave No, it doesn't work like that.

If their instance was breaking the reply restrictions rule, your instance would detect that when they try to federate the reply to your instance, and would reject it. Then you would not see it, and it also would not get federated to anyone who opens your post looking for the replies.

Your instance could also use detection of this behavior to automatically place the offending instance on limited federation and add it to a review queue of abusive instances that are candidates for defederation.

@dalias @dave

Thanks for the education! So it does sound like that might be a solution...
@MxAlba @dalias @dave That would be enormously disruptive. I have followers who only post followers-only. They would not be able to reply to my public posts unless I also followed them. Several hundred more people follow me than I follow. I can't and shouldn't have to follow them all.
@Rhube @MxAlba @dave I think you misread because the above has no impact on public posts without any reply restrictions. It would be part of the long requested reply control features one could use if you want to limit who can reply to you. And one very useful limitiation would be "you can't change the scope of who the post is visible to".
@dalias @Rhube @dave

Of course that also would technically block people from privately responding to a public message...
@MxAlba @Rhube @dave Only if the public message has a reply control preventing that. In which case if you really want to reference it in a DM you can just include a link or quote (if quoting permission allows that).
@MxAlba @dalias @dave The #Mastodon #Developers are just evidently unwilling to address these issues…
Kevin Karhan :verified: (@[email protected])

@[email protected] bonus points when [the victim is blocked and not able to report report said harrassment](https://github.com/mastodon/mastodon/issues/23249#issuecomment-1629662706)… - They can even [prevent admins from seeing the posts in question](https://github.com/mastodon/mastodon/issues/33530) - This is a serious issue that #Mastodin developers *refuse to address*, alongside the *unwillingness to address basic features* that *every other internet-facing application has*, like [blocklist feed support](https://github.com/mastodon/mastodon/issues/28605)…

Infosec.Space

@dalias @MxAlba yes, this. "Public post but only <my followers and/or people I follow> can reply" would be a huge step in the right direction. It would let you say something to the world without letting the world talk back, but you still get feedback from your friends.

"I want to get this off my chest but I don't want to hear your opinion about it" is not possible in Mastodon today.

@dave @dalias @MxAlba in my experience this might also only kinda work, but probs better than nothing.

Had somebody harassing me below my replies, but _I_ haven't seen it, because I've blocked them way before already, but that did mean some of my followers were seeing it and started to engage with that harasser, because some instances will just find ways to also get around that.

And then I saw the replies to the reply and was obviously curious what this was all about...

@MxAlba @dave and then the admins of sensible instances would block that instance.

while true, this is not an argument against.

@fishidwardrobe @MxAlba @dave

In order to keep their abuse secret, these harassing accounts would have to use "Request to follow", because otherwise their abuse could be easily exposed by those following them.

I have avoided following anyone with this setting, not wanting to be in a group where others are not welcome. I know this is a weak reason, but now I have a stronger one.

@Anne_Delong @fishidwardrobe @dave

I have follow approval switched on because I don't want creeps following me. I do have it set that if I already follow you, you don't need approval to follow me...

@MxAlba

Oh, I haven’t seen that setting! I like it!

@dave
This is why hiding content (either from blocks, lists, etc) has so many trolling edge cases.

...Which leads me to wonder: What is the reply's visibility being able to be set that supposed to do? What is the intended use case? Why can a replier or quoter be allowed to isolate someone like that? Is it hidden from moderators?

Replies are just posts, and all posts use the same security options (currently). The feature is there so you can have an OP that is only visible to followers. Lots of people do that to keep their posts among friends, basically. The core issue is that because servers are federated, every post has to carry the privacy level with it, letting it be switched mid-stream.
@dave couldn't the post be signed including the security options? Then editing them would cause a bad sig and get it dropped?
@stuartyeates @dave It could, but that would be a whole new protocol. ActivityPubS ;)
@dave Could there be a moderation setting where I could choose not to see any posts that are followers only if I am not following the person who authored it? Even if it mentions me by name? But still see public posts that mention me by name.?
@dave What if the harassed person could undo followers-only on replies to their posts? It probably has downsides. I know nothing about ActivityPub so that was just an idea ghat crossed my mind.
@Crissa @dave I limit reply visibility to followers only or mentioned only a lot when it's something that I don't want to show up on random stranger's timelines. Sometimes it's to reduce the amount of replyguys. Sometimes it's sorta personal stuff (not to the level of "move to Signal" but still not the sort of thing everyone needs to read)
@Crissa @dave It's the same as any discussion of privacy. Sometimes I want to talk to a smaller group of people because it's none of anyone else's business why I want to talk to a smaller group of people.