My Love-Hate Relationship With Lemmy

Content Warning: This blog post contains discussion of CSAM & harassment on the Fediverse (as well as other nastiness)

Background

So... what is Lemmy exactly? It's unlikely you know unless you've actually used Lemmy before or have an interest in fediverse software development. It's especially unlikely that you've seen a Lemmy post within the Fediverse as although it is built atop ActivityPub, it's compatibility with other Fediverse software is currently very limited.

If Mastodon is a Twitter clone then Lemmy is Reddit's Dolly the Sheep. It's a software in very early development that's been around for a few years now (One of it's first releases on Github was May 6th of 2019) but only relatively recently during the Reddit API debacle did it gain adoption beyond a very small niche. Compared to the rest of the Fediverse it is still very small but it is steadily growing and as seen by other corporate platforms it is unlikely that this will be Reddit's last controversy.

It has a multitude of problems, and my hope with this blog post is to highlight them as well as potentially bring attention to some glaring issues I feel are just... completely ignored.

My own Lemmy (& Fediverse) background

I joined Lemmy during the API debacle but my own experience and knowledge of the Fediverse didn't begin with Lemmy. I have followed the development of the Fediverse and the software around it for years. I would sign up and occasionally check out different Fediverse software, but never really committed to using any until this past summer.

When I first signed up for a Lemmy instance it was just out of curiosity. I had no desire to have my own instance, provide admin support for other larger instances, or even weigh in on its development. It was just curiosity for curiosity sake. Instantly though, I began to see the potential Lemmy has. In spite of everything, I still see that potential too for such a platform.

First, the good

I think before I really get into the weeds of my criticism with Lemmy it's probably best to start with a bit of what I actually like about it. Because there are some things I actually do enjoy! I wouldn't use it or still have my own instance if I didn't.

The principle behind the software works really well for a federated system. Instead of a giant single instance with its own singular feed, an instance has communities with their own structure based atop the instance itself. It's similar to Reddit in that regard. Instead of just having a sitewide singular culture there's room for more than one community culture to grow on a single instance.

And in my own opinion, that makes more sense for large scale instances compared to large scale microblogging Fediverse instances. Having a smaller cluster of communities that have their own moderators rather than one giant community as an entire instance feels a lot easier to manage as an instance admin if you have sufficient moderators (and tooling, but we'll get into that....). Granted, I've never been an admin on a TRULY giant Mastodon instance but I imagine it's very very different. But large Mastodon instances have a particular reputation of being not well moderated. There comes a point where managing an instance of such a giant size just feels impossible to be done correctly. With Lemmy that feels different.

When I've provided admin support for larger Lemmy instances the communities essentially babysit themselves. It's quite smooth when it actually works as intended!

I personally enjoy the forum based system for conversation around news and other topics a lot more enjoyable compared to on Mastodon. That's not to say I dislike Mastodon or the microblogging side of the Fediverse, I just prefer the rest of the Fediverse for friends and casual conversation. Lemmy is where I feel more open to being a bit more serious with what I interact with in the Fediverse.

The Bad

There's a lot to unpack here, so I'm gonna split it by category.

The Software Itself

I feel very averse to bringing attention to some of the issues currently present with Lemmy as many of these are likely potential attack vectors by bad actors. But at this point, I don't know how else to point them out.

A list of the biggest issues with Lemmy's software that renders it extremely stressful to manage a community on it right now: – Extremely insufficient moderation tooling. – The only site wide staff option is admins. There is no granular permissions, you are essentially given the keys and then some. – There is no granular federation options. Only domain blocks and that's it. – Removing communities don't remove them entirely, content still gets federated in but is hidden to staff only. – Image caching is forced on every image. – Extremely insufficient documentation. – Reports are auto forwarded without any anonymity. And yes, report retaliation bans happen from community mods. – Reports are sent to both admins and community mods, with no means of forwarding directly to admins. Community mods can snipe reports before admins see them. – Domain blocks are always publicly visible. – Mod logs are always publicly visible in the public mod log. – And a laundry list of more.

The extremely insufficient mod tooling became a big issue rapidly during a series of attacks that occurred over the summer that culminated in CSAM being posted in a large Lemmy community. I was one of the first people outside of its original instance to call attention to it being federated outwards, and had to witness and deal with the fallout. The issue that caused it were pointed out months prior and completely ignored.

This blog post by a Lemmy user who accidentally uploaded their ID and dealt with the nightmare after describes in great detail the ridiculous steps instance admins need to take to remove images from the backend image server that Lemmy depends on. (as well touches upon the developer behavior aspect I will highlight later.)

In order to sufficiently purge images you need to have external tools and scripts that the community maintains. There are some instances that utilize local machine learning algorithms to scan images, but most instances are unable to do so because of the GPU power that requires.

When the CSAM started federating outwards across the network, I had to delete my instances storage buckets from the 24 hours to when the material was identified numerous times. As well, with the scripts provided to do a single removal you still need to view the images to get their URLs or rely on another instance admin who has done so for you. At this point Lemmy admins coordinate in matrix channels over this, and some days it's worse than others. It is unreasonable to expect instance admins to have to rely on such tools outside of the software itself. Most can't.

The Developers

Something that I notice said consistently by those who have little experience in Lemmy admin spaces is “why not just contribute then?”

And the answer people try. And this happens. This unfortunately leads into the next point that is the developer teams behavior. As well, highlighted above in the blog post of that Lemmy user who unfortunately had to deal with devs behavior themselves.

In the wider Fediverse Lemmy has a pretty bad reputation due to the developer team and did so far before the Reddit exodus. But, the degree as to how little trust most Lemmy instance admins have in the Lemmy development team is often understated. There is a fundamental lack of confidence amongst a majority of Lemmy instance admins towards the lead developers of Lemmy.

The devs are right: the software does not come with a warranty. But people will leave your software behind if you refuse to engage in dialogue as well as exhibit petty and hostile behavior towards those who actually are attempting to take the time to try and contribute to the project. Above isn't the only example I have seen, there's numerous others. This is the developers project yes, but opinionated development takes a different level when you actively refuse to implement features to improve inter-Fediverse compatibility due to a grudge against Mastodons overall dominance in the Fediverse. People don't contribute because those that do just eventually don't see it as being worth their time.

Another aspect of this is that the Lemmy devs run two instances: lemmy.ml & lemmygrad.ml

I often see lemmygrad.ml in many instance blocklists across the Fediverse.... but you do know that lemmy.ml is just lemmygrad lite right? That's not hyperbole, the admins and moderators are nearly identical and the moderation style of what is action-ed on is consistent with both. Lemmy.ml is more or less the normie facing flagship instance and lemmygrad.ml is the communist shitposting side. This reason makes it difficult for many Lemmy instance admins to really trust what Lemmy devs have to say as there's not much way of telling if Lemmy devs are using their lemmygrad shitposting accounts to shit talk other instance admins. (It's happened before.)

As well, when a post was made about Sublinks (A project I will touch a bit more on, and am involved in due to the reasons I have highlighted above) the comments that were made by Lemmy's lead developers were extremely petty. This lessens peoples confidence in your project, not improves it.

The Community

There's a multitude of issues with the Lemmy community I have itself I have that I think boils down to a lot of Reddits most toxic aspects migrating to Lemmy with users. And Lemmy's poor moderation tools worsens this toxicity tenfold.

Many users on Lemmy seem actively hostile to the idea of decentralization in a way that feels self defeating. They don't want a better alternative to Reddit, they just want Reddit 2.0 and attempts to sway them towards something better feels like pulling teeth.

Many Lemmy instances that popped up during the Reddit API explicitly began with “limited defederation” policies, with Beehaw.org facing backlash when they defederated from large open sign up instances and approaching moderation in a way that most Fediverse instances do. There is this desire to be as widely federated on an instance and the idea that everything on the Fediverse is something they want to be able to see.

Then the CSAM attacks happened, harassment occurred from a now dead fascist instance, a lolicon instance popped up, and then the emergence of a pro contact MAP instance. People rapidly shifted and recognized why this defederation is needed... but many users still don't. They have had to learn the hard way that some communities just don't get along with each other and that the Fediverse is filled with some awful shit.

Another aspect is the sense of user entitlement that many Lemmy users have. There is this expectation for the software to work right out of the box and admins to approach with complete professionalism without any leeway despite the fact these instances are non-profit hobbyist projects. Alongside that, there is actively hostility towards sex workers who try to monetize themselves in the space and the harassment they receive is amplified due to the fact that moderation tools are limited. Posting an Onlyfans link in someones post is nearly constantly mass reported on the largest NSFW instance.

As well, there is an active hostility to sex work especially by the Lemmy devs. Lemmy devs have explicitly stated they do not feel NSFW content can work safely on a federated platform, and as such have banned any NSFW focused communities and instances on their instances.

Something else that bugs me quite a bit is the lack of understanding that maintaining an instance is a long term commitment, many instances have popped up with later absentee admins. Such is dangerous on Lemmy due to its current limitations.

The Kiwifarms

For someone who's been on the fediverse for a while, you already know what this is. If you don't, please read this Wikipedia article and then come back here.

Kiwifarms is on the Fediverse. They have actively been responsible for harassment on the Fediverse before, and the impact that they have on Fediverse development is noticeable. If there is an exploit to abuse and harass someone in a platform they WILL find it and use it. But often times when I attempt to try and point how tools or exploits may be used by bad actors like Kiwifarms I am at best ignored and at worst downvoted into oblivion and shouted over. It feels like pulling teeth trying to convince people in the Threadiverse not to repeat past historical horrors that the Fediverse has faced.

For example: there's an instance that made its own blocklist scraping tool. When I attempted to point out how it was a bad idea due to the hostility such a tool would have by the rest of the Fediverse but also because of the harassment potential it has, I was met with hostility, downvoted into oblivion and the developer of the tool made it clear that arguing with them was not worth my time.

The Fediverse has its own existing cultures that thrive here. And when you enter a space that already exists you need to be mindful of that to prevent issues from occurring. You do not enter someones home and take a shit on their floor, because if you do you'll very quickly be shown the door.

When I point out things I feel may cause issues with the rest of the Fediverse on Lemmy, I'm not being a wet blanket. I'm not saying I support harassment towards these people. I am warning them of what they are trying to do and the implications it has based on my own knowledge of Fediverse history.

When I first started writing this blog post I was completely despondent to the idea of the Threadiverse, but halfway thru I was informed of a new project that caught my interest. Sublinks.

At this point and time any energy spent towards Lemmy and its development I would have done will now be focused onto Sublinks. Sublinks is an alternative to Lemmy that is being built from the ground up. It is rapidly reaching Lemmy API parity. I have high hopes but cautious expectations.

My reasons for becoming involved in Sublinks is all listed all above, and I hope to provide a way forward with ideas regarding trust and safety tools. When I saw the migration to Lemmy from Reddit I was hopeful that new users into Lemmy could set Lemmy as the test bed for new trust & safety tooling in the Fediverse. Unfortunately that dream died fast, but with my involvement in Sublinks now I feel that dream has potential of becoming reality.

My hope with my own contribution to Sublinks is to try and help fix what Lemmy fails at, provide ideas to establish new moderation tooling for the Fediverse, advise on Fediverse history to prevent repeats of past tragic occurrences and proceed forward on trying to shape Lemmy into a less toxic space in the Fediverse.

Whether that happens or not, only time will tell. But I am hopeful it does.

(For more info about Sublinks, click here.)

Tags: #FediMeta, #Lemmy, #Sublinks