Seems contrary to the whole lemmyverse/fediverse model, doesn’t it?

Okay, I get it. Incidentally, strict initial approvals on smaller instances don’t seem annoying at all now, after reading these comments.

Thanks everyone!

  • favoredponcho@lemmy.zip
    link
    fedilink
    arrow-up
    110
    ·
    edit-2
    3 days ago

    Lemmy.world got hit with tons of spam early in its life. Someone was uploading CSAM and other disgusting images. The opted for the VPN block to mitigate it, which is kind of annoying for legitimate users.

    • Tiffany1994@lemmy.cafe
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      I hope lemmy.world does not implement age verification under pressure from the UK. Lots of users are using VPN’s to circumvent that on some instances already.

    • Lem Jukes@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      17
      ·
      3 days ago

      Oh well that would explain the ‘instability’ I kept experiencing on voyager with a vpn on. That error didn’t pass through so I just assumed the instance was struggling and swapped to be with the Finns.

  • 9point6@lemmy.world
    link
    fedilink
    arrow-up
    41
    ·
    3 days ago

    Spammers were using vpns to evade bans and flood Lemmy.world with illegal content a while ago

    I assume this is a holdover from that

    Smaller instances with less open sign-up probably don’t have the same blocks

  • CaptainBasculin@lemmy.bascul.in
    link
    fedilink
    arrow-up
    40
    arrow-down
    4
    ·
    3 days ago

    Feel free to use another instance if it bugs you too much. Every instance has their own rules and still allows cross communication with most.

    • Bonus@piefed.socialOP
      link
      fedilink
      English
      arrow-up
      14
      ·
      3 days ago

      It doesn’t bother me really. I just was surprised to notice it. Maybe it just somehow wasn’t affecting me till now.

  • hisao@ani.social
    link
    fedilink
    English
    arrow-up
    20
    ·
    3 days ago

    Yeah, and this gets asked from time to time. It was the first instance I tried to use and couldn’t because of VPN. I tried a bunch of instances and I’ve never seen another one blocking VPNs. Some instances don’t even require email verification.

  • orhtej2@eviltoast.org
    link
    fedilink
    English
    arrow-up
    18
    arrow-down
    2
    ·
    3 days ago

    First day on the fediverse? Don’t browse by New in case CSAM comes back, fuck that.

    And lo and behold, sickos who posted that shit hid behind Tor and public VPNs, fuck that as well.

  • A_norny_mousse@feddit.org
    link
    fedilink
    arrow-up
    7
    arrow-down
    1
    ·
    2 days ago

    They’re using the same blocklists everybody else uses. If your current IP address (as seen by lemmy.world) has been known to send a lot of bad stuff, it goes on the list. Same as with Tor exit nodes.

    • mic_check_one_two@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      4
      ·
      edit-2
      2 days ago

      It’s just a basic IP blacklist, not a true VPN ban. They’re not going out of their way to block every VPN server. Shortly after the Reddit API exodus, some bad actors were using VPNs to spam CSAM everywhere, trying to get instances shut down.

      This was before automod capabilities were really fleshed out, and child porn laws made it illegal for the instance owners to have it uploaded or even cached. So it was a big issue where several instances started locking sign-ups and blanket defederating to try and avoid the CSAM getting cached via users scrolling past it.

      Attackers started finding abandoned instances with lax sign-up rules, and would create like a dozen accounts to spam from; lots of people started instances as a side project, then simply left it running after they lost interest. Attackers started using those zombie instances to spam their CSAM. Many instances switched to federation whitelists (instead of blacklists), so those smaller zombie instances wouldn’t be federated by default.

      So if you’re on a VPN, you might be fine. But you also might be blocked, if you land on the same IP that someone uploaded CSAM from.

    • P00ptart@lemmy.world
      link
      fedilink
      arrow-up
      3
      ·
      2 days ago

      There are instances where I can’t vote or comment if my VPN is active, but .world doesn’t seem to be one of them.

    • Bonus@piefed.socialOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      2 days ago

      Good point. I just turned off the browser extension and used the desktop program instead and it doesn’t give me the same error. Clearly, it is not a universal ban but only detects some conditions.

      Edit: I spoke too soon on that. It’s blocking the desktop app as well.

    • Ledivin@lemmy.world
      link
      fedilink
      arrow-up
      19
      arrow-down
      1
      ·
      3 days ago

      lol, why use a VPN at all if you’re going to allow yourself to be fingerprinted like this?

      • cecilkorik@lemmy.ca
        link
        fedilink
        English
        arrow-up
        19
        ·
        3 days ago

        Because you have to choose who to trust. You can’t “trust no one”. You’re currently trusting your VPN provider. Are you willing to trust lemmy.world? No? Fine, then don’t. Set up your own instance, or use another one you are willing to trust, or find one that allows your VPN that you trust. No one promises these would be easy decisions but you’re going to have to make these choices. A web without any trust is a useless cesspool. Believe me, it’s been tried.

      • deadcream@sopuli.xyz
        link
        fedilink
        arrow-up
        15
        ·
        3 days ago

        VPN does very little to stop fingerprinting done by websites. Your IP address is only a tiny bit of information in a vast ocean of data that websites can collect from you. “VPN = privacy” is a marketing scam. The only ones it protects your from is your ISP. VPN’s purpose is to hide you web traffic from your ISP, bypass website bans kindly mandated by the government to “protect” you and enforced by ISP, or to hide torrent traffic (again detected by your ISP), etc.

      • mic_check_one_two@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 days ago

        VPNs don’t stop fingerprinting. IP addresses are nebulous and change all the time. All a VPN does is hide your traffic from your ISP. So they’re handy for things like torrenting, where you might otherwise catch a scary letter from said ISP.