- Which mods/admins were being Power Tripping Bastards?
Snoopy
- What sanction did they impose (e.g. community ban, instance ban, removed comment)?
Community ban
- Provide a screenshot of the relevant modlog entry (don’t de-obfuscate mod names).
- Provide a screenshot and explanation of the cause of the sanction (e.g. the post/ comment that was removed, or got you banned).
I woke up to suddenly being banned with a dm that was misgendering me. It appears the real reason I was banned was due to fact I was critical of Piefed’s recent actions.
Snoopy has no evidence that “I personally released the exploits into the wild" It was actually @yogthos@lemmy.ml who did the deed. I’m not technically enough to be pull it off, nor do I want to.
- Explain why you think it’s unfair and how you would like the situation to be remedied.
Hopefully unbanned and unblocked.
According to .ml people who have refused to give any proof of Sunshine’s actions “because this isn’t a court”, Sunshine deserves it because she did something maybe once like 8 months ago.
So even when Piefed zionazis are being harassers, ML and Hexbear are fully okay with harassment when the victim is deemed to deserve it.
No evidence needed or required. Just feelings and vibes.
Perfectly emblematic of their ideology. Don’t remove the power that can be abused, they want to abuse the power. States and capitalism just isn’t hurting the right people, the right people need to be harmed.
PTB from PieFed as usual, of course. Just amazing how they’ll simp for PieFed in the middle of Piefed doing shit they hate because they hate a woman more. Such cool socialists, bros!
Can someone explain what happened or something lol
- someone got bored and asked an llm to do vulnerability check against piefed.
- found things
- person announced publicly immediately, kind of dick move, without telling rimu/devs first. Although at same time there’s questions on if they would have acted based on who was doing the reporting
- piefed instances go down
- sunshine becomes another victim to piefed moderation until said mod realized how bad of a move it was.
- same mod then came to this thread to say it’s everyone else’s fault for reacting
I don’t understand the piefed.Social people at all. Are they just making up reality as they go along?
Rimu is, and I assume a lot of other people on piefed who agree with him are as well. It’s the only way anyone could be okay with what he’s doing or think he’s at all the good guy in this situation.
Yes
Rimu is. The rest of them are either tacking onto his coattails because they believe they’ll also gain some amount of control, believe (naively) that they can control him or are buying into his bullshit as the single irrefutable source.
I think they really believe the “orchestrated harrassment” bit and everything bad against them is done as part of a conspiracy to kill piefed because… tankies hate us for our freedoms or something
While also being the biggest harrasing users.
RIP Ogre.
WTF?!
He died 5 days ago.
Yeah I looked it up I was just shocked that a random comment to A completely unrelated community is how I found out.
Honestly, I’m shocked they haven’t just jumped to defederation already, considering they’re okay with just nonstop lying and mass bans from personal hit lists. May as well just bite this weird bullet.
I wonder if they know it’d trigger a mass exodus from piefed. While they have many solid communities, the vast majority of their users are there also for federation with communities on world and db0. Defederating them would probably cause uproar when even there I’m sure most of their users see it as a personal spat.
Its why rimu only blocked db0 instead of full on defederating, which even I told rimu directly defederate if he disliked db0s admin policies so much. The fact that he hasn’t I think shows that they know it’s not as bad as they keep trying to claim.
There are actual hate and horrifying instances that us admins insta-defederated from. They’re trying to put regular admins on the same level, but not defederating proves that it’s all in their heads.
Honestly, instances should just start defederating them at this point. There’s a ton of harassment from them and they clearly don’t act in good faith.
I honestly didn’t think there would be worse mods than those on world but these last few weeks have certainly proven me wrong
Indeed, the whole project, and everyone associated with it, feels deeply malicious.
deeply malicious
That’s rich coming from the person who publicly posted potential exploits and put thousands of users at risk.
Given that it took all of five minutes to find those exploits, those users were already at risk. I didn’t reveal any information that anyone couldn’t get by cloning the repo and throwing an LLM at it.
Well, I’m late to the party, but PTB.
The reason may be odd though.
It’s the reason given that’s why I jumped straight to PTB. Didn’t need to see anything else.
Any mod or admin that gives that as a ban reason that isn’t just cleaning up dead accounts or bots, is automatically power tripping. They could ban the same people, and even for the same things, and not have me immediately knowing they’re power tripping with just two words.
It’s also smug as fuck all, and I’ve gotten extra pissy about smug assholes in my middle age. But that’s borderline being an asshole myself, so I won’t go into it beyond that.
What does PTB mean?
Parade Transgressing Bitch?
Party Tanking Bastard?
Pirate Ticklin’ Bunny?
a modest effort at searching for this term nets no information other than typical “assist llm” circular references
Check the sidebar.
Check the name of this community.
@yogthos@lemmy.ml didn’t release exploits into the wild. He publicly disclosed vulnerabilities, which could be used to create exploits. We removed the post at the request of the developer, and he has since released a security update.
https://en.wikipedia.org/wiki/Vulnerability_(computer_security)#Disclosure
Someone who discovers a vulnerability may disclose it immediately (full disclosure) or wait until a patch has been developed (responsible disclosure, or coordinated disclosure). The former approach is praised for its transparency, but the drawback is that the risk of attack is likely to be increased after disclosure with no patch available.
Yogthos has made a follow-up post: PSA: open source security considerations in the era of LLMs
The discussion is full disclosure vs responsible disclosure. I think almost everyone who is familiar with the situation agrees that:
- yogthos didn’t create the vulnerability
- the vulnerability should be patched, and the public needed to be made aware of them
I don’t see why full disclosure is still being suggested as having been the right call in this case.A patch would have come out just as fast with a responsible disclosure, and there was nothing that users of Lemmy or Piefed could do by becoming aware of it right away. Meanwhile the full disclosure harms regular users, instance operators, and developers alike. I think it would ALSO be bad if someone did this to the Lemmy developers, or any other project.Responsible disclosure would have meant
- contact the developer and wait a reasonable time for a patch
- contact instance operators to let them know that they may want to take steps before the patch is out
Even if we assume that malicious entities are actively exploiting the vulnerability, which is an assumption and not confirmed, publicly promoting it only makes the problem worse and doesn’t speed up any resolution.
I understand that there is also tension between Yogthos and Rimu. I think Yogthos would have come out of this looking a lot better if they went with responsible disclosure
I don’t see why full disclosure is still being suggested as having been the right call in this case.
I don’t think it was the right call and said so in the removed post.
I see, I misunderstood the earlier comment and I’ll edit accordingly
That’s not all!
FINALLY. I’ve been questioning the ideology behind piefed for months.
Except this is absolutely because I disagreed with them in the last YPTB piefed post. I wasn’t even a dick about it.
edit: oh wait, that’s not me. They got the wrong wren lol.
PPS: I was also banned along with a wren who hadn’t posted in three months. Someone’s got a rod so far up their ass their little ban finger is shaking.
Rimu is a campist, and in his mind everyone not in his camp is the same. He has ‘stopped the drama’ only to enlist others to fight it for him.
Another perfect example. https://lemmy.dbzer0.com/comment/26079440
Guess snoopy new piefed pr accounts
I swear I don’t love the drama, it loves me!
Obvious PTB, not much of a surprise considering they mod on Piefed(.social) though
This is extra fantastic as snoopy keeps calming it’s all over and it’s time to make up, while they or rimu again kick those who bring up issues or concerns.
And a massive red flag to fucking ban/retaliate against those who discover and disclose vulnerabilities.
The key part everybody needs to understand here is that finding these vulnerabilities took mere minutes of my time. This is anybody with access to an LLM can do trivially, so the information I provided is not in any way valuable. If somebody wanted to attack piefed maliciously, they could find these same exploits just as easily as I did. Open source developers really have to start thinking about this new reality.
PTB, the misgendering is gross too.
regardless of how shitty the piefed crew has been behaving lately, releasing the security vulnerability as yogthos did was an asshole move and is something i disavow.
Since all yogthos did was using an LLM to find the vulnerability, and anyone can do that without any prior knowledge, today there’s not much speaking for limited disclosure in open source software for anything that can be found with automated checks(and I’d argue that a quick check for security issues should be done proactively). This has changed quickly, but it defacto the new standard.
i’m showing my age being unaware then! piefed getting unexpected downtime due to an llm-identified vulnerability has been a bit of an ironic twist after there was just that fearmongering post from rimu about db0 ‘moderating with llm’
Nothing to do with age, this was a very rapid change in the last months - LLMs are pretty good at finding security issues and even write the exploit for you, and you don’t even have to know how to code. That’s awesome tho! It leads to much more secure open source code we all can depend on.
Rimu is losing it. I switched to piefed so I don’t support the Tankies, but now I am actually considering switching back because even with their views, Lemmy development is attracting much less drama.
I switched to piefed so I don’t support the Tankies
- Using Lemmy is scarcely tankie support. In fact every Lemmy user represents a financial cost to running a Lemmy instance.
- Even if it were tankie support, why would you care? Tankies currently have approximately zero influence in imperial core states. In terms of political triage, they should be the least of your worries.
Oh, I still financially support dbzer0 to make sure stays alive. It’s not much, but it should cover what I use. I use this account on mobile, and Piefed on Desktop.
I do care because the finances of Lemmy development and lemmy.ml are intertwined. Since it’s all a big pot, supporting one means supporting the other.
Russia apologia is pathetic (same with Israel or the US for that matter), and the disinformation campaigns sweeping over Europe fanning the flames of fascism are the work of authoritarians both left and right. Nazis and Tankies are 2 sides of the same coin for me, and I never would be caught dead supporting a Nazi.
Believe what you like, but scholars dismiss horseshoe theory. Previously.
Doesn’t change the fact that both are authoritarians and have the tendency to mess with people’s lives in bad ways.
Horseshoe theory only applies to corrupt leftists.
deleted by creator
Why are you guys voting on a deleted comment?
deleted by creator
Yeah that was a real dick thing to do.
Doing public disclosures?
Public disclosure is good, but responsible disclosure usually involves informing the dev first, giving them a period of time to push out a patch and then publicly disclosing for the community to learn from.
Also good to report it to mitre and give it a CVE number.
but responsible disclosure usually involves informing the dev first, giving them a period of time to push out a patch and then publicly disclosing for the community to learn from.
This, assumes the vendor acts in good faith, which, as we have seen in the past few days, it hasn’t been the case. Public disclosure was the appropriate course here, so it allows forks like Pievolution & PyLova the awareness to also take action on their derivative vulnerabilities.
Also good to report it to mitre and give it a CVE number.
I believe @yogthos@lemmy.ml purposely did not, to exemplify amateurs now have access to tools they should not, and WILL forgo proper standardized communication channels to disclose issues like these in the future. Unless you believe Mitre & CVE reporting will be taught in grade schools, this threat model is pretty realistic of what we should now come to expect. Not everyone is privileged enough to afford security courses, and standardized education.
This, assumes the vendor acts in good faith
Responsible disclosure does not assume the vendor acts in good faith. Usually the disclosure period is around 90 days before the vulnerability is released, fixed or not (although this is negotiable with a good faith vendor).
Forks etc. could have been informed privately first too if possible.
amateurs now have access to tools they should not, and WILL forgo proper standardized communication channels to disclose issues
This is not a good argument. Undisclosed zero days in the wild have always been part of the threat model. Amateurs with LLMs or not, a large percentage of vulnerabilities are not disclosed responsibly and are only fixed after damage has been done. Putting people and their personal information at risk because you want to make a point about the dangers of zero days (which everyone is already aware of) is woefully unethical.
Not everyone is privileged enough to afford security courses, and standardized education.
That doesn’t mean we should abandon these things. The vendor can report the CVE too. Or anyone else with an interest in it. It doesn’t have to be the untrained amateur grey hat asking Claude for vulns. A malicious threat actor exploiting a system doesn’t report it either. The community benefits from skilled people handling things properly. Pretending that it doesn’t because most people don’t have those skills is silly.
Responsible disclosure does not assume the vendor acts in good faith.
You’ve never been sued then.
Putting people and their personal information at risk because you want to make a point about the dangers of zero days (which everyone is already aware of) is woefully unethical.
Undisclosed zero days in the wild have always been part of the threat model.
a large percentage of vulnerabilities are not disclosed responsibly and are only fixed after damage has been done.
This is not a good argument.Hopefully I don’t need to demonstrate how this also isn’t an argument that doesn’t hold itself.
The community benefits from skilled people handling things properly.
A [skilled] malicious threat actor exploiting a system doesn’t report it either.And unskilled people now have access to skilled tools that doesn’t handle things properly…. It’s not an argument people’s personal information is already at risk. It’s an argument that the tools people now have access do not properly handle things. Maybe teach the people that developed claude mythos how to Mitre & CVE responsibly ╮(︶▽︶)╭
As far as I know, piefed doesn’t even have a cve process for submitting vulnerabilities. And I’d like to note that the two vulnerabilities I disclosed only affect the server admin in a sense that they allow the attacker to post content to the server and snoop around on available endpoints, but they don’t expose any user information.
They don’t need to have one.
You can report it here: https://cveform.mitre.org/
Use the CNA-LR since I don’t think they have a CNA.
You were probably trying to do the right thing disclosing, just know that there is a better process for it (even if you think the devs are asshats, it’s good to do it like that for the community who aren’t).
Even if it only affects admins, that includes admins of forks etc.
I’m sure there’s probably more vulnerabilities to find.
Ah, I didn’t actually know about using mitre. So, that is good to know for the future.
Piefed users once again proving they have no actual problem with reddit, they were just slightly inconvenienced once and felt the need to invade every alternative.
Firstly, i want to deeply apologize for the misgendering, i saw a post on linux mobile and you stopped to publish thing because of your fatherhood. 😔
Let’s go back to the ban. YEEEEEEESSSSS, YPB, definitely ! Awesome ! Clap clap Snoopy ! You got a golden medale ! Best moderator of the year ! 🥳🎇🎆
What are you doing ?!
I was waiting for you. Let’s start and sink my reputation deeper, so i can also add you in my blocklist.
True. Sunshine, you didn’t take part in Piefed exploit. True, Rimu was wrong and overeacted like myself right now. But some part were also right.
We utterly failed to listen each other that in the end of the year we will be part of the unfediverse ! A fediverse that federate with no one. We worked so hard to escape Big Tech and build together amazing tool and they won’t work properly because everyone has issue with everyone.
The exposure of Piefed vulnerability is indirectly related to this conflict. Aren’t you part of this conflict just like me right now with those little ban ? With those little comment that undermine our relationship and trust ? With those post ? Sunshine shared the ban list, her bio is great. You also banned people. So…what ?
I don’t see the point of continuing together and seeing you again. But i really enjoyed those moment when you talked about your country, it was peaceful. I got good memories.
Right now, i’m mad at you all.
They did this, they did that, look what they did, they are lying !..and BAAAAM !
Someone decided to expose vulnerabilities publicitly without informing lead devs. In some kind of revenge. Great ! Awesome ! Amazing !
I would react the exact same way if you do the same thing to Lemmy without informing lead dev. You should be mad too ! Our friends were at risk and i’m not even talking about my own circle ! It endangered your friends. Numtonic deleted the post and understood the gravity. Thank a lot to him.
Was it worth ?! What are you doing !? It stirred the fire sooo much that it skyrocketed to this point ! What will be next thing ?
We call it a community, the fediverse (federation universe). Honnestly, it’s better to nuke it and do a forum on an isle with just three people. Let’s destroy the whole project. Would you really enjoy this ?
So, I decided to take action. A bad one.
It endangered lot more users from the fediverse : quokk.au, piefed.zip, tarte, feddit.online…put part of the fediverse offline. It is the kind of experience i promoted to Reddit users ? To IRL people ?
I do meeting where i present the fediverse. Fuck, they will run ! Do you really want to continue this shitty show ? The people i know will move to Mastodon. It will be completly crazy to invite them here. I show this to my sister, she will never create an account here whatever is the threadiverse software.
It mades me very furious because we poured lot effort. So right now, i feel calm.
If you want to continue this shitty show, please :
- push the unsubcribe button asap from my communities.
- ban me
- unlist my communities and silence/defed my instances.
What are you waiting for? There are better communities than mine and you can animate them yourself. You won’t lose anything, me neither.
You can also join the promising piefed fork. !pylova@quokk.au
Thank you. Right now, i’m unbanning them.
Edit: typo.
So much said, so little meaning. It’s not even worth having a discussion with you if you think people aren’t right to be mad at @rimu@piefed.social for the shit he’s done.
I’m just going to say this is a continuation of absolutely nonsensical behavior coming out of piefed.social.
This is shortly after banning users for “coordinated harassment” (that was neither coordinated nor harassment). Shortly after banning Mia for pointing out something felt to be problematic, and then handled in possibly the worst possible way in reply.
What in the world is going on over there? Its like constant drama generation through continual PTB behavior…
Am I getting banned?
Act like an adult and people will treat you like one.
I don’t think they’re capable of acting like an adult.
I don’t understand your logic mate, you put everyone critical of the piefed.social team in the same camp and assigning direct responsibility for anything anyone critical of piefed.social (or piefed itself) does, to all in that camp. It doesn’t work that way. People are responsible for their own actions. Yogthos actions do not represent Sunshine. Sunshine’s actions do not represent myself, and so on.
As far as “killing the threadiverse” is concerned, all you got to do to stop this is…stop escalating. The more you ban people, especially on flimsy or faulty reasoning, the more they’re going to want to talk about it, especially since piefed.social presented itself as an alternative “neutral” instance, making a lot of people migrate their communities and accounts there, and is now taking radical actions disconnecting people from their communities, based on nothing more than vibes.
I can’t believe that every day I have to see a new drama thread about piefed or rimu or piefed.social. I can honestly say I’ve never seen such a level of crash-out before. Do you not see how this works? The more you push people, the more they’ll push back.
Proof by identity. If you don’t conform your betrayal is confirmed…
Putting this here because it’s obvious it either wasn’t read or ignored so it’s for others. Can’t add the comment that triggered this either as it got replaced by simply test but this comment still echos the previous one so sadly still entirely relevant.
And why i’m writting to you ? My purpose is ending this fedidrama
So again the point is the continuation of one sided attacks from the top. Even this reply is filled with nothing but condescending well he sure is sorry if you can all ignore his actions language.
Nothing you or rimu or others on the piefed staff have said feel at all genuine to me or others.
Until that changes 🤷.
My sole purpose here is ending this fedidrama that lastest since last April. Then later, we will work on a closure so we can close wound and heal.
Again simply saying just get over it is a terrible way to do that.
but condescending well he sure is sorry if you can all ignore his actions language.
The ban was reversed: https://piefed.social/modlog?communities=3225
Good to see, but it shouldn’t have happened in the first place. It was needlessly antagonistic drama, that only prolongs the issue.
Cool. Changes absolutely nothing but glad they realized something was done wrongly
I just shared the linux phone blog post, it does not mean that I wrote it myself.
You’re taking this way too personal mate. There wouldn’t be so much drama if Rimu and yourself have not banned people who disagreed with you. Dragging the folks from anarchist.nexus and quokk.au through the mud was too far. Have you heard of the Streisand effect?
My public statements about Piefed does not make me responsible in any shape or form of the exploits. I don’t like hundreds of people’s info being exposed either.
It’s too bad I’m on your block list for being a whistle blower. It was a nice conversing with you.
I have deleted my tarte.nuage-libre.fr account.
How old are you?
Old enough to know better? Actually idk what age is considered legal on that instance or piefed.social
So you agree it hurt us too, and you’re mad at us for it? Do you think we are responsible for what some tankie did?
What have we done here to deserve to be blamed for this?
They’re upset that people are mad at Rimu for being a grade A asshole. The thing is people are angry at Rimu for a reason. He’s been a piece of shit for days now. It would be more weird if people weren’t mad at him for all that’s happened.
PTB but it also you in particular share responsibility because you are a shitty person who seeks out drama like this and then promotes it to make it about yourself. You attack people who think you are a friend and manipulate people and communities. Go to therapy.
You raise a lot of assertions about Sunshine, but I’m going to need some more info. Without context, it sounds hysterical.
Seems we’re not gonna get any proof from them at all, how odd to not give proof for claims.
They are the reason I shut down vegantheoryclub.org. When I asked for a vote to de federate sh.itjust.works they used alts to post about me on anti-tankie communities then used and army of alts to manipulate the votes on my instance. Afterwords they followed me around and screenshotted my posts to mock me on the anti-tankie forums for a while until I shut it down. This was all after pretending to be my friend in matrix for a while. They insert themselves into this kind of drama a lot, and they know it, so my message is for them. I don’t care what you think about me.
You need to provide citations for your claims otherwise this is just an anecdote.
“I don’t have to give proof of my claims, I’m not in court!”
Hamid is personally stole my favorite horse. I have no reasons to give citations, I’m not in court.
Hamid kicked my dog!
Burned our crops and poisoned our water supply too!!!
Raped the horses and rode off on the women!
why are you responding with an alt under your own post?
Because I have piefed.world blocked. You can see my main in my bio.
no reply in this comment chain is from piefed.world
I want to see the other chain too. Also I have Hamid blocked.
I wouldn’t take the bait if I were you, @hamid@crazypeople.online, because she’s very good at this game. Whatever this game is—being an energy vampire?
You’re right
I’m not a loser like you Beaver/Sunshine/Ralimba/Ms Sprouts/Leaf/Maam etc. etc. etc. and I don’t screen shot people and save evidence because I don’t give a shit and am not in court. Get help you’re unhinged you know what I’m saying is true.
FFS. Are you able to get professional help, son? Damn. You’re a frothy mess, and it’s not just from the shoebox this time.
Were you going by another user name at that time? Either way, before I knew about multiple names and hadn’t seen the drama, I probably owe you an apology for defending Beaver. So I am sorry about that. And I’m half sorry for commenting it itt after it got
quitequiet. I just figured if I said “leave Beaver alone” publicly, I should equally apologize publicly. But I’m unsure of correct form, so…So no citations?
3 days later and still angry and no evidence, I wonder why people are angry at a woman this much with no proof. Vaguely leftist gamergate.
What’s with all the alts? She’s like a competent version of Leni/Lenni/shinigamiookamiryuu/KumoYumeMiru/PatrickStar/SohruKurisutaru/CraigOhMyEggo/CraigOhMyEggoAlt/ShiverMeTimbers/Fizzymus/KaneLivesInDeath/Jedikkeneus/LurkingWitch32/Popsicles/Lilyunad.
It’s okay, you gotta move on.
Days later and still no proof, how odd. But apparently you can’t be trusted but the people with no evidence have to be. Weird.
No, he must be angry and spread shit with no evidence. Slander is okay when you’re somehow a victim while also attacking someone.
Reminds me of PieFed.
Edit: groupie is when someone doesn’t give proof and you go with innocent until proven guilty.
J.C. dude. Are you her deputy? Groupie? Sidekick?
For people genuinely wanting links for context, I’ve talked about some of Sunshine’s history in previous comments. https://lemmy.world/post/33055701/18273538
I didn’t know about some of the things mentioned here, but it wouldn’t surprise me. Using so many alts makes it hard to document these things. I expect that’s probably intentional.
Theyshe also goes* on banning sprees.Use the proper pronouns for Sunshine, please. Sunshine goes by She/her.
Edit: sorry for having people use pronouns properly, I guess misgendering is fine when people are angry?
I didn’t know until I read a few more comments. When I don’t know, I default to “they.” I’ll fix it.
i betyou dont care about my opinion, but i think youre right and sunshine is toxic af
You’re quite literally an antivegan debate troll, you’re the toxic one.
I’m not antivegan
Your history suggests otherwise.
no it doesn’t. I have never said anyone shouldn’t be vegan, or that being vegan is wrong.
It sounds hysterical because it is hysterical.
Pot, meet kettle
No no, when Hamid does drama they’re fine. A righteous cause that needs no evidence to back up claims.
When someone asks too many questions, they must be banned by Hamid.
No doublethink here!
