I noticed that my server import the bans from other instances. I think it’s a great feature at the moment where there is no complains of anyone creating servers to abuse it, but I feel like it’s bound to happen if there is no safety for it.
If we want to keep it easy for creating servers, maybe they should have a trust level, that could be set either manually or with some heuristics. I like the idea of some heuristics with the option for the admins to take some manual action.
(dunno if it’s the right place to discuss that, is there some more appropriate community to ask things about lemmy itself, since this one is specific to lemmy.world?)
If someone was abusing it they’d rapidly get defederated.
But that’s a manual process. It would be nice to monitor the federation status of all servers and slap an algorithm like K-Means on that to find clusters and outliers.
You could then decide which ones to autonatically federate/defederate based on that data.
I’m going to look into that, maybe I can write the part that gathers the data.
Anything that makes Lemmy’s “immune response” quicker has to be a plus.
It’s a manual action, that must be taken for all instances AFAIK. An attacking software could pretend to be thousands of new instances, and a DDOS attack against lemmy is something that already happened in the past.