Lemmy.world is temporarily disabling open signups and moving to an application-required signup process, due to ongoing issues with malicious bot accounts.

We know this is a major step to take, but we believe that it’s the right one for both us and our community right now.

We’re working on a better long-term technical solution to these bots, but that will take time to create, test, and verify that it doesn’t cause any problems with federation and how our users use our site, and we’d rather make sure we get it right than have a site that’s broken.

We’re making this change on 28 Aug 2023, and don’t have a specific timeline for how long registrations will require an application, but we will post an update once our new anti-abuse measures are in place and working.

Take care, LW Team

    • Whitehat Hacker@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      10 months ago

      Wait I noticed that there’s an image button in the application form, is there any risk that that might be abused by users passing by to upload to pictrs in registrations without an account? That could be a big problem if they could.

      • LCP@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        10 months ago

        Tested it in an incognito tab. It seems to be disabled. Clicking the button does nothing for me.

        • Whitehat Hacker@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          10 months ago

          That’s good then, was worried for a sec that people could upload images without having an account, that would be very bad and make these kind of attacks insanely easy.