• 0 Posts
  • 9 Comments
Joined 1 year ago
cake
Cake day: June 16th, 2023

help-circle



  • What if I have multiple people in my household who want to vote? One vote per IP address would not allow for this. And as others have pointed out, sophisticated users can get around the IP restriction.

    I think putting up even small hurdles would drastically cut down on the bot problem. I outlined one idea here: https://sh.itjust.works/comment/455909

    It is basically go out and solve a CAPTCHA, then vote, pasting in a url with your vote that verifies you solved the CAPTCHA. A script should be able to verify that the url is indeed for the user who cast the vote. It is not a bulletproof method, but raises just enough of a hurdle that is would be hard for bots, but realitivly easy for humans (we’d want an audio version or other alternative for the visually impaired; I’m not sure what the state of the art is).

    Doesn’t solve the problem of one real person operating several alts. Frankly, I don’t know how important that is to solve.


  • I think OP raises a valid concern. In the near term, I don’t know what will be voted on that will be worth the effort of spinning up a bot army. But it could happen eventually. Large floods of votes might be easier to detect. Smaller bot armies could be harder, but still impactful to the outcome.

    Perhaps we could fire up some kind of identity service. A user goes there, puts in their username, solves a CAPTCHA, and gets back a url to a page that contains their username. The pages can be specific to a particular vote so urls aren’t reusable. Every time a user votes, they need to solve a new CAPTCHA. User will include their identity url when voting.

    Admins can confirm that user names and identity urls match.

    Could be more efficient ways to do it, this was my first thought.




  • Thank you, I see your point now. You are worried bad actors could simply join this instance.

    They could, but then they would fall under the guidelines and moderation of this instance. I’m not sure in practice how big of a worry this is.

    And bad actors can join without needing to come from a banned instance.

    This doesn’t change my view of defederation. (I won’t claim to know the correct use/threshold for defederation, this is all new to me! I’m mostly here to enjoy the discussions, not worry about what might go wrong.)


  • I don’t understand the point you are trying to make. On the one hand, you say:

    Defederating entire instances does not stop bad actors, but an active strongwilled community does.

    This makes me think you are saying not to defederate because it would be better to call out bad behavior - interact with the bad actors and point out their falsehoods, hate, etc. But on the other hand, you say:

    I don’t interact with them. I don’t provide them with any value.

    and

    It’s not our responsibility to moderate other instances.

    These make me think you are saying just ignore them. And if we’re going to just ignore them, how is that different from the perspective of the bad actors, from defederating? How does not moderating and not interacting stop bad actors?

    This is all new to me, I don’t know the best use of defederating, but I didn’t follow the argument you were making.