Why does most of the spam I see come from kbin accounts?

Whenever I see a run of spam posts on the fediverse, I’ve taken to looking at the usernames behind them. Nine times out of ten, they turn out to be from kbin instances. Here’s a recent example:

kbin.social/u/valige

As I write this, that account shows 8 identical scam posts made within 7 minutes of each other, and nothing else. (I imagine they might be removed by the time you read this.) This is pretty common in my experience. These particular posts are all to kbin magazines, not lemmy communities, but I don’t remember whether that’s always the case.

Since the main kbin instance is not the only one broadcasting this stuff, I wonder if there’s something about the kbin software that makes it attractive to spammers. Does anyone know?

Edit: Some examples that are still cached on my instance:

lemmy.ca/u/valige@kbin.social
lemmy.ca/u/NITIN-Hardiya279@kbin.social
lemmy.ca/u/ishadeshpande@kbin.social
lemmy.ca/u/varshareddy21@kbin.melroy.org
lemmy.ca/u/Satish-Kumar843@kbin.social
lemmy.ca/u/sareena@kbin.social
lemmy.ca/u/SidAvasthi@kbin.social

Pamasich, (edited )
@Pamasich@kbin.social avatar

kbin.social's admin (and kbin currently only supports one admin per instance) is also the main dev.

As I understand it, the sudden unexpected popularity of kbin caused infrastructure issues and made fixing bugs and limitations more important, while he still has to reach his feature goals to secure funding so he can actually continue working on kbin full-time. Additionally, real life had a lot of negative surprises in store he had to deal with.

All in all, he hasn't had much time at all to properly moderate the instance, And the past two weeks he's been gone entirely for real life reasons, leaving the instance unmoderated.

It's not an issue with the software itself, just with kbin.social (and of course other badly moderated instances) specifically.

ono,

just with kbin.social (and of course other badly moderated instances) specifically.

Yes, there’s clearly a moderation problem, but it’s not just kbin.social.

To rephrase the question: why is it that practically all the insufficiently moderated sites are kbin instances?

kbin currently only supports one admin per instance

An overwhelmed admin could partially explain why a lot of spam comes from a particular instance. But it wouldn’t explain why most of the small instances generating spam have chosen kbin instead of lemmy.

example,

that’s not entirely accurate.

the main problem for non-kbin users, as @ono is using lemmy, is that kbin moderation actions, such as a moderator or admin removing spam will not federate to lemmy, as this is not implemented yet.
for a lemmy user, it appears that kbin doesn’t have any moderation at all, while spam is being removed for kbin(.social) users at least.

for this reason, several lemmy instances have already either defederated from kbin or removed kbin communities from their instance.

Fiivemacs,

Totally were removed. I reported every single one of them then blocked them.

Was that the same douche that attempted the amazon gift card trash on infosec?

ono,

Yes, it was. I’ve added a link to my local instance’s copy, for reference.

macallik,

This post on why lemmy.world temporarily adjusted federation abilities w/ kbin has a bit more insight, especially in the comments:
https://old.lemmy.world/post/5289864

SharkAttak,
@SharkAttak@kbin.social avatar

It's also probably cause spammers don't get (or care) federation at all. So in their mind gotta spam on kbin-->account on kbin.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • fediverse@kbin.social
  • meta
  • Macbeth
  • All magazines
    •