this post was submitted on 22 Jul 2026
211 points (96.9% liked)

Fediverse

43154 readers
2476 users here now

A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, Mbin, etc).

If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!

Rules

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)

founded 3 years ago
MODERATORS
 

cross-posted from: https://lemmy.dbzer0.com/post/72685299

I discovered this after upgrading our instance yesterday, which also upgraded all frontends to their latest versions as well. After I did, our Tesseract frontend stopped working and I noticed immediately as it's been my primary for a while. Initially I thought it was an API version mismatch, but no, it was much worse.

Someone pointed out that the developer of the frontend added an explicit hidden and unmodifiably blacklist which includes any and all instances to the left of Kissinger. There's a commit which also explains their specious reasoning about our instance specifically, as it seems we've been on their shit list for a bit longer than that.

This instance and its admin staff encourages identity politics, groupthink, mob mentality, and extremist solutions to societal problems. Users who advocate violence are not moderated so long as the admins agree with the target. Caution and critical thinking are advised when interacting with this instance or its users.

When you use tesseract to connect to one blacklisted such instance , you just get a message informing you that Tesseract is "incompatible with that instance" which leads one to think of a technical issue, like an API mismatch, rather than the dev being an opinionated coward.

Isn't it funny how all the software developed by turbolibs, like Piefed and Tesseract, end up with hidden control mechanisms from developers who think they know better than everyone else? That they don't just think they deserve to tell you what you should think, but they should manipulate you to think it? Isn't it funny how libs go on about how bad it is to support lemmy due to the ideology of the devs behind it, and yet lemmy has 0 opinions as a software? It does make one think...

Anyway, I forked - it as one does - and disabled the blacklist, but since this is a massively ideologically compromised software, I'll doubt I'll keep this frontend up after Lemmy 1.0. I think we'll bring up mlmym again now that someone's maintaining it again.

all 38 comments
sorted by: hot top controversial new old
[–] QuentinCallaghan@sopuli.xyz 63 points 6 days ago* (last edited 6 days ago)

A frontend should be a frontend. The decisions of what to blacklist should be up to the frontend's user. Stupid decision on the developer's part.

[–] Zak@lemmy.world 45 points 6 days ago (1 children)

Opt-in denylists with pre-populated categories would be a reasonable feature. A frontend author trying to trick users into thinking there's a technical issue with servers the author doesn't like is presumptuous and disrespectful of the user.

People did similar stuff with Mastodon clients when the far-right microblog service Gab migrated its backend to a Mastodon fork and I didn't like that either.

[–] DarkSirrush@piefed.ca 11 points 6 days ago (1 children)

Piefed also did this shit, so annoying.

[–] Axolotl_cpp@feddit.it 1 points 5 days ago (1 children)

Really? I was thinking of switching to piefied (i was already skeptical because it's made with python) but now? Hell nah, i'il stay on lemmy or use mbin

[–] OpenStars@discuss.online 0 points 5 days ago

I am not saying that you should switch to use or even like PieFed, but afaik there is no feature that is "trying to trick users into thinking there's a technical issue with servers", or at least not one that Lemmy and Mbin do not identically share. I would be happy to read about one though if someone wants to point me to it?

e.g. just a few hours ago I recall reading a report where someone was confused why a post did not show up for them on PieFed but it did on Lemmy. The reason turned out to be that the user has been banned on PieFed.social. The key here is that the latter is an instance (a server machine) whereas PieFed is software.

Lemmy instances also ban people too btw. Some Lemmy instances are in fact quite (in)famous for this.

But that is not "trickery", that is simply PieFed (or Lemmy, or Mbin, whatever) working as designed, someone's lack of understanding notwithstanding, and likewise for people who want to cast aspersions onto their tribal "opponent".

All that said, PieFed does have a weird way of blocking all users on an instance. If the devs of Lemmy, PieFed, and Mbin could get together an agree on a protocol whereby a signal could be sent that all software platforms would understand and know how to handle... then such maneuvers would not be necessary. Instead, legacy software like Lemmy are not always going to be able to keep up with PieFed's rapid pace of development - e.g. PieFed offers numerous things that Lemmy simply has to shadow-block (with no report of having done so), including polls, user and post flairs, various special features of communities (e.g. automatic deletion of submitted images after a certain time period, usually one year), etc. To be clear this is not "nefarious" activity on behalf of the Lemmy devs, it's just that the software doesn't know how to handle such content, nor do the devs make it a priority to make it do so (why should they?)

And likewise, the ability of Lemmy uses to reply to PieFed users that have instance "blocked" them is one such source of friction between the two software offerings.

If you are thinking of creating a community, it matters far more what instance admins you choose to interact with than what software that instance is running. Especially as some (like quokka, and reportedly soon-ish sh.itjust.works) switch around, while others (like .zip and .world) offer literally both options (Lemmy & PieFed).

[–] audaxdreik@pawb.social 46 points 6 days ago (1 children)

Boo! Add pawb.social, furries deserve to be there, too! (complimentary)

[–] Alcoholicorn@mander.xyz 28 points 6 days ago* (last edited 5 days ago)

Honestly the fact that yall didn't make the cut seems insulting.

Edit: Congrats to @chosensilence@pawb.social!

[–] magnetosphere@fedia.io 32 points 6 days ago

Sleazy and dishonest, yet unsurprising. Thanks for letting people know!

[–] VitoRobles@lemmy.today 7 points 5 days ago (1 children)

For a list of the users this cucklefuck blacklisted, here it is.

https://copyparty.adrian.place/u/?doc=policy.json

Little snowflake couldn't even include me. What a bitch.

[–] TragicNotCute@lemmy.world 0 points 3 days ago

Please be respectful.

[–] luca@sironi.xyz 8 points 5 days ago

@Canyon201

I don't know the software and the instance, but keeping a blacklist in an open source software is beyond stupidity

[–] poVoq@slrpnk.net 16 points 6 days ago* (last edited 6 days ago) (1 children)

As long as Lemmy doesn't support password-less and revokable logins, no one should be using alternative web frontends hosted by someone other than their trusted server admin. And as this issue clearly shows, when an admin hosts it themselves the dev can't hide it and it is easy to circumvent.

[–] Axolotl_cpp@feddit.it 0 points 5 days ago (1 children)

the dev can't hide it and it is easy to circumvent.

That's if the Admin check the code of a famous and very used front end

[–] poVoq@slrpnk.net 0 points 5 days ago (1 children)

Well, in the case the OP referenced, it was impossible to miss, but I grant that the other dynamic blocklist that was found after I made the above comment is more difficult to notice as an admin.

That said, Tesseract was forked from Photon for very unclear reasons, and that alone was a big red flag from the start that made me personally stay away from it.

[–] OpenStars@discuss.online 0 points 5 days ago* (last edited 4 days ago)

There is a lot of misinformation about this issue.

  • ~~The (first) list is NOT hard-coded, but toggleable via the toxicity filter setting - this is the exact polar opposite of "hard-coding"?~~ (Edit: in retrospect it seems people were talking about the second list there, and the first one might legit be hard-coded.)
  • I am not sure about the second list, it definitely seems unmodifiable at least
  • the assertion that it bans all leftist instances seems (at best) specious when it also bans conservative and other instances, plus it does NOT ban some leftist ones

Tbf, Tesseract reporting the message that it is “incompatible with that instance" seems valid criticism, that should definitely have been handled MUCH better.

Whether the OOP might have been right or wrong remains highly unclear when ~~most~~ (edit: some) of their claims have ended up disproven, which just makes finding facts that much more difficult. That said, I do sympathize narrowly with the frustration they must have felt to have to have discovered the issue the way they did, with no announcement having been made.

Thank you for offering greater precision here in your own responses.

[–] EpeeGnome@feddit.online 12 points 6 days ago (2 children)

Wait, what hidden control mechanisms are baked into Piefed?

[–] Canyon201@lemmy.world 13 points 6 days ago

Every account on PieFed has a Social Credit Score, aka your Reputation. If your account has less than 100 reputation and is newly created, you are not considered “trustworthy” and there are limitations placed on what your account can do.