this post was submitted on 19 Sep 2023
72 points (88.3% liked)
Lemmy
12535 readers
1 users here now
Everything about Lemmy; bugs, gripes, praises, and advocacy.
For discussion about the lemmy.ml instance, go to [email protected].
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Set up CloudFlare’s CSAM scanning tool. It’s completely free. It’s not on lemmy devs to secure your instance. Lemmy devs could add better admin and moderating tools, but it’s better to stop it before it even makes it to your server.
Imo, lemmy shouldn't allow image uploads at all. All images should be hosted elsewhere on services that can handle scanning content. This would also drastically cut down on hosting costs for lemmy instances.
If lemmy is to host images, it should merely be as a backup. But since lemmy content isn't easy to search as is anyway, that's not a short term concern. And those images should be archived via mod action imo, not user action.
can't you already run Lemmy without image hosting if you just disable the pictrs service?
there's also a new config option to disable caching of remote images
I'm not exactly sure how Lemmy works here, but are pictrs images considered "remote," or are they copied between instances? AFAIK, each instance has its own pictrs service, but I'm not sure if that's sent along with the post content when federating messages.
But if lemmy can interact with other instances without storing any non-text data, then perhaps the problem is solved.
Is there an option to delete a single image from your lemmy instance?
Not sure what you’re asking. It depends on your location, but in the USA you should not delete the image. You need to report it, then remove it from visibility of the public, then wait for the NCMEC to get back to you.