this post was submitted on 10 Jul 2023
419 points (98.6% liked)
Programming.dev Meta
2489 readers
1 users here now
Welcome to the Programming.Dev meta community!
This is a community for discussing things about programming.dev itself. Things like announcements, site help posts, site questions, etc. are all welcome here.
Links
Credits
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Alright, so what do they plan to do? Compromise Lemmy, sure. Then what? What do they gain? Propaganda?
Basically pull data on various accounts (IP address, activity history, etc), people, and trends. They could promote given posts or suppress posts or hide things from moderators. They could distribute whatever malware they might like, target specific accounts that way....
The possibilities are many.
Even so, it just seems like a lot of work and risk for something that would not be necessary to achieve those or similar goals. Besides, if word gets out that the software is compromised, then people will just stop using it. The much better/easier solution would be run scams, vote manipulation, etc as it doesn't kill your platform that you would then be using to push a goal or agenda.
The name of the game is to not be noticed. You have a bad user or instance, they get banned and make a new one. Compromising the whole thing though? That's one and done, especially where the Lemmy croud is a lot more tech oriented than most other platforms.
My point being that why compromise Lemmy for a short while then have it die vs playing the long game and have an ever increasing user base to scam, steal from or manipulate? It just doesn't make sense when you think about it.