Asklemmy

43892 readers

1084 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

Open-ended question
Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
Not ad nauseam inducing: please make sure it is a question that would be new to most members
An actual topic of discussion

Looking for support?

Looking for a community?

Lemmyverse: community search
sub.rehab: maps old subreddits to fediverse options, marks official as such
!lemmy411@lemmy.ca: a community for finding communities

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 5 years ago

MODERATORS

Does the fediverse have defense against watering hole attacks? (en.wikipedia.org)

submitted 7 months ago by dislocate_expansion@reddthat.com to c/asklemmy@lemmy.ml

11 comments fedilink hide all child comments

With so many variations of Lemmy and fediverse instances, are there any defenses against a malicious server running altered code? Is there a way to prove what code is supposed to be running on each instance?

you are viewing a single comment's thread
view the rest of the comments

[–] xilliah@beehaw.org 1 points 7 months ago (1 children)

You mean for users of that instance or for other instances?

[–] dislocate_expansion@reddthat.com 2 points 6 months ago (1 children)

Either or. Would be more nefarious to have users sign up for a malicious instance unknowingly and then federate with non malicious instances

[–] xilliah@beehaw.org 1 points 6 months ago (1 children)

Something to consider would be to compare this to the walled gardens, say Facebook. Is that a malicious 'instance'?

And then what is the chance to register on a malicious one in the fediverse?

[–] dislocate_expansion@reddthat.com 1 points 6 months ago (1 children)

I think the chances are high since the domains are supposed to be novel, compared to Facebook which is a worldwide known domain and chances of impersonating it are slim or would require a client side hack