hello ,
@hello@social.wedistribute.org avatar

, one of the biggest federated Reddit alternatives, is up against a surprising problem: users and admins can't delete images.

Here's why that matters.

https://wedistribute.org/2024/03/lemmy-image-problem/

MurmeltHier ,
@MurmeltHier@climatejustice.social avatar

@hello

Yikes!

marlinspike ,
@marlinspike@mastodon.social avatar

@hello Thanks for this. I'm working on an app that uses the Lemmy API, and I couldn't figure out for the life of me a workable way to delete images. I figured I'd eventually circle back to that functionality later.

MichaelAltfield ,
@MichaelAltfield@mastodon.social avatar

@marlinspike @hello

I recently learned that Boost does this. You have to record the delete_token at the time the image was uploaded, as described here:

https://github.com/LemmyNet/lemmy/issues/4441#issue-2126251086

Note you have to use GET, not DELETE for the actual pictrs/image/delete/X API call

marlinspike ,
@marlinspike@mastodon.social avatar

@MichaelAltfield @hello Right. That would work if the user wants to delete the image immediately. But what if the user wants to delete an older image? I was just hoping there was an alternative that I was missing.

MichaelAltfield ,
@MichaelAltfield@mastodon.social avatar

@marlinspike @hello

The delete token doesn't change. So you have to store the delete_token at upload-time and keep them locally for every image that's been uploaded.

marlinspike ,
@marlinspike@mastodon.social avatar

@MichaelAltfield @hello Haha, yeah, I had a sentence in my last reply stating that I don't like the idea of storing a small database of tokens and image links on the user's device, but I deleted it for brevity. Seems that's the only alternative right now.

MichaelAltfield ,
@MichaelAltfield@mastodon.social avatar

@marlinspike @hello I'm just assuming. If I were you, I'd shoot a message to the Boost app's dev and ask how they do it.

berniethewordsmith ,
@berniethewordsmith@masto.es avatar

@MichaelAltfield @marlinspike @hello Mi head is spinning about the fact that this is a thing. This could win the best picture award In the Oversight Oscars

deadsuperhero ,
@deadsuperhero@social.wedistribute.org avatar

@berniethewordsmith @MichaelAltfield @marlinspike @hello aww, now I want to see the movie version!

Paging @flounderpictures!

berniethewordsmith ,
@berniethewordsmith@masto.es avatar

@deadsuperhero @flounderpictures @MichaelAltfield @marlinspike @hello Wait wait I just read the full answer from the admins and boy is this WILD. Knowing the fediverse people on GitHub, I think Lemmy's devs may start to experience some "though love" in the tickets

berniethewordsmith ,
@berniethewordsmith@masto.es avatar

@deadsuperhero @flounderpictures @MichaelAltfield @marlinspike @hello Also, to add horror to the cake, this quote from @itsjusta:

"Kiwifarms is on the Fediverse. They have actively been responsible for harassment on the Fediverse before, and the impact that they have on Fediverse development is noticeable. If there is an exploit to abuse and harass someone in a platform they WILL find it and use it."

https://jewy.blog/2024/03/04/my-love-hate-relationship-with-lemmy/

😱😱😱😱

deadsuperhero ,
@deadsuperhero@social.wedistribute.org avatar

@berniethewordsmith Really good read. Yeah, it's a profoundly bad situation, and I don't think the project is likely to survive long-term with the way things are being run.

It just blows me away that someone points out privacy issues, difficulty deleting anything, and a whole can of worms for Trust & Safety, and the devs just act like absolute dickheads in their responses.

Like gee, I dunno, these problems will affect your users' abilities from running instances long term!

berniethewordsmith ,
@berniethewordsmith@masto.es avatar

@deadsuperhero We just saw Bridgy's repo almost set on fire because a very particular feature can you imagine in this case

deadsuperhero ,
@deadsuperhero@social.wedistribute.org avatar

@berniethewordsmith as much as I hold a negative bias towards the developers, in terms of their attitude, I don't wish harassment towards anybody. I do want to see people engage and ask for accountability, and I do want to see those devs actually take this aspect seriously.

But, if nothing changes: I'd rather just see Sublinks get polished off as a drop-in replacement, and everyone just ends up switching to that. Or new instances at least choosing literally any other project in the space.

mousebot ,
@mousebot@todon.nl avatar

@deadsuperhero @berniethewordsmith @MichaelAltfield i took at look at the gh discussions. despite the sitch being v dire, i thought at least the devs were responsive to the need to make it work, and easily for end users.

but yeah, it's v bad. what were they smoking.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • kamenrider
  • Rutgers
  • steinbach
  • Lexington
  • cragsand
  • mead
  • RetroGamingNetwork
  • mauerstrassenwetten
  • loren
  • xyz
  • PowerRangers
  • AnarchoCapitalism
  • WatchParties
  • itdept
  • Mordhau
  • neondivide
  • space_engine
  • AgeRegression
  • WarhammerFantasy
  • Teensy
  • learnviet
  • bjj
  • khanate
  • electropalaeography
  • MidnightClan
  • jeremy
  • supersentai
  • fandic
  • All magazines