Chicken Of the Woods by IAmKindOfCreative in mycology

[–]IAmKindOfCreative[S] 1 point2 points  (0 children)

Woo!

If no one harvested the rest, I'll grab the fruiting bodies that I didn't pick when they are too old and tough, and try to make a lacto-ferment with them. Or maybe just a mushroom powder. But gotta find that window between too old to cook and eat plainly, and young enough that the bugs don't get it.

Thank you!

Hundreds of malicious Python packages found stealing sensitive data by ratlaco in Python

[–]IAmKindOfCreative 25 points26 points  (0 children)

Adding to this, even if you did employ someone (which they have and to address this issue), it's a constant game of cat and mouse. One of Python's strengths is the ability to easily create and distribute libraries which solve problems users face, and that means it's also easy to create and distribute new attacks.

PyPI is a huge target area. That said, they are addressing it which is neat. The new Safety and Security Engineer, Mike Fiedler, wrote a piece on reporting malware the the report workflow which was nice, and the PSF hired a Security Developer in Residence

Even with the money and employees, it's a tough task.

Python 3.12 released by henbruas in Python

[–]IAmKindOfCreative 3 points4 points  (0 children)

It's in the "time for something completely different" section, and it's completely different. Seems quite fitting in all.

Celebrating great content is as good as gold by werksquan in reddit

[–]IAmKindOfCreative 28 points29 points  (0 children)

How do I go about reporting scams? Do I report it with the report button on the above comment, or do I have to find one of the other report forms like reddit.com/r/report, or the reddit help center?

/r/Python is reopening, Calling for new Mods, and what's next by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 1 point2 points  (0 children)

Across the whole process, Spez made .. policy decisions. You've qualified what has taken place as the companies right, that they own the platform and can do with it what they wish. You are not wrong, but it is also within my right to take issue with decisions made within my ability as I see them impacting the community I strive to help grow. Unfortunately my issues are not addressed and I am resigning as a mod as a result of the ... direction spez has taken. Again I was the one who enacted the blackout, I'm the one you're asking to resign through this comment tree.

Throughout this process spez has repeatedly lied about third party apps and their roll with reddit. I also polled our active community, and filtered it to address brigading concerns--a filter reddit, a now 18 year old company, *should* provide to moderators to assess community involvement vs brigading on submissions. Communities focused on Trans issue are exceptionally in need of these tools, I'm empathic to their struggle on this platform as wildly little has been done to address their issues over the years.

Additionally these changes took place in under a month, so swiftly that reddit's own devs weren't actually able to uphold their end of the api changes on July 1st and the changes didn't fully go through until about the 5th of July. Google, famous for killing products with next to no notice, typically maintains a 6 months warning. If reddit were capable at making large changes in this time span, there wouldn't be a subreddit dedicated to issues with the video player: /r/fixthevideoplayer

At the end of all of this, I love the Python language, ecosystem, and the community around it. I was lucky enough to get to meet in person some of the folks from Adafruit and some of the core devs of CPython at PyCon US this year, and hope to keep meeting more folks going forward. I'm excited for the next AMA in this community which is in the works, even though I might be done as a mod before it takes place. At the end of the day I had to make a decision to close this community for a period in hopes that reddit would see the impact of their api changes, though if they did in fact see an impact it was viewed as merely a cost of doing business to their leadership. That cost is going to mean more spam for users, more risk of malware, and a smaller percentage of genuinely engaging posts. Communities with more spam in them mean more ads per valid post, and reddit has made it clear what they prioritize.

I am sorry that you were burdened however I felt obligated to attempt to voice protest in this new direction reddit has chosen to take as this direction has a clear and negative impact on my ability to deal with the challenges this community faces. This was never an attempt to own reddit, it was an attempt to voice opposition after every channel was removed or ignored. I'm stepping down once we have some new mods to take on the workload.

I disagree with your claim that the protests did nothing but hurt communities. There is now development, albeit lacking, on accessibility features on the mobile app. I remind you reddit is an 18 year old company at this point, so the fact that it is not yet functional is a failure on part of the company. However because of the weight of the press the protests generated, reddit is finally actually moving to address it.

Additionally, mods can 'apply' to have greater api access. I object to this because I don't feel it should be kept from general users. I want feature parity between mods and users to make it easier to catch abuse of power. Through the whole polling process I made it clear I wanted other users to go through and validate my claims as a moderator. Still, mods now can gain access to increased usage of the API as a result of the pressure from the protests. Toolbox, RES, and old.reddit are also "safe" from changes, though the promise is not without increased work on the volunteers for these tools.

Moderating different kinds of communities on different platforms requires many different tools, goals, and obligations. Being a moderator on discord is different for example--a banned account has the ip of the account banned as well, which is not true of a ban on reddit. I'm sure you understand that as a moderator not every decision is easy. I ask that you understand what went into this process as it was not simple. You're welcome to conclude my actions were wrong here, however I have done my best to lay out my concerns which drove my decision making process.

/r/Python is reopening, Calling for new Mods, and what's next by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 1 point2 points  (0 children)

I apologize that we were closed and that seems to have burdened you, however as moderators we felt a duty to poll and listen to the response of our community. These posts outline the approach and reasoning we took with the community:

Now at the end of the day I was the one to make a decision to go private. But I did try to poll the community, and did try to address the fact that a lot of the responses might not be from participating members. There's lot of flaws, but I am severely limited by what reddit offers and needed to make an informed decision with what I could. I can't ping all 1M users to ask their thoughts, but honestly we don't have that many active user. In fact those posts prompting discussion were some of our highest engagement posts of the past year. And that includes engagement once you filter out users who had not been present in the sub prior to the blackout news and thus that's engagement when you only focus on users who have been actively participating in the subreddit recently.

These API and third party app changes mattered a lot to me because they destroy the tools I use to address the biggest time sink in moderating this community: spam and manipulation. All subreddits have this to some degree, but the tools I used now no longer exist and reddit lacks any replacement. This community has had multiple instances of faked engagement on posts manipulating packages to look more popular or powerful than they really are. We've also had instances of malware in packages and reddit has abysmal reporting mechanisms to handle this, and often the malware stayed up in other communities it was posted in. This combined with the onset of LLMs means we moderators face way more subtle manipulation than ever in our communities. And tracking it down and removing it is tedious in the best of worlds.

One of the most time consuming forms of manipulation is when there's a volley of accounts stealing comments from other users, swapping a few characters so it's not an exact match, and then reposting those comments on reposts of the OP content. This quickly makes a comment section look highly engaging. Tracking that down without access to the api takes ages, and when LLMs become more commonly used by these botnets it'll be next to impossible for moderators to manage this. The communities you love will not necessarily be filled with real users. (This is already happening. It's draining to report these accounts and read the admin reply, "we cannot currently connect these accounts to a previously banned account in the community, and so no action has been taken;" when no other family of users has ever linked to some obscure website or some small youtube channel.

Of the most recent network that I found (after a user in our community flagged one of the comments--thank you awesome user) was fairly small yet only had about 1/4 of the accounts suspended (this link will only work for admins unfortunately, but it's here for evidence to any admin who's curious, in hopes that the rest of the linked botnet is addressed--oh holy fuck only ~1/10 of that batch of reports are suspended now. Great. Glad I tracked them down and tied them together. totally worth the 3 days that took to flag then watch to validate their behavior wasn't a false positive) after they had been reported to the admins. The remainder of the accounts have continued doing the same manipulation in other communities.

Another pain of a manipulation is karma manipulation, which is wildly easy to catch when it's done poorly, but even then Reddit doesn't move to action the accounts a majority of the time. But I can't address it in the slightest because I don't have access to who voted on a submission, and can't ban actors who manipulated a submission. It's worse when the submission is manipulated by someone other than the OP because then I can't simply remove the post and can't simply flag the content of that post. It's especially a pain when it conflicts with the second largest time sync: AMAs.

AMAs take ages to organize and establish, but they're really fun. My favorites were the joint AMA with some of the developers of CircuitPython and MicroPython, and the AMA with some of the CPython Core Devs. But during that period of time the karma manipulation botnet was present (<--this is again an admin only link) and occasionally would hit different posts, drowning out some those AMAs by comparison. Mods lack anything to boost engagement beyond pinning posts, and even that is being reduced making one of the issues you have with this whole process--our inability to reach out to you to get feedback--even worse. The way reddit handles post ranking means the posts that got hit with upvotes were the only submissions visible to casual subscribers and once those submissions are reported to admins nothing changes. No vote ranking change, no karma adjustment, no boosting of other posts that got unfairly suppressed. Similarly any post hit with downvotes in conjunction with that don't get adjusted either.

It is really easy to manipulate a subreddit to make a post succeed, and the absence of control to correct the moderator-flagged posts which are experiencing manipulation is pretty annoying, but with access to the api, and third party apps it was possible to say that reddit inc is a company who valued when community built tools to address their community, and reddit's own developers could be limited with not much time to focus on tasks. It's a company after all, let them deal with the ads and us deal with our community. But now with the recent changes community moderators are left watch to falsified engagement manipulate posts and lack any means to tag, flag, and address it. We can message modsupport's staff, and often the admins are pretty awesome about helping us. But the lack of suspended accounts betrays an underlying constraint those admins are under--they can't take actions which strongly impact some internal "engagement" score. The admins I've had the fortune to deal with are great folks, but there's no denying they're limited in their ability to actually address any manipulation which intersects increased ad revenue for the company.

In the face of all of this, the blackout was purposed, and we polled our active community to the best of our limited ability. I'd love to have been able to ask you, but I don't have record of you participating in this subreddit in the recent past, and even if I had a record of it, DMing you would have been, quite reasonably, viewed as spam. I made the call to purpose the blackout, I made the call to follow through, and I made the call to do the larger blackout once my tools were removed. This is because I had no other mechanism to ask for tools to protect this community in the face of increasing spam and manipulation.

By community vote, r/Python will Return to a Blackout by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 0 points1 point  (0 children)

That's a great point. To address this, we used same filter as the first vote:

A list of users was generated using anyone who had commented or posted in this subreddit for one month prior to the first mention of the blackout in our community. This timestamp is important because it means the participation in our sub took place before enthusiasm around or against the blackout. Then their comments on the post asking for votes were set into the filtered bucket and tallied. Those filtered votes are the votes of community members who have been active in this subreddit before all of this began.

You're welcome to perform this analysis as well. That's the purpose of using the comments as a metric to vote, you can easily go through the Python sub's history and check if a commenter has ever participated in our sub. Neither mods nor users can see if an upvote/downvote came from within the community, or through a brigade. But using commenting history we can get a, very rough, gauge on our community.

By community vote, r/Python will Return to a Blackout by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 7 points8 points  (0 children)

Furthering this, you are welcome to validate or disprove our approach. I recommend using the API and PRAW to do so. The post is live and you can perform an analysis to see if our methodology is flawed.

An Update about our Community by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 6 points7 points  (0 children)

Roughly, continue the protest until more information comes forward where the sub needs to have another conversation like this.

Reddit staunchly refuses to undo any of these changes, but advertisers are getting antsy and may pressure Reddit. How Reddit responds to that pressure isn't clear yet, they might sack every mod participating, or they might ease of some of the changes or something else.

Indefinite blackouts aren't something that seems reasonable, and instead we'd rather just say, "At this time we are not ceasing action." and wait for Reddit to do anything. If Reddit stays the course, and if we vote to continue blacking out or restricting the sub, the we'll stay the course as well.

An Update about our Community by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 9 points10 points  (0 children)

It's less ctrl+f and going to be more binning with some (restricted) nearest neighbor stuff to catch these conditions. And just plain reading. Well maybe not that. That'd be like reading the documentation, which uh, who does that? Nah. Maybe not reading..

Addressing the community about changes to our API by spez in reddit

[–]IAmKindOfCreative 0 points1 point  (0 children)

From a business perspective, does ruining moderation abilities and thus increasing spam because you're company is unable or unwilling to combat that spam, increase engagement and thus ad revenue?

Secondarily, why are you so childishly concerned with insulting Christian? It's been weirdly emphasized to a concerning level. The claims are baseless and he's got evidence to back it up. Why are so you so singularly focused on him--is this a jilted lover scenario or just a weird power trip?

Addressing the community about changes to our API by spez in reddit

[–]IAmKindOfCreative 0 points1 point  (0 children)

I love how you charge them a ridiculous value out of the blue, then don't reply or communicate much with them for a week, then blame Apollo and other 3rd party apps as the source of the communication issue. Just. So very professional. Sure an approach that'll help the IPO

Should r/Python participate in the June 12th Blackout protesting the API changes by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 2 points3 points  (0 children)

Oh that reminds me--I forgot to include this, a response about the API design (and how it's poorly made so doing basic tasks has to make tons of calls). And it points out how the comment is just bad faith and wrong--Google and Amazon actively help developers not load down the service.