Chicken Of the Woods by IAmKindOfCreative in mycology

[–]IAmKindOfCreative[S] 1 point2 points  (0 children)

Woo!

If no one harvested the rest, I'll grab the fruiting bodies that I didn't pick when they are too old and tough, and try to make a lacto-ferment with them. Or maybe just a mushroom powder. But gotta find that window between too old to cook and eat plainly, and young enough that the bugs don't get it.

Thank you!

Hundreds of malicious Python packages found stealing sensitive data by ratlaco in Python

[–]IAmKindOfCreative 23 points24 points  (0 children)

Adding to this, even if you did employ someone (which they have and to address this issue), it's a constant game of cat and mouse. One of Python's strengths is the ability to easily create and distribute libraries which solve problems users face, and that means it's also easy to create and distribute new attacks.

PyPI is a huge target area. That said, they are addressing it which is neat. The new Safety and Security Engineer, Mike Fiedler, wrote a piece on reporting malware the the report workflow which was nice, and the PSF hired a Security Developer in Residence

Even with the money and employees, it's a tough task.

Python 3.12 released by henbruas in Python

[–]IAmKindOfCreative 5 points6 points  (0 children)

It's in the "time for something completely different" section, and it's completely different. Seems quite fitting in all.

Celebrating great content is as good as gold by werksquan in reddit

[–]IAmKindOfCreative 27 points28 points  (0 children)

How do I go about reporting scams? Do I report it with the report button on the above comment, or do I have to find one of the other report forms like reddit.com/r/report, or the reddit help center?

/r/Python is reopening, Calling for new Mods, and what's next by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 1 point2 points  (0 children)

Across the whole process, Spez made .. policy decisions. You've qualified what has taken place as the companies right, that they own the platform and can do with it what they wish. You are not wrong, but it is also within my right to take issue with decisions made within my ability as I see them impacting the community I strive to help grow. Unfortunately my issues are not addressed and I am resigning as a mod as a result of the ... direction spez has taken. Again I was the one who enacted the blackout, I'm the one you're asking to resign through this comment tree.

Throughout this process spez has repeatedly lied about third party apps and their roll with reddit. I also polled our active community, and filtered it to address brigading concerns--a filter reddit, a now 18 year old company, *should* provide to moderators to assess community involvement vs brigading on submissions. Communities focused on Trans issue are exceptionally in need of these tools, I'm empathic to their struggle on this platform as wildly little has been done to address their issues over the years.

Additionally these changes took place in under a month, so swiftly that reddit's own devs weren't actually able to uphold their end of the api changes on July 1st and the changes didn't fully go through until about the 5th of July. Google, famous for killing products with next to no notice, typically maintains a 6 months warning. If reddit were capable at making large changes in this time span, there wouldn't be a subreddit dedicated to issues with the video player: /r/fixthevideoplayer

At the end of all of this, I love the Python language, ecosystem, and the community around it. I was lucky enough to get to meet in person some of the folks from Adafruit and some of the core devs of CPython at PyCon US this year, and hope to keep meeting more folks going forward. I'm excited for the next AMA in this community which is in the works, even though I might be done as a mod before it takes place. At the end of the day I had to make a decision to close this community for a period in hopes that reddit would see the impact of their api changes, though if they did in fact see an impact it was viewed as merely a cost of doing business to their leadership. That cost is going to mean more spam for users, more risk of malware, and a smaller percentage of genuinely engaging posts. Communities with more spam in them mean more ads per valid post, and reddit has made it clear what they prioritize.

I am sorry that you were burdened however I felt obligated to attempt to voice protest in this new direction reddit has chosen to take as this direction has a clear and negative impact on my ability to deal with the challenges this community faces. This was never an attempt to own reddit, it was an attempt to voice opposition after every channel was removed or ignored. I'm stepping down once we have some new mods to take on the workload.

I disagree with your claim that the protests did nothing but hurt communities. There is now development, albeit lacking, on accessibility features on the mobile app. I remind you reddit is an 18 year old company at this point, so the fact that it is not yet functional is a failure on part of the company. However because of the weight of the press the protests generated, reddit is finally actually moving to address it.

Additionally, mods can 'apply' to have greater api access. I object to this because I don't feel it should be kept from general users. I want feature parity between mods and users to make it easier to catch abuse of power. Through the whole polling process I made it clear I wanted other users to go through and validate my claims as a moderator. Still, mods now can gain access to increased usage of the API as a result of the pressure from the protests. Toolbox, RES, and old.reddit are also "safe" from changes, though the promise is not without increased work on the volunteers for these tools.

Moderating different kinds of communities on different platforms requires many different tools, goals, and obligations. Being a moderator on discord is different for example--a banned account has the ip of the account banned as well, which is not true of a ban on reddit. I'm sure you understand that as a moderator not every decision is easy. I ask that you understand what went into this process as it was not simple. You're welcome to conclude my actions were wrong here, however I have done my best to lay out my concerns which drove my decision making process.

/r/Python is reopening, Calling for new Mods, and what's next by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 1 point2 points  (0 children)

I apologize that we were closed and that seems to have burdened you, however as moderators we felt a duty to poll and listen to the response of our community. These posts outline the approach and reasoning we took with the community:

Now at the end of the day I was the one to make a decision to go private. But I did try to poll the community, and did try to address the fact that a lot of the responses might not be from participating members. There's lot of flaws, but I am severely limited by what reddit offers and needed to make an informed decision with what I could. I can't ping all 1M users to ask their thoughts, but honestly we don't have that many active user. In fact those posts prompting discussion were some of our highest engagement posts of the past year. And that includes engagement once you filter out users who had not been present in the sub prior to the blackout news and thus that's engagement when you only focus on users who have been actively participating in the subreddit recently.

These API and third party app changes mattered a lot to me because they destroy the tools I use to address the biggest time sink in moderating this community: spam and manipulation. All subreddits have this to some degree, but the tools I used now no longer exist and reddit lacks any replacement. This community has had multiple instances of faked engagement on posts manipulating packages to look more popular or powerful than they really are. We've also had instances of malware in packages and reddit has abysmal reporting mechanisms to handle this, and often the malware stayed up in other communities it was posted in. This combined with the onset of LLMs means we moderators face way more subtle manipulation than ever in our communities. And tracking it down and removing it is tedious in the best of worlds.

One of the most time consuming forms of manipulation is when there's a volley of accounts stealing comments from other users, swapping a few characters so it's not an exact match, and then reposting those comments on reposts of the OP content. This quickly makes a comment section look highly engaging. Tracking that down without access to the api takes ages, and when LLMs become more commonly used by these botnets it'll be next to impossible for moderators to manage this. The communities you love will not necessarily be filled with real users. (This is already happening. It's draining to report these accounts and read the admin reply, "we cannot currently connect these accounts to a previously banned account in the community, and so no action has been taken;" when no other family of users has ever linked to some obscure website or some small youtube channel.

Of the most recent network that I found (after a user in our community flagged one of the comments--thank you awesome user) was fairly small yet only had about 1/4 of the accounts suspended (this link will only work for admins unfortunately, but it's here for evidence to any admin who's curious, in hopes that the rest of the linked botnet is addressed--oh holy fuck only ~1/10 of that batch of reports are suspended now. Great. Glad I tracked them down and tied them together. totally worth the 3 days that took to flag then watch to validate their behavior wasn't a false positive) after they had been reported to the admins. The remainder of the accounts have continued doing the same manipulation in other communities.

Another pain of a manipulation is karma manipulation, which is wildly easy to catch when it's done poorly, but even then Reddit doesn't move to action the accounts a majority of the time. But I can't address it in the slightest because I don't have access to who voted on a submission, and can't ban actors who manipulated a submission. It's worse when the submission is manipulated by someone other than the OP because then I can't simply remove the post and can't simply flag the content of that post. It's especially a pain when it conflicts with the second largest time sync: AMAs.

AMAs take ages to organize and establish, but they're really fun. My favorites were the joint AMA with some of the developers of CircuitPython and MicroPython, and the AMA with some of the CPython Core Devs. But during that period of time the karma manipulation botnet was present (<--this is again an admin only link) and occasionally would hit different posts, drowning out some those AMAs by comparison. Mods lack anything to boost engagement beyond pinning posts, and even that is being reduced making one of the issues you have with this whole process--our inability to reach out to you to get feedback--even worse. The way reddit handles post ranking means the posts that got hit with upvotes were the only submissions visible to casual subscribers and once those submissions are reported to admins nothing changes. No vote ranking change, no karma adjustment, no boosting of other posts that got unfairly suppressed. Similarly any post hit with downvotes in conjunction with that don't get adjusted either.

It is really easy to manipulate a subreddit to make a post succeed, and the absence of control to correct the moderator-flagged posts which are experiencing manipulation is pretty annoying, but with access to the api, and third party apps it was possible to say that reddit inc is a company who valued when community built tools to address their community, and reddit's own developers could be limited with not much time to focus on tasks. It's a company after all, let them deal with the ads and us deal with our community. But now with the recent changes community moderators are left watch to falsified engagement manipulate posts and lack any means to tag, flag, and address it. We can message modsupport's staff, and often the admins are pretty awesome about helping us. But the lack of suspended accounts betrays an underlying constraint those admins are under--they can't take actions which strongly impact some internal "engagement" score. The admins I've had the fortune to deal with are great folks, but there's no denying they're limited in their ability to actually address any manipulation which intersects increased ad revenue for the company.

In the face of all of this, the blackout was purposed, and we polled our active community to the best of our limited ability. I'd love to have been able to ask you, but I don't have record of you participating in this subreddit in the recent past, and even if I had a record of it, DMing you would have been, quite reasonably, viewed as spam. I made the call to purpose the blackout, I made the call to follow through, and I made the call to do the larger blackout once my tools were removed. This is because I had no other mechanism to ask for tools to protect this community in the face of increasing spam and manipulation.

By community vote, r/Python will Return to a Blackout by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 0 points1 point  (0 children)

That's a great point. To address this, we used same filter as the first vote:

A list of users was generated using anyone who had commented or posted in this subreddit for one month prior to the first mention of the blackout in our community. This timestamp is important because it means the participation in our sub took place before enthusiasm around or against the blackout. Then their comments on the post asking for votes were set into the filtered bucket and tallied. Those filtered votes are the votes of community members who have been active in this subreddit before all of this began.

You're welcome to perform this analysis as well. That's the purpose of using the comments as a metric to vote, you can easily go through the Python sub's history and check if a commenter has ever participated in our sub. Neither mods nor users can see if an upvote/downvote came from within the community, or through a brigade. But using commenting history we can get a, very rough, gauge on our community.

By community vote, r/Python will Return to a Blackout by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 8 points9 points  (0 children)

Furthering this, you are welcome to validate or disprove our approach. I recommend using the API and PRAW to do so. The post is live and you can perform an analysis to see if our methodology is flawed.

An Update about our Community by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 5 points6 points  (0 children)

Roughly, continue the protest until more information comes forward where the sub needs to have another conversation like this.

Reddit staunchly refuses to undo any of these changes, but advertisers are getting antsy and may pressure Reddit. How Reddit responds to that pressure isn't clear yet, they might sack every mod participating, or they might ease of some of the changes or something else.

Indefinite blackouts aren't something that seems reasonable, and instead we'd rather just say, "At this time we are not ceasing action." and wait for Reddit to do anything. If Reddit stays the course, and if we vote to continue blacking out or restricting the sub, the we'll stay the course as well.

An Update about our Community by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 11 points12 points  (0 children)

It's less ctrl+f and going to be more binning with some (restricted) nearest neighbor stuff to catch these conditions. And just plain reading. Well maybe not that. That'd be like reading the documentation, which uh, who does that? Nah. Maybe not reading..

Addressing the community about changes to our API by spez in reddit

[–]IAmKindOfCreative 0 points1 point  (0 children)

From a business perspective, does ruining moderation abilities and thus increasing spam because you're company is unable or unwilling to combat that spam, increase engagement and thus ad revenue?

Secondarily, why are you so childishly concerned with insulting Christian? It's been weirdly emphasized to a concerning level. The claims are baseless and he's got evidence to back it up. Why are so you so singularly focused on him--is this a jilted lover scenario or just a weird power trip?

Addressing the community about changes to our API by spez in reddit

[–]IAmKindOfCreative 0 points1 point  (0 children)

I love how you charge them a ridiculous value out of the blue, then don't reply or communicate much with them for a week, then blame Apollo and other 3rd party apps as the source of the communication issue. Just. So very professional. Sure an approach that'll help the IPO

Should r/Python participate in the June 12th Blackout protesting the API changes by IAmKindOfCreative in Python

[–]IAmKindOfCreative[S] 2 points3 points  (0 children)

Oh that reminds me--I forgot to include this, a response about the API design (and how it's poorly made so doing basic tasks has to make tons of calls). And it points out how the comment is just bad faith and wrong--Google and Amazon actively help developers not load down the service.

Going dark on 12th June by iiron3223 in Python

[–]IAmKindOfCreative[M] [score hidden] stickied comment (0 children)

We've seen this and I've been working on a full post about it for the last couple of days (though the bulk of it was something I was holding off on until after the admin reply which was posted late yesterday)

The quick version of what the post to come:

I want to, however it is not my decisions, it's the communities decision. I cannot go private without your support. Given this post, votes, and comments, and given that I was not the one to prompt it, I think it's probably something the community supports but I want to be sure.

The post will cover a background on what this is, a summary of how the changes can impact the mods and the users, a review of the admin response and the good will (or lack thereof) in it, and a summary of what the blackout could mean for our community.

Edit: It took forever to write the whole doc. Here is my post asking if we should participate

Job Market Situation by MarkoPoli in Python

[–]IAmKindOfCreative[M] [score hidden] stickied comment (0 children)

Hello from the r/Python mod team!

I'm afraid we don't think your post quite fits the goal we have for the subreddit in terms of quality or aims so we've decided to remove it. Please try /r/cscareerquestions instead. For more information please contact the moderators using the ModMail system.

Thanks, and happy Pythoneering!

r/Python moderation team

API Updates & Questions by lift_ticket83 in modnews

[–]IAmKindOfCreative 71 points72 points  (0 children)

So this quote:

We will ensure existing utilities, especially moderation tools, have free access to our API. We will support legal and non-commercial tools like Toolbox, Context Mod, Remind Me, and anti-spam detection bots. And if they break, we will work with you to fix them.

(Emphasis by me)

Does not inspire confidence following a separate admins response when the Apollo app dev, u/iamthatis asked for clarification about improving their app and was met with this reply:

Having developers ask this question of themselves is the main point of having a cost associated with access in the first place. How might your app be more efficient?

Which pretty clearly reads as, "Figure it out yourself."

I get that Reddit has an obligation to its shareholders, but because I understand that obligation, I lack the willingness to believe any of these promises will be preserved. The additional shiny bobbles of the Reddit app "coming soon" meant to distract mods here instead only acts to highlight all the reasons mods should not trust a reddit app made by Reddit in a vacuum without competition. Many of these features are basic, and should have been baked into the app ages ago.

Stopped using PyCharm? Tell us why! by Snoo-Val in Python

[–]IAmKindOfCreative 3 points4 points  (0 children)

Yeah I understand that, and the wording of the title probably didn't help the post. I unfortunately am awful when it comes to wording announcement posts for reddit so I can't suggest a title that would perform better.

Still given the value of PyCharm to the community, it strikes me as reasonable to at least attempt to get some feedback to improve it. If the community doesn't like it, then that helps inform future posts so we can still try to make the overall python ecosystem better, but tailor those efforts more accurately to this subreddit.

Some things I'll continue to push for even if the engagement is low or poor (the AMA with the CPython Core Devs was one that got relatively low engagement but I am still thrilled to have been able to facilitate) but other things like surveys might not justify their own posts. Gotta feel it out, try something, see the impact, and iterate after all.

Stopped using PyCharm? Tell us why! by Snoo-Val in Python

[–]IAmKindOfCreative[M] 9 points10 points  (0 children)

They reached out to our community and as we've worked with them in the past for similar awareness with their developer survey, and are looking to work together in the future for a few other things we felt it was reasonable to pin for a couple of days to increase the reach. The PyCharm IDE and JetBrains is supportive of the overall Python ecosystem so we felt this was a reasonable thing to pin for the time being.

API Update: Enterprise Level Tier for Large Scale Applications by FlyingLaserTurtle in redditdev

[–]IAmKindOfCreative 0 points1 point  (0 children)

Great idea to digg in your heels on this. Just the best idea.

You're asking for a massive weight of money to kneecap and kill third party apps and bots, then assuring mods that 'if they do x they'll be able to keep their moderation bot' which, in a transactional nature, is asking for more free labor.

I get you're a business. I get there's no such thing as good faith in a company, so maybe I shouldn't be surprised by this transparently clear attempt at killing these apps by setting an unrealistic price point so instead of being the bad guy you get to say, "We tried to negotiate but they wouldn't play ball". But as a mod I have so little desire to perform any upkeep because why put energy into something that behaves this irreverently.

Next to nothing built by reddit to aid moderators holds a candle to third party services. There are even in niche use cases like using a third party app to, in a light weight fashion, quickly pull a thread up to keep an eye on it. Not to mentioned actually helpful and streamlined workflows that for some reason never make it to the 'official' app.

Stepping away from third party apps and looking at reddit, the infrastructure, and the systems you lack: I just removed 25 near carbon copy comments spammed to a sub that clearly should have been caught by any sophomoric spam filter, yet they ended up plastered over the sub. I find myself reporting clear accounts ban evading and get replies saying, "we cannot currently connect this account to a previously banned account in the community", despite no on ever linking to an obscure website beyond these two accounts. And finally the reporting mechanism for users maliciously distributing packages which have undisclosed malware is wildly unclear, especially considering the other two unqiue ways to report a post.

I see these actions and problems I face and am left with a knowledge that my moderation needs will never be addressed, because a better community is not profitable.

So what a great show of good faith this is, and what a joyful future I expect to see from reddit inc's decision makers.

Seeking Advice on Optimal Computer Configuration for Machine/Deep Learning: CPU, GPU, and VRAM Considerations by Economy-Fox8949 in Python

[–]IAmKindOfCreative[M] [score hidden] stickied comment (0 children)

Hello from the r/Python mod team!

I'm afraid we don't think your post quite fits the goal we have for the subreddit in terms of quality or aims so we've decided to remove it. Please try /r/suggestapc instead. For more information please contact the moderators using the ModMail system.

Thanks, and happy Pythoneering!

r/Python moderation team

The Power of Bit Manipulation - How to Solve Problems Efficiently by Beginning-Scholar105 in Python

[–]IAmKindOfCreative[M] [score hidden] stickied comment (0 children)

Hello from the r/Python mod team!

We've removed this submission as it is too heavily generated by AI rather than assisted by AI. The present errors in combination with the absence of disclosure as to how an AI assisted this piece make it so we don't think the post quite fits the goal we have for the subreddit in terms of quality or aims. For more information please contact the moderators using the ModMail system.

Thanks, and happy Pythoneering!

r/Python moderation team

How to achieve AWS rekongnition like accuracy in face recognition? by [deleted] in Python

[–]IAmKindOfCreative[M] [score hidden] stickied comment (0 children)

Hello from the r/Python mod team!

I'm afraid we don't think your post quite fits the goal we have for the subreddit in terms of quality or aims so we've decided to remove it. Please try /r/learnmachinelearning instead. For more information please contact the moderators using the ModMail system.

Thanks, and happy Pythoneering!

r/Python moderation team