this post was submitted on 17 May 2025
72 points (88.3% liked)

PieFed Meta

1273 readers
114 users here now

Discuss PieFed project direction, provide feedback, ask questions, suggest improvements, and engage in conversations related to the platform organization, policies, features, and community dynamics.

Wiki

founded 2 years ago
MODERATORS
 

Spammers, trolls, and ban evaders often use temporary email addresses. PieFed now checks a list of known temporary email providers and displays a warning icon next to registrations that use such services.

If registration mode is set to "Open" (no approval needed) then the site admin(s) receive a notification instead.

A throwaway email address isn't always a bad thing but it's one factor that admins might want to take into account.

all 47 comments
sorted by: hot top controversial new old
[–] oranki@piefed.social 35 points 2 months ago (3 children)

I have to chime in and say this feels a bit underthought feature. I use a throwaway email for everything possible, and I would imagine a large portion of Fediverse users do that too.

I also get the motivation behind the feature. I didn't feel like throwaway addresses are worth it before I started using them. They may seem like an obvious spammer flag. But I'd say it's 50/50, just like with any free email provider like gmail or Proton mail.

[–] fr0g@piefed.social 4 points 2 months ago (1 children)

You say it's 50/50 based on your own experience/anecdotal evidence. Admins will probably be able to make that determination with a much greater deal of accuracy based on what they see happening on their instance. So it makes sense to leave the choice to them/enable them to make that choice, right?

[–] oranki@piefed.social 2 points 2 months ago (1 children)

True, I failed to mention that I think there could be a setting to enable the feature, or dismiss the warning per-account. @rimu@piefed.social maybe consider this?

[–] rimu@piefed.social 3 points 2 months ago
[–] rimu@piefed.social 3 points 2 months ago (1 children)

We'll see. If it turns out to be useless noise, I'll remove it from the signal.

[–] Undearius@lemmy.ca 2 points 2 months ago

I think it's good that it's a simple flag and not an outright block.

It's just a way for admins to see "maybe take a closer look at this registration."

I'm sure there are a lot of legitimate users that use these types of emails, though.

[–] rickyrigatoni@lemm.ee 3 points 2 months ago

Throwaway emails seem kind of necessary on small, underdeveloped, easily hacked websites.

[–] RumorsOfLove@lemmy.dbzer0.com 32 points 2 months ago (1 children)

Hello! Representing a real human with a throwaway registration 👍

[–] roguetrick@lemmy.world 5 points 2 months ago (1 children)
[–] RumorsOfLove@lemmy.dbzer0.com 2 points 1 month ago* (last edited 1 month ago)

What? Looking at your comment history, I see you as a sincere participant. So what is it in my profile that bothers you?

[–] chickenf622@sh.itjust.works 14 points 2 months ago (1 children)

Does this include people that use email aliases to keep the connections between accounts harder to make? I pay for this service so it's genuinely not a throw away account. Just a way to maintain some privacy.

[–] rimu@piefed.social 7 points 2 months ago* (last edited 2 months ago) (1 children)

I don't know which service you use or whether it is on the list. But if it's a paid service then it's probably not on the list. Things on the list are like https://10minutemail.com/ or https://www.guerrillamail.com/

You're free to maintain your privacy and admins are free to weigh the potential risk of accepting an application with a warning icon on it. I'm sure there will be plenty who ignore it.

[–] chickenf622@sh.itjust.works 5 points 2 months ago (1 children)

I appreciate the straightforward answer of you're not sure answer (no sarcasm) . I just want to make sure paranoid people like me can still participate and I keep their level of privacy

[–] rimu@piefed.social 4 points 2 months ago (1 children)
[–] Ulrich@feddit.org 5 points 2 months ago* (last edited 2 months ago)

Every alias domain I have is on this list. Not cool.

[–] aramis87@fedia.io 12 points 2 months ago (1 children)

Also a real human with a throwaway registration address!

[–] Ulrich@feddit.org 11 points 2 months ago (2 children)

I have to say that's extremely unfortunate that you would add such a feature. We use aliases to maintain our privacy and this is come corpo surveillance shit. Not cool.

[–] rimu@piefed.social 6 points 2 months ago (1 children)

Aliases are different and not flagged by this feature. It just looks at domain names.

Multiple big Lemmy instances have been using the exact same blocklist for a long time (although it's not a core feature, they've patched it in somehow). I got the idea by lurking in the Lemmy matrix rooms and seeing their discussion.

[–] Ulrich@feddit.org 4 points 2 months ago* (last edited 2 months ago) (1 children)

Aliases are different and not flagged by this feature.

How are they meaningfully different? I just checked the list you posted above and several of the alias domains I use are on that list.

I got the idea by lurking in the Lemmy matrix rooms and seeing their discussion.

Did you think about it before implementing it?

[–] rimu@piefed.social 5 points 2 months ago

Ah I see we are using the word alias in a different way. I was using 'Alias' as technical term with a very specific meaning. Never mind.

[–] roguetrick@lemmy.world 8 points 2 months ago (3 children)

I don't really understand the hostility to this. Do users understand why emails are part of account registration in the first place instead of letting you sign up without an email?

[–] modeler@lemmy.world 4 points 2 months ago

Because people forget passwords and demand a password reset mechanism. Also a place to send terms and conditions and changes to those.

[–] Ulrich@feddit.org 4 points 2 months ago

I literally do not.

[–] fr0g@piefed.social 2 points 2 months ago (1 children)

To be fair Lemmy does allow you to sign up without any email at all (or at least used to, dunno if they changed it), so it's not surprising that this goes against many peoples expectations.

[–] rimu@piefed.social 4 points 2 months ago* (last edited 2 months ago) (1 children)

Pretty much every Lemmy instance requires email. The only ones that do not require it are small enough that spammers haven't found them yet.

[–] RumorsOfLove@lemmy.dbzer0.com 1 points 1 month ago

Some require an essay application instead.

[–] MangoPenguin@lemmy.blahaj.zone 6 points 2 months ago

Seems like an overreach. Most spam I see is from gmail.com not alias services.

[–] ohwhatfollyisman@lemmy.world 6 points 2 months ago (1 children)

i don't have a dog in this race but i must say that this is quite the spectacular manner by which to throw the babies out with the bathwater!

[–] Tyoda@lemm.ee 0 points 2 months ago* (last edited 1 month ago)
[–] Ek-Hou-Van-Braai@piefed.social 2 points 2 months ago

Nice, Another powerful feature admins can use if they want.

[–] rottingleaf@lemmy.world 2 points 2 months ago (1 children)

The more important demographic to use temporary email addresses are people who think their identity is not your concern.

Ah, OK, that's mentioned.

IMHO something like WoT in Freenet would be better. Having many cryptographic identities, but to start using one you have to spend effort confirming it's real. Solving captchas or whatever. Of course it's an obsolete solution, captchas are now solved by bots easier than by humans. But you get my idea.

[–] rimu@piefed.social 3 points 2 months ago* (last edited 2 months ago) (1 children)

their identity is not your concern

There are competing concerns. The instance admin is concerned with avoiding de-federation by keeping the amount of spam and abuse coming from their instance to an acceptable level, without burning out. Some people signing up are concerned about their privacy. (Although this doesn't actually diminish their privacy or stop them from using a throwaway email address. It does suggest that their application needs extra care, tho.)

There's a balance to be struck.

In this case I'm leaning towards the side who pays the bills and the one who decides which software to install on their server. Without getting those people on board there won't be a place to apply for an account with and then act all distrustful about.

Someday when I make my super awesome instance-chooser, maybe "Email address is optional" will be one of the filters. Along with "Bans for criticism of China".

[–] Ulrich@feddit.org 0 points 2 months ago* (last edited 2 months ago)

Although this doesn't actually diminish their privacy or stop them from using a throwaway email address

That's exactly what it does.

Without getting those people on board there won't be a place to apply for an account

What does it matter if there's a place to apply for an account if I can't use it? Better not to exist at all.