Spam in Geminispace?

For those people who run a service in Geminispace where users can submit content, did you receive any spam or other abuse?

If you want, you can add details in the comments.

I'm aware that not many people are able to answer, but maybe you can point those people to this poll, if you like to. Thanks.

Poll Results

1. I run a service with Gemini sign-up-only, and I've seen no spam

██████████████████▁▁▁▁▁▁ 75%

2. I run a service with Gemini sign-up-only, and I've seen a little spam

██████▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 25%

3. I run a service with Gemini sign-up-only, and I've seen a lot of spam

▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 0%

4. I run a service with HTTP sign-up, and I've seen no spam

▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 0%

5. I run a service with HTTP sign-up, and I've seen a little spam

▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 0%

6. I run a service with HTTP sign-up, and I've seen a lot of spam

▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 0%

4 votes were cast.

🗳️

Posted in: s/AskGemini

💀 StrokedOut

Apr 21 · 2 weeks ago · 👍 Nono, bsj38381, lieselotte

12 Comments ↓

💀 StrokedOut [OP] · Apr 21 at 12:55:

Thanks @skyjake for this great polling feature.

🚀 LucasMW · Apr 21 at 13:31:

I run both https and gemini services where users can input things. Including one that is the same thing on https and gemini.

https most of traffic is attacks, not humans or even users.

I don't usually check the logs of the gemini counterpart, but I hope is most of you guys using it, and not bots.

🎲 lab6 · Apr 21 at 15:15:

I have a gemlog which allows comments, but requires a TLS client cert, which is possibly a minor discouragement to spam, but more likely the capsule is just incredibly low-visibility to the wider world.

🐙 norayr · Apr 21 at 20:16:

lab6, how did you organize that comment system? cas i setup something like that?

i was writing my own system as cgi, it's half ready half forgotten.

it creates a comments.gmi for every post.

👽 spc476 · Apr 21 at 20:30:

You forgot an option: I run a web server without sign-ups, and I still see spam.

The Gemini bots are out there. I just checked the stats for my Gemini server for the past month, and there have been a dozen individual IPs that have made a minimum of 10+ requests per day.

🎲 lab6 · Apr 21 at 20:31:

@norayr the whole gemlog is an SCGI application with state in SQLite. I found this guide very useful:

gemini://geminiprotocol.net/docs/app-guide.gmi

💀 StrokedOut [OP] · Apr 23 at 16:37:

By "service with HTTP sign-up" I mean a service served on both Gemini and HTTP, but with a HTTP sign-up, which attracts a different kind of crowd.

💀 StrokedOut [OP] · Apr 23 at 23:24:

FYI, gemlog.blue was suffering badly from spam, And they had HTTP sign-ups.

— gemlog.blue

🛰️ Caleb · Apr 24 at 09:54:

But the spam on gemlog.blue could have been avoided and solved with a simple bash script (that's how I cleaned it up in 5 minutes) and a cron job

— My archived (and cleaned version)

💀 StrokedOut [OP] · Apr 26 at 16:59:

I deleted the last option of this poll, where people who don't run a service could show their interest in the poll.At the time of deletion, the numbers were:

I deleted it, because now the results actually show the percentages of people running services and their experiences.

🌆 skyjake [mod...] · Apr 26 at 17:53:

Pro tip: if you deactivate your client certificate, you can view the poll results without voting.

😎 flipperzero · Apr 28 at 23:59:

Just putting it out there, as someone who does both but not reflected in the poll for the sake of maintaining measurement between the split - the service I run by gemini-exclusive sign-up (misfin) produces *no* observable or measurable spam. In the contrary, my services which use web and/or email sign-up (mail, smtp, imap, php forward to mail) get light to barely noticeable spam. In case I could help provide some perspective with this. Thanks.