Vote manipulation bots using sh.itjust.works?

Submitted ⁨⁨2⁩ ⁨days⁩ ago⁩ by ⁨farcaster@lemmy.world⁩ to ⁨main@sh.itjust.works⁩

Hi just a heads up. Check out this post: sh.itjust.works/post/37758799

It got so many upvotes in a such a short time I checked out its activity from an mbin instance. And most of these upvotes are coming from sh.itjust.works accounts which were all created 2 months ago, most on 2/16, and have never posted/commented. There was a similar post in the lemmy.world/c/world community linking to the same website and having a similarly high number of upvotes within minutes, but that post seems to be gone now.

source

Comments

Sort:hotnew top

imaqtpie@sh.itjust.works ⁨2⁩ ⁨days⁩ ago
Yes that does look like vote manipulation. Thank you for notifying us. Those accounts will be banned.

source
- henfredemars@infosec.pub ⁨2⁩ ⁨days⁩ ago
  I’m glad that this is something that Lemmy admins appear to actually care about and have the capability to investigate.
  
  source
- sugar_in_your_tea@sh.itjust.works ⁨2⁩ ⁨days⁩ ago
  Awesome!
  
  Is this something that we could have a script for? I imagine this isn’t the last time this will happen.
  
  source
- FilthyHands@sh.itjust.works ⁨2⁩ ⁨days⁩ ago
  superstar
  
  source
_cryptagion@lemmy.dbzer0.com ⁨2⁩ ⁨days⁩ ago
good fucking catch

source
otacon239@lemmy.world ⁨2⁩ ⁨days⁩ ago
Thank goodness for the open platform that Lemmy is. It’s nice knowing that these things can be caught so easily.

source
- FundMECFSResearch@lemmy.blahaj.zone ⁨2⁩ ⁨days⁩ ago
  Though it’s a bit of a confirmation bias. Only the ones we caught are those we know about.
  
  I won’t detail how, but it would be pretty trivially easy to make it much harder to catch. This is just utter laziness on the vote manipulators.
  
  source
MrKaplan@lemmy.world ⁨2⁩ ⁨days⁩ ago
thanks for flagging this, i just banned 346 accounts involved in this scheme from lemmy.world :|

(unbanned at the time of creating the report) accounts posting links to the same domain:

4x sh.itjust.works

2x ani.social

1x thelemmy.club

1x lemmy.ca

accounts i’m highly confident were involved in vote manipulation here:

172x sh.itjust.works

22x ttrpg.network

21x lemmings.world

20x discuss.online (banned by me)

19x lemmy.wtf

18x lemmy.myserv.one

18x leminal.space

18x ani.social

16x endlesstalk.org

7x lemmy.ca

4x lemy.lol

1x toast.ooo

1x startrek.website

1x lemm.ee
source
- farcaster@lemmy.world ⁨2⁩ ⁨days⁩ ago
  Thanks for taking action! That’s a pretty crazy number of accounts to set up for what appears like promoting a few bland articles from a bland AI-generated website.
  
  source
- FundMECFSResearch@lemmy.blahaj.zone ⁨2⁩ ⁨days⁩ ago
  Wow that looks productive. I’m assuming you can’t share the methodology for linking these accounts to help combat this stuff but I’m very curious if that isn’t an issue.
  
  source
  - MrKaplan@lemmy.world ⁨2⁩ ⁨days⁩ ago
    essentially start by identifying the accounts posting links to the domain in question, then analyze the voting behavior of the accounts upvoting these posts. you can start by sorting out accounts that have legitimate activity and then narrow it down further and find common patterns that only apply to these accounts.
    
    most of them were also created in similar time frames.
    
    source
fxomt@lemmy.dbzer0.com ⁨2⁩ ⁨days⁩ ago
Good catch. I just checked the posts votes, there’s an insanely huge amount of SJW users, all accounts created on 7, or 3 months ago. Completely empty accounts, too…

source
Stovetop@lemmy.world ⁨2⁩ ⁨days⁩ ago
Good catch. I linked this post in the comments of that other post you linked, and it looks like the moderators have since removed the post entirely.

There was another one linking out to that same site (maybe the other post you saw as well) which I recall had an extremely misleading clickbait-y headline. It also seems to have been removed, so at least mods are staying on top of it.

Does Lemmy have the ability to automatocally block/remove posts leading to certain domains? Seems to be a common thread of these accounts trying to promote this one “news” site. Though I don’t imagine this sort of thing will stop at one site.

source
- Oni_eyes@sh.itjust.works ⁨2⁩ ⁨days⁩ ago
  Was that the one about Biden lying?
  
  source
Reverendender@sh.itjust.works ⁨2⁩ ⁨days⁩ ago
Wait, I want to read the propaganda!

source
- PhilipTheBucket@ponder.cat ⁨2⁩ ⁨days⁩ ago
  I kind of do too… anyone have a link to what it was before it was deleted? I am curious.
  
  @admins thank you for squashing this ❤️
  
  source
  - farcaster@lemmy.world ⁨2⁩ ⁨days⁩ ago
    It was just a random site with some news articles linking to more established news sources. Nothing objectionable content-wise really. Only the remarkable number of upvotes in a very short time for two posts going to the same random site stood out to me.
    
    source
    -> View More Comments