Please. Captcha by default. Email domain filters. Auto-block federation from servers that don't respect. By default. Urgent.
And yes, to refute some comments, this publication is being upvoted by bots. A single computer was needed, not "thousands of dollars" spent.
Isn't this what all you lemmy-worlders got mad at Beehaw for doing? I don't think it's unreasonable to ask for a small statement from people as an anti-spam measure (a sort of advanced captcha), though of course the big problem there is reviewing all the applications in a timely manner. Still, I think there's room for more and less exclusive instances. The tools are there for instance owners to protect their instances however they choose.
We already have existing anti-bot measures in the world that don't involve writing a lame sentence. Also, it's very easy to spoof an introductory sentence. You could train a fairly small language model to do so.
I run my own private instance. I’ve had 5 requests to join in the past 24 hours. 2 of them seemed legit, but the other 3 had suspiciously similar sentences. They all had somewhat incorrect wording. All mentioned “the current situation at Reddit” and also all used another word that I’m forgetting right this moment.
I denied even the ones that seemed real because I’m not trying to host a bunch of randos and have to worry about moderation and stuff for them.
Beehaw got their knickers in a twist because of some spammers, back when lemmy.world and shitjustworks had... maybe 30,000 registered users in total. The solution there was adding more moderators. You don't chop your leg off because you got a few papercuts.
If you look at the volume of bots (some instances went from hundreds of users to >12,000 overnight), that's potential for worry. There's ~500,000 bot accounts sitting out there waiting to be activated. No amount of moderators can block that fast enough, and that's when de-federation should be considered.