this post was submitted on 20 Dec 2024
165 points (96.6% liked)

Lemmy.World Announcements

29153 readers
139 users here now

This Community is intended for posts about the Lemmy.world server by the admins.

Follow us for server news ๐Ÿ˜

Outages ๐Ÿ”ฅ

https://status.lemmy.world

For support with issues at Lemmy.world, go to the Lemmy.world Support community.

Support e-mail

Any support requests are best sent to info@lemmy.world e-mail.

Report contact

Donations ๐Ÿ’—

If you would like to make a donation to support the cost of running this platform, please do so at the following donation URLs.

If you can, please use / switch to Ko-Fi, it has the lowest fees for us

Ko-Fi (Donate)

Bunq (Donate)

Open Collective backers and sponsors

Patreon

Join the team

founded 2 years ago
MODERATORS
ruud@lemmy.world
lwadmin@lemmy.world
lwCET@lemmy.world
jelloeater85@lemmy.world
Serinus@lemmy.world
lw_mod_notification@lemmy.world
165
Media upload filter updates again (lemmy.world)
submitted 2 days ago by lwadmin@lemmy.world to c/lemmyworld@lemmy.world
16 comments fedilink hide all child comments
 

Hello World,

today, @db0@lemmy.dbzer0.com has provided an update to the media upload scanner we're using. This should reduce the amount of false positives blocked from being uploaded. We have deployed the updated version now.

While we do not have stats about false positives from before we implemented the scan when uploading, those changes did not change the overall data availability for us. Flagged images were still deleted, they were just still served by our cache in many cases. By moving this to the upload process, it has become much more effective, as previously images could persist in Cloudflare's cache for extended periods of time, while now they won't get cached in the first place.

Over the last week, we've seen a rate of roughly 6.7% uploads rejected out of around 3,000 total uploads. We'll be able to compare numbers in a week to confirm that this has indeed improved the false positive rate.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] MrKaplan@lemmy.world 4 points 1 day ago (1 children)

a JSON parsing error is certainly unexpected. I wonder if you happen to be triggering some automatic Cloudflare WAF rule.

could you try uploading the same file from a computer? before uploading, please open your browser dev tools (F12) and visit the network tab. it should show some more details in there. especially the response tab should show an actual error message. in the headers tab, you could also share the value of the cf-ray header with us and we can take a look at our logs. please be careful not to share everything you see in that network tab, as there are values visible there that allow taking over your lemmy account. specifically cookies and the jwt value; in some cases also an authorization header. cf-ray is not sensitive, it's just an identifier associated with the individual request.

feel free to pm me the cf-ray value rather than posting it publicly.

[โ€“] IMALlama@lemmy.world 2 points 1 day ago (1 children)

Thanks for the reply and apologies for getting back to you. I typed that out right before going to bed :(

Looking in developer tools, it does look like Cloudflare is what's blocking me. Here's the cf-ray value: 8f4ffe74bffc22f1-ORD

Now that I'm on a PC, I can simply open the file in an image editor, resave it without making any intentional modifications, and the upload succeeds. It makes me think that it has something to do with the image metadata (maybe EXIF?).

I'll send you a pm you a link to the unmodified image momentarily.

[โ€“] MrKaplan@lemmy.world 4 points 1 day ago (1 children)

thanks for the image. for some reason i can't see the firewall event for your attempt, but when i tried to upload the image myself i found the event. it's a rule related to a php file upload vulnerability in software we're not even using, it's disabled now.

[โ€“] IMALlama@lemmy.world 3 points 1 day ago

Very cool, thanks! This will make it a lot easier for me to post OC.