#spamwave — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #spamwave, aggregated by home.social.
-
We've closed signups on indieweb.social for the weekend after a huge increase in attempted spam sign ups.
We aren't the only instance going through this. Please show your support to the amazing moderators across the Fediverse! 💙 ☁️
#FediAdmin #SpamWave #Moderation #Admin #Indieweb #FediMod #MastoAdmin
-
We've closed signups on indieweb.social for the weekend after a huge increase in attempted spam sign ups.
We aren't the only instance going through this. Please show your support to the amazing moderators across the Fediverse! 💙 ☁️
#FediAdmin #SpamWave #Moderation #Admin #Indieweb #FediMod #MastoAdmin
-
We've closed signups on indieweb.social for the weekend after a huge increase in attempted spam sign ups.
We aren't the only instance going through this. Please show your support to the amazing moderators across the Fediverse! 💙 ☁️
#FediAdmin #SpamWave #Moderation #Admin #Indieweb #FediMod #MastoAdmin
-
We've closed signups on indieweb.social for the weekend after a huge increase in attempted spam sign ups.
We aren't the only instance going through this. Please show your support to the amazing moderators across the Fediverse! 💙 ☁️
#FediAdmin #SpamWave #Moderation #Admin #Indieweb #FediMod #MastoAdmin
-
We've closed signups on indieweb.social for the weekend after a huge increase in attempted spam sign ups.
We aren't the only instance going through this. Please show your support to the amazing moderators across the Fediverse! 💙 ☁️
#FediAdmin #SpamWave #Moderation #Admin #Indieweb #FediMod #MastoAdmin
-
RE: https://mstdn.social/@stux/116850334762728573
I did wonder about all of that last night, props to the people who tend the pipes and pulleys of this place, Humanity's Last Stand!
Fuck AI!
#ButlerianJihad #Mastodon #SpamWave #LLMs #Technology #NerdReich
-
RE: https://mstdn.social/@stux/116850334762728573
I did wonder about all of that last night, props to the people who tend the pipes and pulleys of this place, Humanity's Last Stand!
Fuck AI!
#ButlerianJihad #Mastodon #SpamWave #LLMs #Technology #NerdReich
-
🚨 Alert 🚨
There is a new scam wave spreading across Mastodon.
If you see a post like the one below, do not interact with it. SImply report to your server admin.
As moderators, we will do our best to respond to these reports swiftly and will suspend any account guilty of sharing malicious links.
Server admins, if you are able, now may be the time to temporarily turn off open sign ups to help prevent the spread.
Please boost!
-
🚨 Alert 🚨
There is a new scam wave spreading across Mastodon.
If you see a post like the one below, do not interact with it. SImply report to your server admin.
As moderators, we will do our best to respond to these reports swiftly and will suspend any account guilty of sharing malicious links.
Server admins, if you are able, now may be the time to temporarily turn off open sign ups to help prevent the spread.
Please boost!
-
Can we get rid of the Fediverse Chick already? This is starting to get on my nerves 😅 :mastodon_oops:
-
Can we get rid of the Fediverse Chick already? This is starting to get on my nerves 😅 :mastodon_oops:
-
I've decided to suspend the following Misskey instances from both buddyverse.one and this instance due to a lack of moderation. I've reported multiple posts with no response:
1. tickler.cc
2. usasa.ky#fediblock #spam #spamwave #misskey #fediverse #fediadmin #mastoadmin
-
I've decided to suspend the following Misskey instances from both buddyverse.one and this instance due to a lack of moderation. I've reported multiple posts with no response:
1. tickler.cc
2. usasa.ky#fediblock #spam #spamwave #misskey #fediverse #fediadmin #mastoadmin
-
If any Mastodon admins are dealing with spam account sign-ups, it's worth noting that these accounts seem to universally use disposable email providers and burner email address. There's a GitHub repo that tracks these providers. All moderation inquiries are sent to a user's email on Mastodon, so there's no legitimate reason any Mastodon user should be using a disposable email address. As such, there's a git repository that tracks these disposable email providers. There are also bash scripts that will import the repository into tootctl for you.
The disposable email git repo can be found here:
And the bash scripts can be found here:
Simply clone the repo and copy the bash script onto your server, then edit the script to point at your Mastodon installation and the directory you cloned the repository to, and it should handle the rest.
Side note: I checked our logs and we had a huge spike in attempted sign-ups from a bunch of different disposable email addresses this week, so I can confirm that blocking them definitely works. :blobyeengrin:
#Mastodon #MastoMeta #MastodonAdmin #MastoAdmin #Spam #Spamwave
-
If any Mastodon admins are dealing with spam account sign-ups, it's worth noting that these accounts seem to universally use disposable email providers and burner email address. There's a GitHub repo that tracks these providers. All moderation inquiries are sent to a user's email on Mastodon, so there's no legitimate reason any Mastodon user should be using a disposable email address. As such, there's a git repository that tracks these disposable email providers. There are also bash scripts that will import the repository into tootctl for you.
The disposable email git repo can be found here:
And the bash scripts can be found here:
Simply clone the repo and copy the bash script onto your server, then edit the script to point at your Mastodon installation and the directory you cloned the repository to, and it should handle the rest.
Side note: I checked our logs and we had a huge spike in attempted sign-ups from a bunch of different disposable email addresses this week, so I can confirm that blocking them definitely works. :blobyeengrin:
#Mastodon #MastoMeta #MastodonAdmin #MastoAdmin #Spam #Spamwave
-
So quite a lot of stuff happened today with the mastodon update and the spam wave going on, so I just rambled a bit about it, and also about my new Switch games I got!
This is day 79 of #100DaysToOffload
https://joelchrono.xyz/blog/2024-10-08-mastodon-and-life-updates
-
So quite a lot of stuff happened today with the mastodon update and the spam wave going on, so I just rambled a bit about it, and also about my new Switch games I got!
This is day 79 of #100DaysToOffload
https://joelchrono.xyz/blog/2024-10-08-mastodon-and-life-updates
-
For admins who want to suspend most of the spammy users locally, here's a braindump.
Like always: Executing stuff from random people in your production environment is probably a bad idea!
https://gist.github.com/sammy8806/c58816a69bf6074ffaace1aa1ddb480f
-
For admins who want to suspend most of the spammy users locally, here's a braindump.
Like always: Executing stuff from random people in your production environment is probably a bad idea!
https://gist.github.com/sammy8806/c58816a69bf6074ffaace1aa1ddb480f
-
We have boilerplate text you can use to contact the admin or moderators of a compromised server that's sending spam, available in English, Japanese, and Mandarin: https://docs.google.com/document/d/1z6yZuBcFNMStKBpNg9WGJjkmftZSFSIGvrRGfYvU5RA/
So far over a dozen compromised servers have modified their registration settings and removed any spam accounts and messages, thank you!
-
We have boilerplate text you can use to contact the admin or moderators of a compromised server that's sending spam, available in English, Japanese, and Mandarin: https://docs.google.com/document/d/1z6yZuBcFNMStKBpNg9WGJjkmftZSFSIGvrRGfYvU5RA/
So far over a dozen compromised servers have modified their registration settings and removed any spam accounts and messages, thank you!
-
If you are using one of the *oma instances (Akkoma, Pleroma, etc): you can easily handle this spam wave without playing defederation whack-a-mole by doing the following:
- Enable
RejectNewlyCreatedAccountNotesPolicyand set the limit to at least one hour. Note that this is not without tradeoffs: users who migrate to new accounts will not be able to reach your instance until their account is old enough, and will often wonder what’s going on. - Enable
HellthreadPolicyto limit the maximum number of mentions in a post before it stops notifying mentioned users, or before it’s rejected outright. Temporarily decrease the limit during a spam wave if you need to. - Enable
KeywordPolicyand add strings commonly found in spam posts, such as domain names (followed by a slash, to reduce false positives from real users simply mentioning the domain without linking it), hashtags, and uncommon words. Look up the “Scunthorpe Problem” if you’re unfamiliar.
When the dust settles, depending on available spoons, I might go through the instances that haven’t cleaned up spam after multiple days. Those are likely abandoned and extra-vulnerable to future attacks and block evaders. On *oma, these defederations will not sever connections and are reversible.
- Enable
-
If you are using one of the *oma instances (Akkoma, Pleroma, etc): you can easily handle this spam wave without playing defederation whack-a-mole by doing the following:
- Enable
RejectNewlyCreatedAccountNotesPolicyand set the limit to at least one hour. Note that this is not without tradeoffs: users who migrate to new accounts will not be able to reach your instance until their account is old enough, and will often wonder what’s going on. - Enable
HellthreadPolicyto limit the maximum number of mentions in a post before it stops notifying mentioned users, or before it’s rejected outright. Temporarily decrease the limit during a spam wave if you need to. - Enable
KeywordPolicyand add strings commonly found in spam posts, such as domain names (followed by a slash, to reduce false positives from real users simply mentioning the domain without linking it), hashtags, and uncommon words. Look up the “Scunthorpe Problem” if you’re unfamiliar.
When the dust settles, depending on available spoons, I might go through the instances that haven’t cleaned up spam after multiple days. Those are likely abandoned and extra-vulnerable to future attacks and block evaders. On *oma, these defederations will not sever connections and are reversible.
- Enable
-
We are tracking the current spam wave and are contacting the relevant server admin teams. If you are silencing or blocking servers and would like to retract your action once the server has been set to require approvals, please monitor https://docs.google.com/spreadsheets/d/13sskOdKraYo2hSMK353Ijm0_K8WCp-JHs6cyruffedA/
-
We are tracking the current spam wave and are contacting the relevant server admin teams. If you are silencing or blocking servers and would like to retract your action once the server has been set to require approvals, please monitor https://docs.google.com/spreadsheets/d/13sskOdKraYo2hSMK353Ijm0_K8WCp-JHs6cyruffedA/
-
I don't want #spam in #fediverse.
I tried this and it worked.
k-Anonymity + Estimate the user co-occurrence score with multiple strategies
https://github.com/gnh1201/caterpillar/blob/main/plugins/fediverse.py
-
I don't want #spam in #fediverse.
I tried this and it worked.
k-Anonymity + Estimate the user co-occurrence score with multiple strategies
https://github.com/gnh1201/caterpillar/blob/main/plugins/fediverse.py
-
Multiple Misskey Servers have just had a spam attack with many of their bots even messaging me personally. This may be a new spam wave going through the Fediverse, this time only Misskey servers being affected (to my knowledge)!
The translated message reads:
Nice to meet you! I'm Suzuki Tetsuya, also known as the criminal Midokuri (Noname)! My hobby is nuking various sites!
The Mastodon Update 4.3, which has just been released today, would automatically filter messages like these. Many users, already on alpha versions of that release, will probably not even realize this attack is going on! #FediBlock #SpamWave #Spam
-
Multiple Misskey Servers have just had a spam attack with many of their bots even messaging me personally. This may be a new spam wave going through the Fediverse, this time only Misskey servers being affected (to my knowledge)!
The translated message reads:
Nice to meet you! I'm Suzuki Tetsuya, also known as the criminal Midokuri (Noname)! My hobby is nuking various sites!
The Mastodon Update 4.3, which has just been released today, would automatically filter messages like these. Many users, already on alpha versions of that release, will probably not even realize this attack is going on! #FediBlock #SpamWave #Spam
-
New version 4.2.8 of #Mastodon has just been released, containing some changes to help contain the current spam wave by making changes to account approval and defaulting to NOT have open registrations anymore. https://github.com/mastodon/mastodon/releases/tag/v4.2.8
-
New version 4.2.8 of #Mastodon has just been released, containing some changes to help contain the current spam wave by making changes to account approval and defaulting to NOT have open registrations anymore. https://github.com/mastodon/mastodon/releases/tag/v4.2.8
-
Hey folx, watch this video by @BrodieOnLinux regarding the February 15th Spam Attacks:
- :invidious: https://yewtu.be/watch?v=_KCwq9e-H5M?t=652
- :youtube: https://youtu.be/_KCwq9e-H5M?t=652
They talk about my explanation on how to mitigate the spam which I'm so honored by!
The most important topic in the video obviously surrounds the research done by @cappy regarding the script kiddies (skids) that started this.
-
Hey folx, watch this video by @BrodieOnLinux regarding the February 15th Spam Attacks:
- :invidious: https://yewtu.be/watch?v=_KCwq9e-H5M?t=652
- :youtube: https://youtu.be/_KCwq9e-H5M?t=652
They talk about my explanation on how to mitigate the spam which I'm so honored by!
The most important topic in the video obviously surrounds the research done by @cappy regarding the script kiddies (skids) that started this.
-
Is the spamwave getting you down too?
If you go to your
Preferences>Notificationsand scroll down toOther notifications settings, you can choose to block notifications from accounts who don't follow you or who you don't follow.I'm doing my best to handle the spam as it comes in and defederate from instances that host it, but it might be best to just block it on your end if it's (rightfully) driving you insane :blobfoxmeltsob:
-
Is the spamwave getting you down too?
If you got to your
Preferences>Notificationsand scroll down toOther notifications settings, you can choose to block notifications from accounts who don't follow you or who you don't follow.I'm doing my best to handle the spam as it comes in and defederate from instances that host it, but it might be best to just block it on your end if it's (rightfully) driving you insane :blobfoxmeltsob:
-
Nothing like waking up to more spam to deal with!
-
Nothing like waking up to more spam to deal with!
-
-
In case you were curious what a #SpamWave looks like in our metrics.
-
Reminder to other instance admins and moderators, if you are receiving spam reports as part of the on-going spam wave, please report the instances the spam is coming from to the list that @ErikUden has compiled over on GitHub.
This is quite useful for seeing what instances are still being affected, and also for building a potential "Limiting List" for usage by other instances looking to stop the spam flood. Erik has a good post explaining how to use this list here: https://mastodon.de/@ErikUden/111954222362376457
Also, for instances that still have open registration: Please consider limiting your signups to be by approval. Alternatively consider activating Captcha or another form of bot stopping to try and prevent this from happening
-
Hello all Fedi Admins who have problems with spam!
The Mute List 2.2.2
I have been updating the spam list and found ~104 additional instances that continued spamming! I, with lots of help of other Fedi Admins, have compiled the instances into a list which mutes them, and does not defederate from them!
I'd highly appreciate a small donation here as I've worked really hard and long on creating this, which given my current schedule I can hardly justify! Thanks!
There is a new type of spam, the same instances are affected as before. Those responsible in Japan are said to have been arrested.
Instructions and Explanation of the List.
Once this list is imported, most of the spam is gone. The whole thing is easy for you, with just one click! In addition, no instance is blocked forever, no followers etc. are destroyed or unfollowed, only muted.
You can simply import this list by going to
https://yourinstance.tld/admin/export_domain_blocks/newand replacingyourinstance.tldwith the domain of the instance you are the administrator of!Alternatively, you can also click on
Settings => Moderation => Federation => Importto import this list.Note that although all instances can be imported with one click, these instances must be removed individually when the spam is over.
Also note that it only makes sense to import this list and mute the spam instances if you have blocked your spam locally and permanently, as described here.
Here's to a spam-free Fediverse :apartyblobcat: !
#MastoAdmins #FediBlock #Spam #Spamwave #Fedimins #FediAdmin #FediAdmins FediAdminEN
-
Hello all Fedi Admins who have problems with spam!
The Mute List 2.2.2
I have been updating the spam list and found ~104 additional instances that continued spamming! I, with lots of help of other Fedi Admins, have compiled the instances into a list which mutes them, and does not defederate from them!
I'd highly appreciate a small donation here as I've worked really hard and long on creating this, which given my current schedule I can hardly justify! Thanks!
There is a new type of spam, the same instances are affected as before. Those responsible in Japan are said to have been arrested.
Instructions and Explanation of the List.
Once this list is imported, most of the spam is gone. The whole thing is easy for you, with just one click! In addition, no instance is blocked forever, no followers etc. are destroyed or unfollowed, only muted.
You can simply import this list by going to
https://yourinstance.tld/admin/export_domain_blocks/newand replacingyourinstance.tldwith the domain of the instance you are the administrator of!Alternatively, you can also click on
Settings => Moderation => Federation => Importto import this list.Note that although all instances can be imported with one click, these instances must be removed individually when the spam is over.
Also note that it only makes sense to import this list and mute the spam instances if you have blocked your spam locally and permanently, as described here.
Here's to a spam-free Fediverse :apartyblobcat: !
#MastoAdmins #FediBlock #Spam #Spamwave #Fedimins #FediAdmin #FediAdmins FediAdminEN
-
I was trying to be conscientious and not just blindly block instances that host spam, but that's now bit me in the ass multiple times by having the same instances not take care of their spam issues whatsoever and suddenly get another dozen spam accounts a few hours after blocking the last batch. :neofox_what: We've been dealing with this for days now, I'm sorry but I'm just going to start going wild with the domain blocks.
