all 29 comments

sorted by: hot top controversial new old
[–] 50 points 2 years ago (2 children)

Yeah, don't offer open signups, kids.

  • source
  • hideshow 4 child comments
  • [–] 13 points 2 years ago (4 children)

    What exactly is an "open" signup? Is it as opposed to invite only?

  • source
  • parent
  • hideshow 8 child comments
  • [–] 27 points 2 years ago (1 child)

    There was a conversation the other day on this, but I forget the exact details.

    Open sign up is nothing is required to let you sign up.

    Closed is obviously invite only/manually must be accepted.

    But there's the middle ground that wasn't technically open sign up, where the only requirements are filling out a captcha, and usually email verification.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 8 points 2 years ago* (last edited 2 years ago) (3 children)

    On feddit.de, when I registered (during the great reddit migration), I had to write a short introduction about myself too. I believe it was read by a moderator and manually accepted, but I'm not sure.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 6 points 2 years ago (1 child)

    We require an email address and a response to a question on our signups. The response doesn't need to be more than about 5 words, it's just to stop bots putting random characters or single words in there.

    So far, it has seemed to ride that balance between low bar of entry and too hard to spam with bot applicants.

    That said, if I wanted to spam the Fediverse, I'd just spin up my own instance of Lemmy or Mastodon.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 2 years ago (1 child)

    That said, if I wanted to spam the Fediverse, I'd just spin up my own instance of Lemmy or Mastodon.

    Its actually smarter for spammers to infiltrate populated servers. Admins aren't going to have a problem defederating from a pure spam instance. They'll think twice about defederating from an instance with lots of legit users.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 2 years ago

    open signups mean you just register via email and password (on mastodon you still have to verify your mail) and you're good to go. On a lot of platforms you have an "approval" mode were admins have to approve each account that wants to register

  • source
  • parent
  • [–] 45 points 2 years ago (2 children)

    This seems like a good opportunity to prove the resiliency of the protocol to me.

    We will weather this shit.

  • source
  • hideshow 4 child comments
  • [–] 21 points 2 years ago (1 child)

    Yeah, I mean, dealing with issues like this is still better than being on a corporate monarchy like twitter or fb 🤷‍♂️

  • source
  • parent
  • hideshow 2 child comments
  • [–] 13 points 2 years ago (1 child)

    I remember at it's worst spam being every third post on insta and FB.

    And by spam I mean ads.

    And by at it's worst I mean so far.

    So I'm still very happy with the switch

  • source
  • parent
  • hideshow 2 child comments
  • [–] 34 points 2 years ago (5 children)

    How visible is this to the average user? Just wondering because I have yet to see any spam at all in my Mastodon feeds. Big thanks to the admins for being on top of it!

  • source
  • hideshow 10 child comments
  • [–] 11 points 2 years ago* (last edited 2 years ago)

    I saw a little of it. Then I saw the offending instances quickly banned. Then I saw a comment from the admin that they didn't like having to implement bans of entire instances, but it became a necessity until admin of those offending instances took action.

    I dunno, seems like it is working exactly as intended to me.

    And it's far better than a monolithic tech giant. Pointing at Mastodon and calling out spam is utterly silly when compared to the amount of spam on large services. This article reads like a hit piece sponsored by Xitter.

  • source
  • parent
  • [–] 2 points 2 years ago

    The spammers are using a limited number of scraped Fediverse actors, which also included a handful of Lemmy communities.

    If you weren't part of that list, you were mostly safe.

  • source
  • parent
  • [–] [B] 13 points 2 years ago (1 child)

    This is the best summary I could come up with:


    Over the past several days, attackers have targeted smaller Mastodon servers, taking advantage of open registrations to automate the creation of spam accounts.

    While this is not the first spam attack that has impacted the Fediverse, Rochko notes that only larger servers like Mastodon.social had been targeted previously.

    What’s different this time is that the spammers targeted the smaller and even abandoned servers offering open registration, allowing the bad actors to quickly create accounts and generate spam.

    Because Mastodon’s smaller servers are often hobbyist projects run by enthusiasts they were vulnerable to this sort of attack.

    Many servers were simply shut off as their admins decided it would be easiest to wait out the attack or abandon Mastodon altogether.

    “At the moment, there are no good built-in tools to handle this, as this is a complex issue — federated networks are not easy!


    The original article contains 1,023 words, the summary contains 143 words. Saved 86%. I'm a bot and I'm open source!

  • source
  • hideshow 2 child comments
  • [–] 3 points 2 years ago

    To peoplw who hasn't seen any spam next time there is a wave block some of the subs you don't like, disable show read post , enable mark as read on scroll and set sort to all and top hour. I found it buy runjing out of conetent on all top day

  • source
  • [–] -2 points 2 years ago

    here we go time to die and go back to instagram or whatever

  • source