{"generator":"GNU social 2.0.2-dev","title":"Conversation","totalItems":12,"items":[{"actor":{"id":"https:\/\/c.im\/users\/TimWardCam","displayName":"Tim Ward \u2b50\ud83c\uddea\ud83c\uddfa\ud83d\udd36 #FBPE","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/87339-original-tmp20230111201009.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/87339-96-20230416050553.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/87339-48-20230416050553.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/87339-24-20230416050553.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"87339"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/87339-96-20230416050553.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cambridge Liberal Democrat. Techie (retired). One time pilot (lapsed PPL).Profile picture: street furniture - I take pictures of interesting street furniture when travelling. In this context it *is* appropriate for the street lighting columns to be gold plated.","url":"https:\/\/c.im\/@TimWardCam","portablecontacts_net":{"preferredUsername":"TimWardCam","displayName":"Tim Ward \u2b50\ud83c\uddea\ud83c\uddfa\ud83d\udd36 #FBPE","note":"Cambridge Liberal Democrat. Techie (retired). One time pilot (lapsed PPL).Profile picture: street furniture - I take pictures of interesting street furniture when travelling. In this context it *is* appropriate for the street lighting columns to be gold plated."}},"content":"

@jwildeboer<\/a> Why would an AI company need millions of copies of the same data?<\/p>","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/c.im\/users\/TimWardCam\/statuses\/116833731671509902","object":{"id":"https:\/\/c.im\/users\/TimWardCam\/statuses\/116833731671509902","objectType":"note","content":"

@jwildeboer<\/a> Why would an AI company need millions of copies of the same data?<\/p>","url":"https:\/\/c.im\/@TimWardCam\/116833731671509902","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.wildeboer.net\/users\/jwildeboer\/statuses\/116832387648136125","url":"https:\/\/social.wildeboer.net\/@jwildeboer\/116832387648136125"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.wildeboer.net\/users\/jwildeboer"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817590","source":"ActivityPub"}},"published":"2026-06-29T18:39:46+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/c.im\/@TimWardCam\/116833731671509902"},{"actor":{"id":"https:\/\/mastodon.nz\/users\/rupert","displayName":"Rupert V\/","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/179092-original-tmp20260126205329.webp","rel":"avatar","type":"image\/webp","width":399,"height":399},{"url":"https:\/\/gnusocial.jp\/avatar\/179092-96-20260128175534.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/179092-48-20260128175534.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/179092-24-20260128175534.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"179092"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/179092-96-20260128175534.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"He\/him\/his. Writing code for a living for 35 years and counting. I've lived in England, Minnesota, and (currently) Aotearoa New Zealand :laserkiwi:.Married with two off-site adult children.Profile pic is a loon (state bird of Minnesota) in the form of the Star Wars Rebel Alliance symbol. Boost=Other people should see this. Like=Thank you for posting this. Boost+Like=Other people should see this and I endorse the commentary.","url":"https:\/\/mastodon.nz\/@rupert","portablecontacts_net":{"preferredUsername":"rupert","displayName":"Rupert V\/","note":"He\/him\/his. Writing code for a living for 35 years and counting. I've lived in England, Minnesota, and (currently) Aotearoa New Zealand :laserkiwi:.Married with two off-site adult children.Profile pic is a loon (state bird of Minnesota) in the form of the Star Wars Rebel Alliance symbol. Boost=Other people should see this. Like=Thank you for posting this. Boost+Like=Other people should see this and I endorse the commentary."}},"content":"

@TimWardCam<\/a> @jwildeboer<\/a> Because their trawler is as sloppily coded as everything else they do.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mastodon.nz\/users\/rupert\/statuses\/116833768828604946","object":{"id":"https:\/\/mastodon.nz\/users\/rupert\/statuses\/116833768828604946","objectType":"note","content":"

@TimWardCam<\/a> @jwildeboer<\/a> Because their trawler is as sloppily coded as everything else they do.<\/p>","url":"https:\/\/mastodon.nz\/@rupert\/116833768828604946","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/c.im\/users\/TimWardCam\/statuses\/116833731671509902","url":"https:\/\/c.im\/@TimWardCam\/116833731671509902"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.wildeboer.net\/users\/jwildeboer"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/c.im\/users\/TimWardCam"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817591","source":"ActivityPub"}},"published":"2026-06-29T18:39:45+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/mastodon.nz\/@rupert\/116833768828604946"},{"actor":{"id":"https:\/\/hachyderm.io\/users\/dalias","displayName":"Rich Felker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/40873-original-tmp20221202140938.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-48-20221207231635.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-24-20221207231635.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"40873"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa","url":"https:\/\/hachyderm.io\/@dalias","portablecontacts_net":{"preferredUsername":"dalias","displayName":"Rich Felker","note":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa"}},"content":"

@rupert<\/a> @TimWardCam<\/a> @jwildeboer<\/a> Exactly. This is *ideological* - they deem actually-engineered solutions that do things efficiently as a backwards \"dirty human\" way of doing things. Obviously since their AI slop is superior, they should do the scraping in whatever way the AI slop vomits out code to do it.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116834851630372436","object":{"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116834851630372436","objectType":"note","content":"

@rupert<\/a> @TimWardCam<\/a> @jwildeboer<\/a> Exactly. This is *ideological* - they deem actually-engineered solutions that do things efficiently as a backwards \"dirty human\" way of doing things. Obviously since their AI slop is superior, they should do the scraping in whatever way the AI slop vomits out code to do it.<\/p>","url":"https:\/\/gnusocial.jp\/notice\/12817592","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/mastodon.nz\/users\/rupert\/statuses\/116833768828604946","url":"https:\/\/mastodon.nz\/@rupert\/116833768828604946"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.wildeboer.net\/users\/jwildeboer"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/c.im\/users\/TimWardCam"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.nz\/users\/rupert"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817592","source":"ActivityPub"}},"published":"2026-06-29T18:39:44+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/12817592"},{"actor":{"id":"https:\/\/hachyderm.io\/users\/dalias","displayName":"Rich Felker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/40873-original-tmp20221202140938.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-48-20221207231635.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-24-20221207231635.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"40873"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa","url":"https:\/\/hachyderm.io\/@dalias","portablecontacts_net":{"preferredUsername":"dalias","displayName":"Rich Felker","note":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa"}},"content":"

@alan<\/a> @jwildeboer<\/a> Yes, it is entirely Apple's and Google's fault that they are hosting botnet malware in their \"walled gardens\" as legitimate and vetted software. Without that, the botnets would not exist on any viable scale.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116834842542173381","object":{"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116834842542173381","objectType":"note","content":"

@alan<\/a> @jwildeboer<\/a> Yes, it is entirely Apple's and Google's fault that they are hosting botnet malware in their \"walled gardens\" as legitimate and vetted software. Without that, the botnets would not exist on any viable scale.<\/p>","url":"https:\/\/hachyderm.io\/@dalias\/116834842542173381","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116833486729996166","url":"https:\/\/lighthouse.co.im\/@alan\/116833486729996166"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.wildeboer.net\/users\/jwildeboer"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/lighthouse.co.im\/users\/alan"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817578","source":"ActivityPub"}},"published":"2026-06-29T18:36:59+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/hachyderm.io\/@dalias\/116834842542173381"},{"actor":{"id":"https:\/\/hachyderm.io\/users\/dalias","displayName":"Rich Felker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/40873-original-tmp20221202140938.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-48-20221207231635.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-24-20221207231635.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"40873"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa","url":"https:\/\/hachyderm.io\/@dalias","portablecontacts_net":{"preferredUsername":"dalias","displayName":"Rich Felker","note":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa"}},"content":"RT @dalias @jwildeboer 2\/2
The deeper problem is upstream. Apple, Google and Microsoft are allowing SDK-injected bandwidth harvesting through their app stores. Until that's addressed at source, we're all playing whack-a-mole with an essentially infinite residential IP pool. This isn't a mail security problem -- it's a platform accountability problem.","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116834838461718926\/activity","object":{"id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116833486200912888","objectType":"note","content":"

@jwildeboer<\/a> 1\/2
Solidarity -- you're not alone in this. The one-attempt-per-IP pattern is specifically designed to be invisible to anything threshold-based. CrowdSec helps at the edges but a fresh residential IP making a single SASL attempt looks like a legitimate user having a bad day. Your manual cronjob approach is the right call. Automation just gives you false confidence.<\/p>","url":"https:\/\/lighthouse.co.im\/@alan\/116833486200912888","status_net":{"notice_id":null}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817576","source":"ActivityPub","repeat_of":"12817574"}},"published":"2026-06-29T18:36:27+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"title":"dalias repeated a notice by alan","verb":"share","url":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116834838461718926\/activity"},{"actor":{"id":"https:\/\/social.wildeboer.net\/users\/jwildeboer","displayName":"Jan Wildeboer \ud83d\ude37:krulorange:","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/2767-original-tmp20251201220825.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/2767-96-20251201231956.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/2767-48-20251201222121.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/2767-24-20251201231956.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"2767"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/2767-96-20251201231956.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"My private account. Posts\/Opinions are my own. Focused on #Open and TCP\/ID, identity ownership in the real and digital world. 3D printer. Can solder and repair. Antifascist. European. Policy hacker. Rambles around at times. He\/Him\/His $argon2id$v=19$m=512,t=256,p=1$SWmoDffV\/hOu+\/Vii5Nxsw$zYZ5n+cXxZLKoLnXZJjll1JWcCFyiRVli7xOPqu63GM Blocks threads.net Works at Red Hat.","url":"https:\/\/social.wildeboer.net\/@jwildeboer","portablecontacts_net":{"preferredUsername":"jwildeboer","displayName":"Jan Wildeboer \ud83d\ude37:krulorange:","note":"My private account. Posts\/Opinions are my own. Focused on #Open and TCP\/ID, identity ownership in the real and digital world. 3D printer. Can solder and repair. Antifascist. European. Policy hacker. Rambles around at times. He\/Him\/His $argon2id$v=19$m=512,t=256,p=1$SWmoDffV\/hOu+\/Vii5Nxsw$zYZ5n+cXxZLKoLnXZJjll1JWcCFyiRVli7xOPqu63GM Blocks threads.net Works at Red Hat."}},"content":"

@alan<\/a> These botnets are more or less immune to rate limiting, as they use many (and I mean millions) of IP addresses fro a run and each IP address is only used for a few requests before it is being put back in the queue. The IP addresses are also from many different providers, so a (sub-)net wide block also doesn't help. I wrote about those \"residential IP proxies in [1] and [2].<\/p>

[1] https:\/\/jan.wildeboer.net\/2025\/02\/Blocking-Stealthy-Botnets\/<\/a>
[2] https:\/\/jan.wildeboer.net\/2025\/04\/Web-is-Broken-Botnet-Part-2\/<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/social.wildeboer.net\/users\/jwildeboer\/statuses\/116832567702010267","object":{"id":"https:\/\/social.wildeboer.net\/users\/jwildeboer\/statuses\/116832567702010267","objectType":"note","content":"

@alan<\/a> These botnets are more or less immune to rate limiting, as they use many (and I mean millions) of IP addresses fro a run and each IP address is only used for a few requests before it is being put back in the queue. The IP addresses are also from many different providers, so a (sub-)net wide block also doesn't help. I wrote about those \"residential IP proxies in [1] and [2].<\/p>

[1] https:\/\/jan.wildeboer.net\/2025\/02\/Blocking-Stealthy-Botnets\/<\/a>
[2] https:\/\/jan.wildeboer.net\/2025\/04\/Web-is-Broken-Botnet-Part-2\/<\/a><\/p>","url":"https:\/\/social.wildeboer.net\/@jwildeboer\/116832567702010267","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116832411918631647","url":"https:\/\/lighthouse.co.im\/@alan\/116832411918631647"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/lighthouse.co.im\/users\/alan"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817573","source":"ActivityPub"}},"published":"2026-06-29T18:36:12+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/social.wildeboer.net\/@jwildeboer\/116832567702010267"},{"actor":{"id":"https:\/\/lighthouse.co.im\/users\/alan","displayName":"al","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/375307-original-tmp20260409083945.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/375307-96-20260629183527.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/375307-48-20260629183527.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/375307-24-20260629183527.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"375307"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/375307-96-20260629183527.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Running an independent consultancy focused on resilient, accountable digital systems and the informed use of cloud and AI. Keeping infrastructure and data understandable, auditable, and under client control.","url":"https:\/\/lighthouse.co.im\/@alan","portablecontacts_net":{"preferredUsername":"alan","displayName":"al","note":"Running an independent consultancy focused on resilient, accountable digital systems and the informed use of cloud and AI. Keeping infrastructure and data understandable, auditable, and under client control."}},"content":"

@jwildeboer<\/a> 1\/2
Solidarity -- you're not alone in this. The one-attempt-per-IP pattern is specifically designed to be invisible to anything threshold-based. CrowdSec helps at the edges but a fresh residential IP making a single SASL attempt looks like a legitimate user having a bad day. Your manual cronjob approach is the right call. Automation just gives you false confidence.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116833486200912888","object":{"id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116833486200912888","objectType":"note","content":"

@jwildeboer<\/a> 1\/2
Solidarity -- you're not alone in this. The one-attempt-per-IP pattern is specifically designed to be invisible to anything threshold-based. CrowdSec helps at the edges but a fresh residential IP making a single SASL attempt looks like a legitimate user having a bad day. Your manual cronjob approach is the right call. Automation just gives you false confidence.<\/p>","url":"https:\/\/lighthouse.co.im\/@alan\/116833486200912888","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.wildeboer.net\/users\/jwildeboer\/statuses\/116832567702010267","url":"https:\/\/social.wildeboer.net\/@jwildeboer\/116832567702010267"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.wildeboer.net\/users\/jwildeboer"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817574","source":"ActivityPub"}},"published":"2026-06-29T18:36:11+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/lighthouse.co.im\/@alan\/116833486200912888"},{"actor":{"id":"https:\/\/lighthouse.co.im\/users\/alan","displayName":"al","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/375307-original-tmp20260409083945.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/375307-96-20260629183527.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/375307-48-20260629183527.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/375307-24-20260629183527.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"375307"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/375307-96-20260629183527.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Running an independent consultancy focused on resilient, accountable digital systems and the informed use of cloud and AI. Keeping infrastructure and data understandable, auditable, and under client control.","url":"https:\/\/lighthouse.co.im\/@alan","portablecontacts_net":{"preferredUsername":"alan","displayName":"al","note":"Running an independent consultancy focused on resilient, accountable digital systems and the informed use of cloud and AI. Keeping infrastructure and data understandable, auditable, and under client control."}},"content":"

@jwildeboer<\/a> 2\/2
The deeper problem is upstream. Apple, Google and Microsoft are allowing SDK-injected bandwidth harvesting through their app stores. Until that's addressed at source, we're all playing whack-a-mole with an essentially infinite residential IP pool. This isn't a mail security problem -- it's a platform accountability problem.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116833486729996166","object":{"id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116833486729996166","objectType":"note","content":"

@jwildeboer<\/a> 2\/2
The deeper problem is upstream. Apple, Google and Microsoft are allowing SDK-injected bandwidth harvesting through their app stores. Until that's addressed at source, we're all playing whack-a-mole with an essentially infinite residential IP pool. This isn't a mail security problem -- it's a platform accountability problem.<\/p>","url":"https:\/\/lighthouse.co.im\/@alan\/116833486729996166","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116833486200912888","url":"https:\/\/lighthouse.co.im\/@alan\/116833486200912888"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.wildeboer.net\/users\/jwildeboer"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817575","source":"ActivityPub"}},"published":"2026-06-29T18:36:10+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/lighthouse.co.im\/@alan\/116833486729996166"},{"actor":{"id":"https:\/\/hachyderm.io\/users\/dalias","displayName":"Rich Felker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/40873-original-tmp20221202140938.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-48-20221207231635.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-24-20221207231635.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"40873"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa","url":"https:\/\/hachyderm.io\/@dalias","portablecontacts_net":{"preferredUsername":"dalias","displayName":"Rich Felker","note":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa"}},"content":"RT @dalias @alan @jwildeboer The attacks have thwarted all of those tactics. They use UAs constructed from real UA tokens with minor variations. They have graduated from cheap VMs on Huawei Cloud and Digital Ocean to random IoTs in millions of households and mobile devices in millions of hands.
A few days ago I was able to measure over a thousand simultaneous sessions, each from a different \/16 network.
My response to that isn\u2019t taking the site down, but I am shedding load aggressively.","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116834836065563996\/activity","object":{"id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116832411918631647","objectType":"note","content":"

@jwildeboer<\/a> It's weird that the response is to take sites down rather than reach for technical countermeasures -- rate limiting, UA filtering, datacenter ASN blocks. Is the residential proxy problem genuinely that hard to solve at scale, or is the downtime itself the point? A visible protest signal rather than a quiet WAF tweak feels like a different kind of statement about where people think the leverage actually is?<\/p>","url":"https:\/\/lighthouse.co.im\/@alan\/116832411918631647","status_net":{"notice_id":null}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817570","source":"ActivityPub","repeat_of":"12817568"}},"published":"2026-06-29T18:35:41+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"title":"dalias repeated a notice by alan","verb":"share","url":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116834836065563996\/activity"},{"actor":{"id":"https:\/\/lighthouse.co.im\/users\/alan","displayName":"al","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/375307-original-tmp20260409083945.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/375307-96-20260629183527.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/375307-48-20260629183527.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/375307-24-20260629183527.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"375307"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/375307-96-20260629183527.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Running an independent consultancy focused on resilient, accountable digital systems and the informed use of cloud and AI. Keeping infrastructure and data understandable, auditable, and under client control.","url":"https:\/\/lighthouse.co.im\/@alan","portablecontacts_net":{"preferredUsername":"alan","displayName":"al","note":"Running an independent consultancy focused on resilient, accountable digital systems and the informed use of cloud and AI. Keeping infrastructure and data understandable, auditable, and under client control."}},"content":"

@jwildeboer<\/a> It's weird that the response is to take sites down rather than reach for technical countermeasures -- rate limiting, UA filtering, datacenter ASN blocks. Is the residential proxy problem genuinely that hard to solve at scale, or is the downtime itself the point? A visible protest signal rather than a quiet WAF tweak feels like a different kind of statement about where people think the leverage actually is?<\/p>","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116832411918631647","object":{"id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116832411918631647","objectType":"note","content":"

@jwildeboer<\/a> It's weird that the response is to take sites down rather than reach for technical countermeasures -- rate limiting, UA filtering, datacenter ASN blocks. Is the residential proxy problem genuinely that hard to solve at scale, or is the downtime itself the point? A visible protest signal rather than a quiet WAF tweak feels like a different kind of statement about where people think the leverage actually is?<\/p>","url":"https:\/\/lighthouse.co.im\/@alan\/116832411918631647","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.wildeboer.net\/users\/jwildeboer\/statuses\/116832387648136125","url":"https:\/\/social.wildeboer.net\/@jwildeboer\/116832387648136125"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.wildeboer.net\/users\/jwildeboer"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817568","source":"ActivityPub"}},"published":"2026-06-29T18:35:27+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/lighthouse.co.im\/@alan\/116832411918631647"},{"actor":{"id":"https:\/\/toad.social\/users\/grumpybozo","displayName":"\ud83c\udd98Bill Cole \ud83c\uddfa\ud83c\udde6","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/78300-original-tmp20250311213202.webp","rel":"avatar","type":"image\/webp","width":208,"height":208},{"url":"https:\/\/gnusocial.jp\/avatar\/78300-96-20250312114552.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/78300-48-20250312035138.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/78300-24-20250314061357.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"78300"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/78300-96-20250312114552.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Dad, Husband, Sysadmin, Anti-Spammer, Disillusioned Radical Lefty, Old GenX-er. I'm fat and I have a headache|AntiFa Patriot|BLACK LIVES MATTER!Living on occupied land previously shared by many Anishinaabe peoples.#Detroit #Michigan #USA #Sysadminnery #BadDad #ADHD #infosec #IWeepSixColors #Spam #ASF #SpamAssassin","url":"https:\/\/toad.social\/@grumpybozo","portablecontacts_net":{"preferredUsername":"grumpybozo","displayName":"\ud83c\udd98Bill Cole \ud83c\uddfa\ud83c\udde6","note":"Dad, Husband, Sysadmin, Anti-Spammer, Disillusioned Radical Lefty, Old GenX-er. I'm fat and I have a headache|AntiFa Patriot|BLACK LIVES MATTER!Living on occupied land previously shared by many Anishinaabe peoples.#Detroit #Michigan #USA #Sysadminnery #BadDad #ADHD #infosec #IWeepSixColors #Spam #ASF #SpamAssassin"}},"content":"

@alan<\/a> @jwildeboer<\/a> The attacks have thwarted all of those tactics. They use UAs constructed from real UA tokens with minor variations. They have graduated from cheap VMs on Huawei Cloud and Digital Ocean to random IoTs in millions of households and mobile devices in millions of hands.
A few days ago I was able to measure over a thousand simultaneous sessions, each from a different \/16 network.
My response to that isn\u2019t taking the site down, but I am shedding load aggressively.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/toad.social\/users\/grumpybozo\/statuses\/116834210049185518","object":{"id":"https:\/\/toad.social\/users\/grumpybozo\/statuses\/116834210049185518","objectType":"note","content":"

@alan<\/a> @jwildeboer<\/a> The attacks have thwarted all of those tactics. They use UAs constructed from real UA tokens with minor variations. They have graduated from cheap VMs on Huawei Cloud and Digital Ocean to random IoTs in millions of households and mobile devices in millions of hands.
A few days ago I was able to measure over a thousand simultaneous sessions, each from a different \/16 network.
My response to that isn\u2019t taking the site down, but I am shedding load aggressively.<\/p>","url":"https:\/\/toad.social\/@grumpybozo\/116834210049185518","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/lighthouse.co.im\/users\/alan\/statuses\/116832411918631647","url":"https:\/\/lighthouse.co.im\/@alan\/116832411918631647"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.wildeboer.net\/users\/jwildeboer"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/lighthouse.co.im\/users\/alan"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817569","source":"ActivityPub"}},"published":"2026-06-29T18:35:22+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/toad.social\/@grumpybozo\/116834210049185518"},{"actor":{"id":"https:\/\/social.wildeboer.net\/users\/jwildeboer","displayName":"Jan Wildeboer \ud83d\ude37:krulorange:","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/2767-original-tmp20251201220825.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/2767-96-20251201231956.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/2767-48-20251201222121.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/2767-24-20251201231956.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"2767"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/2767-96-20251201231956.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"My private account. Posts\/Opinions are my own. Focused on #Open and TCP\/ID, identity ownership in the real and digital world. 3D printer. Can solder and repair. Antifascist. European. Policy hacker. Rambles around at times. He\/Him\/His $argon2id$v=19$m=512,t=256,p=1$SWmoDffV\/hOu+\/Vii5Nxsw$zYZ5n+cXxZLKoLnXZJjll1JWcCFyiRVli7xOPqu63GM Blocks threads.net Works at Red Hat.","url":"https:\/\/social.wildeboer.net\/@jwildeboer","portablecontacts_net":{"preferredUsername":"jwildeboer","displayName":"Jan Wildeboer \ud83d\ude37:krulorange:","note":"My private account. Posts\/Opinions are my own. Focused on #Open and TCP\/ID, identity ownership in the real and digital world. 3D printer. Can solder and repair. Antifascist. European. Policy hacker. Rambles around at times. He\/Him\/His $argon2id$v=19$m=512,t=256,p=1$SWmoDffV\/hOu+\/Vii5Nxsw$zYZ5n+cXxZLKoLnXZJjll1JWcCFyiRVli7xOPqu63GM Blocks threads.net Works at Red Hat."}},"content":"

My timeline (which contains a lot of project leaders\/sysadmins from big projects) is filling with posts about a new, ongoing wave of what most likely are scrapers collecting training data for \u201eAI\u201c companies. They seem to be using botnets (or what some call \u201eresidential IP proxies\u201c to make it sound a bit more legitimate) with millions of IP addresses, making it really hard to defend against. Some have decided to take their sites down until this is over. This is now the world we live in :(<\/p>","generator":{"id":"tag:gnusocial.jp,2026-08-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/social.wildeboer.net\/users\/jwildeboer\/statuses\/116832387648136125","object":{"id":"https:\/\/social.wildeboer.net\/users\/jwildeboer\/statuses\/116832387648136125","objectType":"note","content":"

My timeline (which contains a lot of project leaders\/sysadmins from big projects) is filling with posts about a new, ongoing wave of what most likely are scrapers collecting training data for \u201eAI\u201c companies. They seem to be using botnets (or what some call \u201eresidential IP proxies\u201c to make it sound a bit more legitimate) with millions of IP addresses, making it really hard to defend against. Some have decided to take their sites down until this is over. This is now the world we live in :(<\/p>","url":"https:\/\/social.wildeboer.net\/@jwildeboer\/116832387648136125","status_net":{"notice_id":null}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-29:objectType=thread:nonce=3ed973fad272ef9c","notice_info":{"local_id":"12817401","source":"ActivityPub"}},"published":"2026-06-29T18:00:58+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/social.wildeboer.net\/@jwildeboer\/116832387648136125"}],"links":[{"url":"https:\/\/gnusocial.jp\/conversation\/6513349","rel":"alternate","type":"text\/html"}]}