Conversation

Notices

1. Embed this notice
   kaia (kaia@brotka.st)'s status on Tuesday, 23-May-2023 05:08:06 JST kaia
   anyone with a recommendation how to defend against the spam attacks from new accounts of instances with their registration open? :akko_please:
   • Embed this notice
     :blobcathug: (jain@blob.cat)'s status on Tuesday, 23-May-2023 05:08:05 JST :blobcathug:

     in reply to
     @kaia
     first thing is to reject them... anything your instance miss can be refetched later...
     second: if you are fast enough, just delete the accounts in admin fe and wait 2-3 days until the admin fixed the issues and the queues got cleared and remove the block again.
   • Embed this notice
     :blobcathug: (jain@blob.cat)'s status on Tuesday, 23-May-2023 05:09:59 JST :blobcathug:

     in reply to

     • :blobcathug:
     @kaia if its too much work to do it in admin-fe, then i recommend either exporting the users via sql and do either block them by sending them to the blocking api or use sql to delete all activites, objects, notifications and users
   • Embed this notice
     God's Silliest Soldier (frailleaf@silliness.observer)'s status on Tuesday, 23-May-2023 05:14:47 JST God's Silliest Soldier

     in reply to

     • crafti
     @kaia @crafti NO? that goes against the idea of federation pal
     :blobcathug: likes this.
   • Embed this notice
     kaia (kaia@brotka.st)'s status on Tuesday, 23-May-2023 05:14:48 JST kaia

     in reply to

     • crafti
     @crafti
     can we have a domain whitelist? :thinking_cirno:
   • Embed this notice
     crafti (crafti@akkoma.0x68756773.moe)'s status on Tuesday, 23-May-2023 05:14:49 JST crafti

     in reply to
     @kaia not really until fedi software has safe guards for this
   • Embed this notice
     stanford@social.arclight.pro's status on Tuesday, 23-May-2023 05:14:52 JST stanford

     in reply to

     • crafti

     @kaia @crafti It would probably block a ton of smaller instances :(

     :blobcathug: likes this.
   • Embed this notice
     :blobcathug: (jain@blob.cat)'s status on Tuesday, 23-May-2023 05:16:35 JST :blobcathug:

     in reply to

     • stanford
     @stanford @kaia thats very very bad tho... fedi doesnt have something like a bounce message / deny message... if a unrelated user send you a DM the admins of their instance and your instance probably cant really comprehend why its not working as expected
   • Embed this notice
     stanford@social.arclight.pro's status on Tuesday, 23-May-2023 05:16:40 JST stanford

     in reply to

     @kaia Not sure about akkoma, but on Mastodon you can disable DMs from accounts you don't follow.

   • Embed this notice
     :blobcathug: (jain@blob.cat)'s status on Tuesday, 23-May-2023 05:18:37 JST :blobcathug:

     in reply to

     • God's Silliest Soldier
     @FrailLeaf @kaia does that work even when its not the same user?
   • Embed this notice
     God's Silliest Soldier (frailleaf@silliness.observer)'s status on Tuesday, 23-May-2023 05:18:38 JST God's Silliest Soldier

     in reply to
     @kaia https://256.lt/mrf/similar_policy.ex
     
     ># needs build_cachex("spam", limit: 1024) in lib/pleroma/application.ex
     ># and {:ex_lsh, version: "~> 0.4"} in mix.exs
     
     then
     >sudo -Hu pleroma MIX_ENV=prod mix deps.get
     >sudo -Hu pleroma MIX_ENV=prod mix ecto.migrate
     >restart pleroma/akkoma
     
     
     are you familiar with editing the source? I ask because i don't see you programming posting much
   • Embed this notice
     God's Silliest Soldier (frailleaf@silliness.observer)'s status on Tuesday, 23-May-2023 05:19:39 JST God's Silliest Soldier

     in reply to

     • :blobcathug:
     @Jain @kaia yeah, its hashing the post content
     :blobcathug: likes this.
   • Embed this notice
     crafti (crafti@akkoma.0x68756773.moe)'s status on Tuesday, 23-May-2023 05:26:36 JST crafti

     in reply to

     • crafti
     • stanford
     @kaia @stanford Imagine if Pleroma had a "DIY MRF" with this interface lmao
     on-lain ✔ᵛᵉʳᶦᶠᶦᵉᵈ likes this.
   • Embed this notice
     crafti (crafti@akkoma.0x68756773.moe)'s status on Tuesday, 23-May-2023 05:26:37 JST crafti

     in reply to

     • crafti
     • stanford
     @stanford @kaia of course "if user has no biography || (account age < 2 weeks && no users following)" => block dm, is a good idea too
     
     you can get creative 🤷
   • Embed this notice
     crafti (crafti@akkoma.0x68756773.moe)'s status on Tuesday, 23-May-2023 05:26:38 JST crafti

     in reply to

     • stanford
     @stanford @kaia account age is easy to avoid, I think it's really just a mix. I think "if user is not being followed by your peers"
     "if user has not interacted with you prior"
     => block DM
   • Embed this notice
     stanford@social.arclight.pro's status on Tuesday, 23-May-2023 05:26:40 JST stanford

     in reply to

     • crafti

     @crafti @kaia What about something like "Account age < 2 weeks" block DM ?

   • Embed this notice
     crafti (crafti@akkoma.0x68756773.moe)'s status on Tuesday, 23-May-2023 05:26:41 JST crafti

     in reply to

     • stanford
     @stanford @kaia a combination of those + should trigger on DM
   • Embed this notice
     :blobcathug: (jain@blob.cat)'s status on Tuesday, 23-May-2023 06:38:10 JST :blobcathug:

     in reply to

     • stanford
     @stanford @kaia tbh, idk if that is a good idea... but it could be a solution... point is, one should build a specification or at least talk, and both of that wasnt done by mastodon even tho they implemented this feature already in a more or less broken state... thats kinda bad tho
   • Embed this notice
     stanford@social.arclight.pro's status on Tuesday, 23-May-2023 06:38:15 JST stanford

     in reply to

     • :blobcathug:

     @kaia @Jain I send you a message, your instance/system whatever blocks it based on your conditions and then automatically replies to it informing me it got blocked due to spam reasons.

     Like when you send an email to somewhere where the mailserver have blocked you.

   • Embed this notice
     kaia (kaia@brotka.st)'s status on Tuesday, 23-May-2023 06:38:16 JST kaia

     in reply to

     • :blobcathug:
     • stanford
     @stanford @Jain
     auto-respond? :blobcatsweat:
   • Embed this notice
     stanford@social.arclight.pro's status on Tuesday, 23-May-2023 06:38:18 JST stanford

     in reply to

     • :blobcathug:

     @Jain @kaia You maybe could do some sort of auto-respond?