Conversation

Notices

1. Embed this notice
   Pleroma-tan (kirby@lab.nyanide.com)'s status on Tuesday, 30-Jan-2024 05:20:06 JST Pleroma-tan
   How to stop the Chinese from scraping random profiles on your instance:
   
   1. Switch to pleroma (or hell even akkoma will work just use anything but fucking mastodon, don't know about misskey (
   2. Use AdminFE to restrict what unauthenticated users can do with the API, you can disable federated profiles entirely for anonymous visitors
   • Embed this notice
     gray (gray@ryona.agency)'s status on Tuesday, 30-Jan-2024 05:22:04 JST gray

     in reply to
     @kirby 3. Nuke China
     Pleroma-tan likes this.
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Tuesday, 30-Jan-2024 05:24:34 JST Pleroma-tan

     in reply to

     • lamp
     @lamp political figures
     
     Money, money, money....
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Tuesday, 30-Jan-2024 05:24:35 JST Pleroma-tan

     in reply to

     • gray
     @gray that's correct
   • Embed this notice
     lamp (lamp@kitty.haus)'s status on Tuesday, 30-Jan-2024 05:24:36 JST lamp

     in reply to
     @kirby y r the chinese scraping and y should u care
     Pleroma-tan likes this.
   • Embed this notice
     just me (shamyouimo@kpop.social)'s status on Tuesday, 30-Jan-2024 05:25:11 JST just me

     in reply to

     @kirby wdym by scraping

     Pleroma-tan likes this.
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Tuesday, 30-Jan-2024 05:26:36 JST Pleroma-tan

     in reply to

     • just me
     @ShaMyouiMo a script that goes to a website and extracts the information it wants
     
     Then it can do whatever it wants with it!
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Tuesday, 30-Jan-2024 05:26:38 JST Pleroma-tan

     in reply to

     • just me
     @ShaMyouiMo yeah the Chinese are using those
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Tuesday, 30-Jan-2024 05:27:41 JST Pleroma-tan

     in reply to

     • just me
     @ShaMyouiMo they're grabbing stuff off of political figures (lol) and wasting money from admins by doing this on servers (forcing instance to look up profile and retrieve information)
   • Embed this notice
     just me (shamyouimo@kpop.social)'s status on Tuesday, 30-Jan-2024 05:27:42 JST just me

     in reply to

     @kirby oh but what's bad about it

   • Embed this notice
     Phantasm (phnt@fluffytail.org)'s status on Tuesday, 30-Jan-2024 05:29:30 JST Phantasm

     in reply to

     • just me
     @kirby @ShaMyouiMo Usual entry I found is the about page with the admins listed. It then fetches posts from that profile and progressively scrapes everything.
     Pleroma-tan likes this.
     Pleroma-tan repeated this.
   • Embed this notice
     Phantasm (phnt@fluffytail.org)'s status on Tuesday, 30-Jan-2024 05:32:21 JST Phantasm

     in reply to

     • just me
     • Phantasm
     @kirby @ShaMyouiMo They are usually to dumb to look and nodeinfo for some reason. Maybe because Mastodon doesn't expose staff in it. Don't know really.
     Pleroma-tan likes this.
   • Embed this notice
     Phantasm (phnt@fluffytail.org)'s status on Tuesday, 30-Jan-2024 05:34:01 JST Phantasm

     in reply to

     • just me
     @kirby @ShaMyouiMo There was an MIT scraper made by someone for "testing efficiency of censorship on federated networks", that was broken and created tens of requests per second to instances. Effectively creating a Denial of Service for small instances which couldn't handle the load and creating bandwidth for which some people paid for.
     Pleroma-tan likes this.
     Pleroma-tan repeated this.
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Tuesday, 30-Jan-2024 05:35:12 JST Pleroma-tan

     in reply to

     • just me
     • Phantasm
     @phnt @ShaMyouiMo was funny to see that probably a dollar had been wasted on about 10k requests from that guy, most requests resulting in 403s
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Tuesday, 30-Jan-2024 05:35:20 JST Pleroma-tan

     in reply to

     • just me
     • Phantasm
     @phnt @ShaMyouiMo on here at least
   • Embed this notice
     Phantasm (phnt@fluffytail.org)'s status on Tuesday, 30-Jan-2024 05:37:43 JST Phantasm

     in reply to

     • just me
     @kirby @ShaMyouiMo I checked on it before banning the IP and it created a few hundred requests. nothing substantial. Probably didn't even get caught by the Pleroma rate limiting, if it even works.
     Pleroma-tan likes this.
   • Embed this notice
     jaf (jeff@mk.magicka.org)'s status on Tuesday, 30-Jan-2024 05:41:28 JST jaf

     in reply to

     • just me
     • Phantasm

     @phnt@fluffytail.org @kirby@lab.nyanide.com @ShaMyouiMo@kpop.social they are running it on ali cloud now

     Pleroma-tan likes this.
     Pleroma-tan repeated this.
   • Embed this notice
     Phantasm (phnt@fluffytail.org)'s status on Tuesday, 30-Jan-2024 05:46:26 JST Phantasm

     in reply to

     • just me
     • jaf
     @jeff @kirby @ShaMyouiMo Didn't know about that. Probably because everyone banned the MIT IP range :D. I might want to check up on weird number requests when I get more time. Not that I really care, because my instance is open thanks to a Pleroma bug report. Adding screenshots to that issue would be a pain. Linking to the thread was easier.
     Pleroma-tan likes this.
     Pleroma-tan repeated this.
   • Embed this notice
     jaf (jeff@mk.magicka.org)'s status on Tuesday, 30-Jan-2024 05:46:26 JST jaf

     in reply to

     • just me
     • Phantasm

     @phnt@fluffytail.org @kirby@lab.nyanide.com @ShaMyouiMo@kpop.social they are freaking out about "the CCP" scraping accounts rn lmao. same exact traffic different network

     Pleroma-tan likes this.