Conversation

Notices

1. Embed this notice
   Blake Leonard (blake@fosstodon.org)'s status on Tuesday, 20-Feb-2024 00:58:09 JST Blake Leonard

   • Tim Chambers
   • Mastodon
   • ( hellekin )
   • Michael Fisher
   • Jeff Atwood
   • Erlend Sogge Heggen
   • michaell

   @michaell @mjf_pro @erlend @tchambers @Mastodon @codinghorror @how Spam accounts that wait have a bigger chance of being caught before they do damage, especially considering a lot of spam accounts are somewhat obvious. Plus, bumping that up during the warmup period, if you notice you're in a spam wave, might also reset or extend the warmup for those already waiting (good against spammers, bad for people). One-per-account admin notifications could be sent if someone tries.

   • Embed this notice
     Erlend Sogge Heggen (erlend@writing.exchange)'s status on Tuesday, 20-Feb-2024 00:58:07 JST Erlend Sogge Heggen

     in reply to

     • Tim Chambers
     • Mastodon
     • Emelia 👸🏻
     • ( hellekin )
     • Michael Fisher
     • Jeff Atwood
     • michaell

     @thisismissem @blake @michaell @mjf_pro @tchambers @Mastodon @codinghorror @how

     Would the latest spam wave be considered a ‘sophisticated attack’? Afaik, doesn’t seem like it. I believe Trust Levels could have mitigated this event in a pretty major way with strict rate-limiting on new/unused accounts.

     Tim Chambers repeated this.
   • Embed this notice
     Emelia 👸🏻 (thisismissem@hachyderm.io)'s status on Tuesday, 20-Feb-2024 00:58:09 JST Emelia 👸🏻

     in reply to

     • Tim Chambers
     • Mastodon
     • ( hellekin )
     • Michael Fisher
     • Jeff Atwood
     • Erlend Sogge Heggen
     • michaell

     @blake @michaell @mjf_pro @erlend @tchambers @Mastodon @codinghorror @how this doesn't necessarily work as in more sophisticated attacks, accounts are setup years before and run in an semi-automated fashion interacting and posting news stories before finally activating for misinformation or spam.

     A classic spam filter, especially for mentioned-only posts, would likely handle our spam problem better. As would controls on from whom we accept mentioned-only posts.

     Tim Chambers repeated this.
   • Embed this notice
     Emelia 👸🏻 (thisismissem@hachyderm.io)'s status on Tuesday, 20-Feb-2024 00:58:15 JST Emelia 👸🏻

     in reply to

     • Erlend Sogge Heggen

     @erlend it was sophisticated in that it wasn't just one server being hit, but many, usually ~60-100 at a time, exploiting open registration & in many ways using the fediverse to do a volumetric attack against targets, and the speed at which the attack evolved around mitigation efforts.