Conversation
Notices
-
Embed this notice
@cassidyclown @RustyCrab access logs can be bretty nice for looking up search queries, could even filter them for certain words or phrases to filter out the pedos and immediately block them. I think i saw p doing this on FSE, that's where i got it from
-
Embed this notice
@Vaghrad @RustyCrab @cassidyclown Yeah, especially since they seemed to probe it, like they'd hit an account that got banned, then immediately go to the registration page. For a while, there were so many of them searching for a specific Pawoo account that I killed off any IP that searched for that account (only one post had federated to FSE, picture of a child and a mega.nz link from an account that had already been banned from Pawoo, so I made an educated guess; I killed that account and anyone that had interacted with the post). I think the only time I ever *automatically* killed IPs just for a search term, usually it would ping me and I'd look.
The nice thing about them is they can be analyzed after the fact for diagnostics. The bad thing about them is they can be analyzed after the fact for feds. The compromise was I'd keep just two days and change around usually, enough that I could spot problems but not enough that I was creating an incentive to send me a subpoena or show up with a warrant. Sometimes I'd keep around aggregates (mostly performance stuff, or when I was trying to figure out why I got a $500 bandwidth overage bill) or excerpts (e.g., if something weird was going on, I'd grep the file for the weirdness and squirrel it away so if it happened again, I could check if it was the same thing or something else).
-
Embed this notice
@p @Vaghrad @RustyCrab @cassidyclown Seen the news?
https://clubcyberia.co/objects/c32015e5-ff29-44e4-a600-d0149fc1a5a4
https://clubcyberia.co/objects/87705575-5e73-4263-b733-4a27a94361d4
https://clubcyberia.co/objects/4edb6574-0af1-49ee-a4ed-ae67344d29f6
-
Embed this notice
@mint @Vaghrad @RustyCrab @cassidyclown @p
>click on link
>nothing happens
Thanks bro
-
Embed this notice
@not_benis @Vaghrad @RustyCrab @cassidyclown @p Looks like Cassidy locked the frontend, drop the links into the search bar on your instance.
-
Embed this notice
@mint @Vaghrad @RustyCrab @cassidyclown I had not seen that, no. I wonder how legit the call was; I have not heard of them just making a phone call out of the blue.
-
Embed this notice
@p @Vaghrad @RustyCrab @cassidyclown @mint brother, you've seen me cut my fedi teeth on FSE last decade, you'd think I'd have figured this shit out by now (I have, in case it wasn't clear)
-
Embed this notice
@not_benis @Vaghrad @RustyCrab @cassidyclown @mint Put it in your instance's search box.