Conversation

Notices

1. Embed this notice
   Kay Ohtie (kayohtie@blimps.xyz)'s status on Thursday, 27-Jun-2024 23:08:22 JST Kay Ohtie

   • BeAware :fediverse:

   @BeAware surprised it's being that 'polite' instead of just snorfing the public API; if it had a known distinct user agent I could add it to my block at the Nginx level

   • Embed this notice
     BeAware :fediverse: (beaware@social.beaware.live)'s status on Thursday, 27-Jun-2024 08:10:23 JST BeAware :fediverse:

     I love when Fediverse scrapers get Fediblocked MULTIPLE times then start making new instances under obscure domain names to hide their data stealing...🤬

     Awakari created a new instance on Indy.rest on June 24. 4 days after I called for Fediblock on their other attempt at ban evasion (awakari.app)

     Indy.rest seems to be down at the moment. However, given their track record, this is a required block if you value your data not being sold.

     #Fedi #Fediverse #Fediblock #FediScraper #ActivityPub #MastoAdmin #FediAdmin

   • Embed this notice
     Kay Ohtie (kayohtie@blimps.xyz)'s status on Thursday, 27-Jun-2024 17:59:43 JST Kay Ohtie

     in reply to

     • BeAware :fediverse:

     @BeAware is there a known user agent?

   • Embed this notice
     BeAware :fediverse: (beaware@social.beaware.live)'s status on Thursday, 27-Jun-2024 23:08:21 JST BeAware :fediverse:

     in reply to

     @KayOhtie It's not polite in my opinion, it's decieving for this very reason. Most people that don't have follow requests on, won't look at everyones profile that follow them. Leaving them vulnerable to this.

   • Embed this notice
     Kay Ohtie (kayohtie@blimps.xyz)'s status on Thursday, 27-Jun-2024 23:12:56 JST Kay Ohtie

     in reply to

     • BeAware :fediverse:

     @BeAware that's why I put the word in quotes to try and convey sarcasm with it: I'm surprised it's 'playing' by AP instead of just skipping that to snag info. I'm saying "I don't know if merely blocking the domain is enough because it might be doing that to appear like there's a choice when it's actually snagging things via the API anyway". I'm trying to be even more cautious than merely blocking it in Mastodon. There is nothing polite about these things, and many folks are so "it's on the Internet I should have access" about it that a domain block in Mastodon isn't enough.