Conversation

Notices

1. Embed this notice
   Jeff ( #TeamNormal ) (jeff@newsie.social)'s status on Thursday, 08-Dec-2022 01:58:07 JST Jeff ( #TeamNormal )

   Several Mastodon instances (including Newsie) have come under cyber-attack recently by state-level actors.

   If you are the admin of a Mastodon Instance that overlaps arts, human rights, civil society, journalism, or democracy and would like FREE cyber security protection from Cloudflare as part of Project Galileo please reach out as Fourth Estate is a long-time Project Galileo partner

   See: https://www.cloudflare.com/galileo/

   #mastoadmin #mastodon

   • Embed this notice
     Kris Nóva (nova@hachyderm.io)'s status on Thursday, 08-Dec-2022 05:34:43 JST Kris Nóva

     in reply to

     • Wary Jerry
     • cuan_knaggs

     @jerry @mensrea @jeff

     I am medium skeptical here.

     "State-level actors" sounds big but.. what exactly is going on?

   • Embed this notice
     Wary Jerry (jerry@infosec.exchange)'s status on Thursday, 08-Dec-2022 05:34:44 JST Wary Jerry

     in reply to

     • Kris Nóva
     • cuan_knaggs

     @mensrea @jeff @nova I would be interested in learning more what they’ve been observing. Cloudflare is… contentious.

   • Embed this notice
     cuan_knaggs (mensrea@freeradical.zone)'s status on Thursday, 08-Dec-2022 05:34:45 JST cuan_knaggs

     in reply to

     • Wary Jerry
     • Kris Nóva

     @jeff i'm also sure the likes of @jerry and @nova would have insights to give

   • Embed this notice
     Kris Nóva (nova@hachyderm.io)'s status on Thursday, 08-Dec-2022 05:39:30 JST Kris Nóva

     in reply to

     • Wary Jerry
     • Jake Jarvis :unverified:
     • cuan_knaggs

     @jake @jerry @mensrea @jeff

     This is the DDoS threat from the other day?

   • Embed this notice
     Jake Jarvis :unverified: (jake@fediverse.jarv.is)'s status on Thursday, 08-Dec-2022 05:39:31 JST Jake Jarvis :unverified:

     in reply to

     • Wary Jerry
     • Kris Nóva
     • cuan_knaggs

     @nova @jerry @mensrea @jeff

     the concept of the attack was admittedly pretty sophisticated and clever, but the JavaScript screamed script kiddie to me, so I'm still wondering what conclusions to draw from that ?♂️

     I'm definitely worried that this week was just practice, though...