Notices by Kris Nóva (nova@hachyderm.io), page 11

@ian @Taniwha We believe the attacker could point the DNS records they control to an arbitrary target. We are unsure how advanced they are and unsure if federated servers will be successfully in pulling data from the targets.

@ian @Taniwha

Immediate suggested actions to block the following domains and close registrations.

*.activitypub-troll.cf
*.misskey-forkbomb.cf
*.repl.co

Mastodon domain blocks are confirmed to extend to subdomains. Please block the domain.

https://github.com/mastodon/mastodon/issues/11558

@ian @Taniwha

Also suggested to block subdomains with dnsmasq.

@ian @Taniwha

We have scraped the JavaScript ActivityPub source code and have retained a copy of it.

At this time we are not publishing the source code, however we have it on file if needed for historical purposes.

REDACTED

@ian @Taniwha

Our notes from incident response.

https://hackmd.io/rD9nsTz1QeuPT-erxqjY-A?view

We are currently investigating DDoS attacks which involve #Hachyderm. I will continue to post in the thread below.

Please see my entire thread for more details.

After the initial steps, A domain block is the next step, and cleaning your databases is a final step.

https://hachyderm.io/@nova/109451616906969285

The best advice for any #mastoadmin is to "suspend" the following domains in their preferences>moderation>federation>add new domain block

*.activitypub-troll.cf
*.misskey-forkbomb.cf
*.repl.co

Seriously. This blog on scaling #Mastodon from #Hachyderm 's own @hazelweakly is in my opinion the best resource to date on everything you need know about scaling Mastodon.

https://hazelweakly.me/blog/scaling-mastodon/

I am burnt out. I need a break. See everyone next week. ✌️

@paris sounds like a rootin tootin good time

Good news: My #OSINT channels are strongly indicating

1. Trump is legally obliged to post on his social media platform truth social at least 6 hours before posting anywhere else.

2. Trump believes twitter platform has “a lot of problems” and does not intend to leverage his recently instated account.

I don’t think he can resist the dopamine/attention. I give him 24 hours. He will most likely need to reset his password. I’m convinced his account is being manually rebuilt internally at Twitter.

Source on the 6 hour comments:

“Even if Elon Musk brings Donald Trump back to Twitter, the former president has agreed to post on Truth Social first, according to a regulatory filing from Digital World Acquisition Group on Monday”

https://www.sec.gov/Archives/edgar/data/0001849635/000119312522150801/d226205ds4.htm

Trump is back on Twitter.

I will be covering things as they unfold from an #OSINT perspective. Live Now!

https://twitch.tv/krisnova

I have deactivated my twitter account. I will toggle it on/off every 3 days to park my namespace. I cannot condone that website anymore.

I misspoke earlier. I will not be judging anyone else for staying on the site. I trust and respect you all to make your own decisions. I do encourage those that can, to stop contributing ad revenue to the platform. Stop legitimizing twitter if you can.

Okay so help me and @quintessence settle a debate. Does this mean that #hachyderm has 75k total user accounts or 12k total user accounts? ?

I put the lesson of not using language pronoun pointers and references on par with looking for motorcycles while driving.

Small changes in your habits today, can have a big impact on those consuming your messages and those trying to make sense of your points.

Disclaimer: you should always respect gender pronouns of people and if a person requests for you to use pronouns over their name you should do your best to oblige.

If you share “discreet” or “complete” languages in your reply instead of using pronouns as pointers, your message is shareable within its own boundaries of a message.

The same goes for people.

“I fucking love @nova”

and

“I agree she is great”

means that only the first message has the context for sharing.

This is very important while mastodon is young and our accessibility game is unknown. Sometimes a person might not have easy access to the original context.

For example if someone sent the message

“I fucking love XML”

and you replied

“It is horrible”

Your reply is only valuable so long that it can easily look up the original message for context. Which means it’s not likely to be shared or boosted because your reply is an incomplete message.

If you changed your reply

“XML is horrible”

You are no longer using a pronoun to reference the concept of XML and anyone who knows the rust borrow checker can appreciate why this is good practice.

Protip that will sound unusual if you don’t understand the nuance:

✨ Don’t put pronouns in your posts/replies ✨

(Keep reading: Not about gender or someone’s pronouns.)

This tip matters even more on Mastodon/Fediverse because of the lack of QT. Think of pronouns as “pointers” or “references” to topics.

While talking about topics, try not to use “implicit references” but rather mention the topic directly. Especially in replies, so they can be boosted and have full context.

(More below)