Email or username:

Password:

Forgot your password?
neatchee's posts Back to profile
4 posts total
neatchee

Hey #MastoAdmin / #FediAdmin folks, there's a spam wave happening.

They are using QR codes with random color schemes so you can't use blurhash filters. And there is no text other than username direct mentions

Spam usernames are random strings, on poorly moderated servers as usual

Anyone have recommendations for mitigation?

If you don't have an admin team that can handle properly auditing account registrations and dealing with reports quickly, I strongly recommend disabling open registrations on your servers for now

#boost #spam

Hey #MastoAdmin / #FediAdmin folks, there's a spam wave happening.

They are using QR codes with random color schemes so you can't use blurhash filters. And there is no text other than username direct mentions

Spam usernames are random strings, on poorly moderated servers as usual

Anyone have recommendations for mitigation?

4 November at 5:36 | Open on urusai.social
qugalet
@neatchee >new spam
>it's japs with fucking discord. AGAIN

please ban these japs from internet, i'm begging you :BocchiDead:
4 November at 6:57 | Open on pl.m0e.space
picofarad

@neatchee heh, if you don't disable open registration (or at least email + captcha) you get several new accounts a day that never post but somehow output traffic (spam DMs?).

Also, curiously, there's been a bunch of Matrix spam lately, too. Invites to DM and invites to external servers.

4 November at 8:12 | Open on noauthority.social
Мя :sparkles_lesbian:

@neatchee we use this project
github.com/halcy/mastodon_mod_
It runs small ML models to calculate similarity of text/images

Just now, I tried to throw some spammer QRs into it, and looks like it works. There will be false positives, so you should monitor generated reports

4 November at 9:19 | Open on mastodon.ml
neatchee

From a human behavior analysis standpoint, this image is absolutely fascinating. There is so much information about human behavior that can be extracted from the data represented here

EDIT: OMFG 1701 IS THE DESIGNATION OF THE STAR SHIP ENTERPRISE (NCC-1701). TREKKIES WHY ARE YOU LIKE THIS?!? :zerotwoevillaugh:

#security #anthropology #psychology

A heat graph showing the most and least commonly used 4-digit pin number based on 3.4 million records from data breaches. The first two digits are on the vertical axis, from 00 to 99. The second two digits are on the horizontal axis from 00 to 99. Frequency of use is a color scale from white to yellow to orange to black. Several interesting segments are annotated, such as the high frequency of use for repeating digits like 1212 or 5353 as a yellow diagonal line bisecting the graph, or birth years (pins starting with 19) as a horizontal yellow line centered around the location 1975. There is a scattering of black and nearly black locations for the most rare pins with little apparent reasoning. The value 1701 is also highlighted as a very common pin code with no obvious reason
14 May at 5:13 | Open on urusai.social
Show previous comments
Mizah

@neatchee Inhales…

AUTHORIZATION CODE NCC-1701-D

They learned secure authentication methods from the best! :3

14 May at 11:57 | Open on macrofurs.social
Marta Threadbare

@neatchee WHY? because I use my card like once a year and there are limited attempts to log in, better use a number I always remember, it's either that or 1138.

14 May at 12:44 | Open on retro.pizza
Fuck Work

@neatchee

It's funny because 4 digits is a tiny keyspace for a modern computer to search as it is and generally people assume they are protected by the entirety of that key space, when in reality, most passwords can be cracked much more efficiently by statistically shrinking the key space, because of how predictable our behavior is.

14 May at 16:10 | Open on kolektiva.social
neatchee
Show previous comments
daïgla

@neatchee Das ist alles höchst erstaunlich …

21 April at 12:03 | Open on mastodon.social
ari/капля :meow_heartenby:

@neatchee You are more careful with this, otherwise Tetris will be banned in his homeland :neocat_laugh:

21 April at 14:03 | Open on toot.lgbt
iwein

@neatchee boosted for appropriate use of Comic Sans.

21 April at 14:18 | Open on mas.to
neatchee

#PSA #Feditip #feditips #infrastructure #Mastodon #HowItWorks

Mastodon is built differently. Just like the birdsite, you won't see every toot in existence but the 'why' is different. On birdsite, an #algorithm decided. Here, it's your #social connections that truly, organically determine what you see.

It works because it gives you control over who you interact with, and the people you interact with shape the timelines of you and all your neighbors.

IMAGE CREDIT: axbom.com/mastodon-tips/

The visibility of a toot flowchart In what timeline will a toot appear? For a public toot by user @hello ... Are you following @hello? If yes then toot shows in your Home timeline. If no... Is @hello on your instance? If yes then toot shows in your Local timeline. If no... Does someone on your instance follow @hello? If yes then toot shows in your Federated timeline. If no... Did someone on your instance boost @hello’s toot, or search its URL? If yes then toot shows in your Federated timeline. If no then Toot never reaches your instance.
15 Nov 2022 at 19:24 | Open on urusai.social
さよなら皆さん

@neatchee clearest explanation I have seen and now I understand exactly how it works, thanks!

9 Jul 2023 at 2:44 | Open on urusai.social
Tigerlily

@neatchee Oh this is actually neat! Thank you for making this :spyfam_anya_sparkle:

21 Dec 2023 at 1:28 | Open on urusai.social
Go Up