Cyberbullying Gone Global: Fediverse Spam and Operation Beleaguer
(blog.fyralabs.com)
from nmtake@lemm.ee to fediverse@lemmy.ml on 22 Feb 2024 12:52
https://lemm.ee/post/24526393
from nmtake@lemm.ee to fediverse@lemmy.ml on 22 Feb 2024 12:52
https://lemm.ee/post/24526393
Thorough report about the recent Fediverse spam.
Related posts:
- We seem to be getting attacked. - lemmy.giftedmc.com/post/235816
- Solutions and origins of the spam wave currently hitting the Fediverse - feddit.cl/post/1883287
- Mastodon CVE Report - hachyderm.io/@maegul/111944073448637061
- Remote User Impersonation and Takeover via Cache Poisoning - arcanican.is/excerpts/…/discovery.htm
- Remote user impersonation and takeover - github.com/mastodon/…/GHSA-3fjr-858r-92rw
threaded - newest
Sounds like there are some very competent folks in the fediverse.
@nmtake @fediverse >Akkoma is currently leading in this regard with their MRF feature, which allows administrators to write arbitrary polices to rewrite or delete messages
Yeah, bub, about that: https://akkoma.dev/AkkomaGang/akkoma/src/branch/develop/lib/pleroma/web/activity_pub/mrf.ex#L67
You're not allowed to reject or mangle activities of specific types in your own policies, and said change was introduced for no reason other than spite. Pleroma, which Akkoma rips off, has no such restrictions.
Interesting. I didn’t know about Akkoma, Pleroma, and MRF. For a future reference,
Ugh, that article is black text on black background