Conversation

Notices

Moon (moon@shitposter.club)'s status on Wednesday, 06-Dec-2023 20:12:01 JST Moon

thanks guys, you pestered me to unblock unauthenticated access, and immediately this dickhead scraped as many timelines as he could, my logs are filled with his requests.

In conversation about a year ago from shitposter.club permalink
- Disinformation Purveyor :verified_think: likes this.
- Machismo (zerglingman@freespeechextremist.com)'s status on Wednesday, 06-Dec-2023 20:12:22 JST Machismo
  in reply to
  
  @Moon Do you know who it is?
  
  In conversation about a year ago permalink
- Moon (moon@shitposter.club)'s status on Wednesday, 06-Dec-2023 20:13:18 JST Moon
  in reply to
  - Machismo
  @Zerglingman read the quoted post
  
  In conversation about a year ago permalink
  
  Machismo likes this.
- Machismo (zerglingman@freespeechextremist.com)'s status on Wednesday, 06-Dec-2023 20:14:33 JST Machismo
  in reply to
  
  @Moon I cannot see a quoted post. FSE strips them from contents (presumably p's still mad at Gleasonator), but I can't see it from other instances either.
  
  In conversation about a year ago permalink
- teknomunk (teknomunk@apogee.polaris-1.work)'s status on Wednesday, 06-Dec-2023 20:16:21 JST teknomunk
  in reply to
  See https://nya.social/notes/818c3d1bdb3e20788eb08e25
  In conversation about a year ago permalink
  Attachments
  1. anatil e\x9f\xf0\xbc\xa5n lu\x00l (@natalie)
    
    there is currently a bot inside MIT IP space, address `18[.]4[.]38[.]176`, scanning fedi at large. i have confirmed this with 5+ unrelated instance admins, large and small instances, across mastodon/misskey/pleroma/akkoma. the bot is poorly behaved. i have observed it making repeated requests, multiple times per second, for the exact same paths (the paths being, generally: user profiles, specific posts, and sometimes following links in posts). returning 403s does not stop this activity. one of my domains received hundreds of additional requests despite replying with 403 to all of them. i have also seen it make requests for paths containing html tags - seems like a badly written parser. the purpose of these requests and what data is being gathered is unclear. PTR on the ip returns `sts-drand03.mit.edu`. a quick web search for "mit drand" brings back https://mitsloan.mit.edu/faculty/directory/david-g-rand and his personal website: https://davidrand-cooperation.com/ (note: other IPs in the /24 also have names in the PTR which match up with names of MIT faculty, but only the .176 IP appears to be involved in this activity). seems he's doing research into "misinformation" and "fake news" on social media. he also appears to be on fedi! so @Drand@techhub.social, given this activity is sourced from an IP with your name on it, could you share the purpose of this traffic? what data is being collected and how is it being used? do you plan to respect robots.txt or identify yourself in your useragent? is there a process for instance admins to opt out of this activity other than blocking the source IP?
  Machismo likes this.
- Machismo (zerglingman@freespeechextremist.com)'s status on Wednesday, 06-Dec-2023 20:18:18 JST Machismo
  in reply to
  @teknomunk @Drand @natalie @Moon I see.
  
  In conversation about a year ago permalink
- Padoru Awoo (awoo@bae.st)'s status on Wednesday, 06-Dec-2023 20:19:41 JST Padoru Awoo
  in reply to
  - Machismo
  @Zerglingman
  Based.
  @Moon
  
  In conversation about a year ago permalink
  
  Machismo likes this.
- Machismo (zerglingman@freespeechextremist.com)'s status on Wednesday, 06-Dec-2023 20:23:37 JST Machismo
  in reply to
  @natalie @Moon @Drand @teknomunk Oh yeah he's found my instance. Nowhere near as rapidly though (about 6/s currently), and the only time he used that UA was on my gitea (I think?):
  /var/log/nginx/access.log:18.4.38.176 - - [05/Dec/2023:18:36:31 +1100] "GET /Zergling_man/clemmy/ HTTP/1.1" 200 47853 "-" "Python-urllib/3.9"
  /var/log/nginx/access.log:18.4.38.176 - - [05/Dec/2023:18:36:32 +1100] "GET /Zergling_man/clemmy/</a> HTTP/1.1" 404 11 "-" "Python-urllib/3.9"
  /var/log/nginx/access.log:18.4.38.176 - - [05/Dec/2023:18:36:32 +1100] "GET /Zergling_man/clemmy/%3C/a%3E HTTP/1.1" 404 9520 "-" "unshortenit 0.4.0"
  
  Has gitea released its AP stuff yet?
  
  In conversation about a year ago permalink
- Moon (moon@shitposter.club)'s status on Wednesday, 06-Dec-2023 20:25:04 JST Moon
  in reply to
  - Machismo
  - teknomunk
  @Zerglingman @teknomunk l thats gitlab, I don't think gitea is doing it yet
  
  In conversation about a year ago permalink
  
  Machismo likes this.
- Machismo (zerglingman@freespeechextremist.com)'s status on Wednesday, 06-Dec-2023 20:25:40 JST Machismo
  in reply to
  - teknomunk
  @Moon @teknomunk oh
  
  In conversation about a year ago permalink
- teknomunk (teknomunk@apogee.polaris-1.work)'s status on Wednesday, 06-Dec-2023 20:34:05 JST teknomunk
  in reply to
  The gitea fork forgejo stilll lists their ActivityPub integration as a work in progress: https://codeberg.org/forgejo/forgejo
  
  > Federation: (WIP) We are actively working to connect software forges with each other through ActivityPub, and create a collaborative network of personal instances.
  In conversation about a year ago permalink
  Attachments
  1. Invalid filename.
    
    forgejo
    
    from forgejo
    
    Beyond coding. We forge. (Code of Conduct: https://codeberg.org/forgejo/code-of-conduct)
  Machismo likes this.
- (mint@ryona.agency)'s status on Wednesday, 06-Dec-2023 21:01:59 JST
  in reply to
  - Machismo
  @Zerglingman @Moon Pleroma simply discards AP object fields unknown to it, and 2.2 FSE is running on long predates quoteposts being merged in upstream. Nothing to do with p's changes, and there's no fallback link since SPC doesn't have InlineQuotePolicy enabled.
  
  In conversation about a year ago permalink
  
  Machismo likes this.
- Machismo (zerglingman@freespeechextremist.com)'s status on Wednesday, 06-Dec-2023 21:03:20 JST Machismo
  in reply to
  @mint @Moon Oh, I see. But even when there is an "RT" or whatever it is in the post, it doesn't show up on FSE.
  
  In conversation about a year ago permalink
- (mint@ryona.agency)'s status on Wednesday, 06-Dec-2023 21:03:38 JST
  in reply to
  - Machismo
  @Zerglingman @Moon Ironically, both the OP and quoted post failed to fetch here since nya.social either has misconfigured ipv6 or nullroutes me (which is strange to do while completely ignoring ipv4).
  
  In conversation about a year ago permalink
  
  Machismo likes this.
- Moon (moon@shitposter.club)'s status on Wednesday, 06-Dec-2023 21:04:08 JST Moon
  in reply to
  - Machismo
  @mint @Zerglingman p could add an mrf I guess to extract the url or something
  
  In conversation about a year ago permalink
  
  Machismo likes this.
- (mint@ryona.agency)'s status on Wednesday, 06-Dec-2023 21:06:13 JST
  in reply to
  - Machismo
  @Moon @Zerglingman Add it on your own side, you can't convince thousands of other instances to do so.
  
  In conversation about a year ago permalink
  
  Machismo likes this.
- Machismo (zerglingman@freespeechextremist.com)'s status on Wednesday, 06-Dec-2023 21:07:17 JST Machismo
  in reply to
  @mint @Moon Quote posts are fake and gay anyway.
  
  In conversation about a year ago permalink
  
  likes this.
- jaf (jeff@misinformation.wikileaks2.org)'s status on Wednesday, 06-Dec-2023 21:44:46 JST jaf
  in reply to
  @Zerglingman @teknomunk @natalie @Moon @Drand email mit netop abuse tbh
  
  In conversation about a year ago permalink
- (mint@ryona.agency)'s status on Wednesday, 06-Dec-2023 21:47:09 JST
  in reply to
  - jaf
  @jeff @Moon 18.0.0.0/11 then, since everything after that is AWS.
  
  In conversation about a year ago permalink
- jaf (jeff@misinformation.wikileaks2.org)'s status on Wednesday, 06-Dec-2023 21:47:10 JST jaf
  in reply to
  
  @Moon deny 18.0.0.0/8;
  
  In conversation about a year ago permalink
- jaf (jeff@misinformation.wikileaks2.org)'s status on Wednesday, 06-Dec-2023 21:51:28 JST jaf
  in reply to
  @mint @Moon aws gets the bullet too
  
  In conversation about a year ago permalink
  
  likes this.
- DJ Solomon (11112011@freespeechextremist.com)'s status on Wednesday, 06-Dec-2023 22:20:01 JST DJ Solomon
  in reply to
  - Machismo
  @Zerglingman @mint @Moon kikel says bright stuff once in a wile
  
  In conversation about a year ago permalink
  
  Machismo likes this.

Public

Conversation

Notices

Feeds