Warning: Some posts on this platform may contain adult material intended for mature audiences only. Viewer discretion is advised. By clicking ‘Continue’, you confirm that you are 18 years or older and consent to viewing explicit content.
Over the weekend, hackers targeted federated social networks like Mastodon to carry out ongoing spam attacks that were organized on Discord, and conducted
Ingress and egress costs are real and those assholes attached images to their spam. Hundreds of posts coming in at 700kb a pop does damage if you’re relying on a cloud provider to store your shit. Then, it gets accessed by all your users.
I definitely have benefited as fellow admins were on top of it to the point of automated removal. That’s one of the main reasons this spam attempt is pathetic.
From the article they said smaller unattended instances were the primary target. So you might not have been one of the instances targeted, and if you don’t have open registration and/or have captcha on then it wouldn’t be an issue either.
They targeted smaller unattended mastodon and misskey instances… to create accounts there and post their spam all over the place including larger instances and lemmy.
Several hundred posts were removed since then.
I saw a few instances had large bills from their CDNs because some spammers uploaded many attachments. I don’t think this is from the current wave of spam about the Japanese discord server though
Costly? They were pretty pathetic spam attempts that are still ongoing.
Ingress and egress costs are real and those assholes attached images to their spam. Hundreds of posts coming in at 700kb a pop does damage if you’re relying on a cloud provider to store your shit. Then, it gets accessed by all your users.
Billing alarms go bing bing bing.
Yeah, I’m running a Lemmy instance maybe we missed out on the bulk of it but it’s been pretty sad over here as far as being able to call it an attack.
Do you have open registration? If not, you probably benefitted from other mods work on this one.
I definitely have benefited as fellow admins were on top of it to the point of automated removal. That’s one of the main reasons this spam attempt is pathetic.
Yup, I’m thankful for their work as well.
From the article they said smaller unattended instances were the primary target. So you might not have been one of the instances targeted, and if you don’t have open registration and/or have captcha on then it wouldn’t be an issue either.
They targeted smaller unattended mastodon and misskey instances… to create accounts there and post their spam all over the place including larger instances and lemmy.
Several hundred posts were removed since then.
The spam was still an issue period. It hit every instance regardless of what you’re saying.
Ok so was it an issue or not? You seem to be saying both
It was a minor inconvenience. Pathetic. You’re speaking from a point of view of not understanding that we’re all connected.
Ingress is typically free, but yes
deleted by creator
Privacy. Lemmy leaks your ip all over the internet. Mastodon does server fetch.
I saw a few instances had large bills from their CDNs because some spammers uploaded many attachments. I don’t think this is from the current wave of spam about the Japanese discord server though