After another spam wave, we're so grateful for @iftas

Their quick action prevented a repeat of the spam wave earlier in the year and things seem to be under control.

Thankfully, our complex signup process held up and the spam accounts involved in this attack weren't able to set-up on our instance! 💪

You can support IFTAS and the work they do to prevent & slow attacks like this here: https://about.iftas.org/donate/

#Spam #FediAdmin #MastoAdmin #Moderation

Support IFTAS

Other Ways to Donate Donor-Advised Funds click here. Stock, privately-held securities, or cryptocurrency, see our listing on Endaoment.org Your employer may have a matching program, double your don…

^IFTAS

Jump, jump, jump! Everybody loves content layout shift.

Really, @Gargron just happily releases this and nobody checks if it works? What happened to using multiple browsers to test? What happened to using CSS that works?
#css #mastodon #mastoadmin #html #ui #ux #bug

We just released Mastodon 4.2.13 and 4.1.20. They contain a few bug fixes, a security fix (high severity, only impacting Ruby <= 3.2) and a critical security in a dependency is you use SAML authentication (CVE-2024-45409).

Release notes and upgrade instructions are available on our GitHub Releases page: https://github.com/mastodon/mastodon/releases/

#mastoadmin

Releases · mastodon/mastodon

Your self-hosted, globally interconnected microblogging community - mastodon/mastodon

^GitHub

Are you an admin of a fedi instance? Consider adding #Tor Federation support!

• Mastodon
• Pleroma
• Misskey and forks
• Mitra

#MastoAdmin #FediAdmin

Quick example of federating with darknet instances from clearnet

Quick example of federating with darknet instances from clearnet - 001-proxy.md

^Gist

I'd been wondering for a while why my Digital Ocean bill kept creeping up despite not deploying new stuff. I noticed I was using way more storage in Spaces than expected, even though I'd moved Peertube to Wasabi. Maybe I'd left some videos behind?

Uh, no. I had no idea that Mastodon didn't do media cache clearing on its own until last week. That was added to the docs in 2020 (https://github.com/mastodon/documentation/commit/4617ea900a3f84e6d4393dee2bcf8dcf39a92e5a) and I spun up this server in 2019.

1.6 TB. Took 4 days to clear 4 years of cache.

#MastoAdmin

feat: add a section on periodic cleanup tasks (#816) · mastodon/documentation@4617ea9

* feat: add a section on periodic cleanup tasks I asked in Discord today about which `tootctl` tasks are good to run on a regular basis (as there are a lot of cleanup jobs). It seems that `media...

^GitHub

For folks outside the instance, I just added this blocklist to help combat the spam wave we've been experiencing: https://github.com/Mastodon-DE/blocklists/blob/main/spam/2024-02-15/2024-02-15-spam-mute-list.md

If your instance is on the list you may not be able to interact normally with merveilles.town. If you've handled the spam and would like to refederate please reach out to me! #mastoadmin

If you run a Mastodon server, especially if it's small and only lightly moderated, I would STRONGLY suggest enabling 'Approval required for sign up'. It means that your server is MUCH less likely to become the next source of spam in this wave we're seeing.

#MastoAdmin #Fediblock

yes.

also hi brodie this is like the 3rd time we're (probably) involved in a video of yours again since you're gonna be making a video on this #fediblock#fediblockmeta#fediadmins#fediadmin#mastoadmin#mastoadmins#spam

Goodness me! The ActivityPub network is chatty.
In the last 6 hours, I've received 371 different messages to my single-user inbox.

Most of which seem to be from servers announcing users have been deleted. They're not users or servers I've seen before.

Is this normal?

#MastoAdmin #MastodonAPI

I've added a feature request to #Mastodon to display geotags.

https://github.com/mastodon/mastodon/issues/29002

#MastoAdmin

Display embedded GeoTags · Issue #29002 · mastodon/mastodon

Pitch When an ActivityPub post contains geolocation metadata, that location should be displayed in the user interface. For example, the account @edent_location@location.edent.tel creates AP posts i...

^GitHub

New Mastodon Bugfix Release is available. ✨ v4.1.5 ✨

https://github.com/mastodon/mastodon/releases/tag/v4.1.5

We're now starting to update all customer instances.

#mastoadmin

Release v4.1.5 · mastodon/mastodon

⚠️ We recently released critical security updates, so if you are still using 4.1.2 or below, 4.0.4 or below, or 3.5.8 or below, please update as soon as possible (see the release notes for v4.1.4)....

^GitHub

:NoMeta: #MetaBlock :NoMeta:

For users, mods, admins: Importable #blocklist of #Meta domains: https://drive.google.com/file/d/12pZEz9zMuNyNeJ7y3iK5OIPqn1ALpbwn/view?usp=sharing

Sources:
1. https://gitea.whitespashe.uk/Whitespashe/MetaDomains/src/branch/main/
2. https://datakra.sh/assets/lizard.txt

For #Fediverse server admins: #iptables commands to block inbound (loads of Threads users) & outbound traffic (like data mining) from Meta's IP addresses: https://drive.google.com/file/d/1lipuAfIC9Q22VClDbTgI_7KZ_aajVZDm/view?usp=sharing

Sources:
1. https://ipinfo.io/AS32934
2. https://bgp.he.net/AS32934#_prefixes
3. https://burrow.rabbits-at.work/media/24c3c118bf8a0d683de9179738ca3453c14372ebc85911bd29a99937b85b5288.txt

#FediBlock #FediPact #FediAdmin #MastoAdmin

MetaDomains

The list of meta/Facebook domains

^{Git, but without all the Shit.}

I think I found the domain name of #Threads, #Meta's new #Fedi-enabled service, also codenamed #Project92, #P92, and #Barcelona.

URL: https://threads.net
IPv4: 157.240.22.63
IPv6: 2a03:2880:f231:c5:face:b00c:0:43fe (note "face:b00c")

Looking up threads.net returns #Instagram's logo, the title "Barcelona" and "this page isn't available" (probably because it's not open yet).

I'd recommend every #MastoAdmin #FediAdmin in the #FediPact to #FediBlock them before they go live on the #Fediverse!

We, the moderation and administration of tech.lgbt, are signing the Anti-Meta Fedi Pact in fellowship with our peer communities. (https://vantaa.black/pact)

There is over a decade of precedent that Facebook will not have users' best interests as their guiding principle but rather profit margins, if it joins the Fediverse.

We at tech.lgbt have long held the belief that corporation owned instances are a threat to the core of the Fediverse: freedom for users to be themselves and to be a part of their communities. The 2010s saw the loss of online freedom when the majority of the Web was consolidated into a few destinations, and Facebook entering here could lead us back to centralization. Furthermore, NDAs for server admins will constrain our sovereignty online by binding us legally from disrupting their business.

We are not products. We are people, and we do not welcome Facebook in this space.

#meta #FediPact #facebook #project92 #mastodon #fediverse #FediBlockMeta #FediAdmin #p92 #MastoAdmin

By the way, We have joined hundreds of admins and mods across the fediverse in pledging to block Facebook/Meta-owned servers (and have already blocked a couple likely domains): https://fedipact.online/

Facebook's right-wing bias, lack of moderation, and extremely successful attempt to essentially replace the web in vast portions of the world have been disastrous for the Internet and society in general. I have also seen several cycles of giant corporations running services using open protocols and, once they've captured a big enough userbase, switching to a proprietary system and then killing it off whenever they feel like it.

A better Internet is possible—but not funded by ads and run for profit by a single giant evil corporation.

#MastoAdmin #FediAdmin #meta #MetaMeta

I run a single-user personal Mastodon instance. Using relays help fill out what I can see and interact with.

Unfortunately public relays don't seem to live long. I just checked my relay list, and a bunch of ones I added have disappeared from the internet. Also, the Mastodon admin relays page doesn't show if a relay is actually working.

I found https://relaylist.com/ which has a list of alive relays.

Are there any semi-private moderated relays that people can recommend?

#mastoadmin

#Fediblock

bassam.social is full of #queerphobic users which also don't mind #harassing me and other users.

A few examples:
- https://bassam.social/@ahm7d25
- https://bassam.social/@fearless
- https://bassam.social/notice/AW11Ee8majGy5vDFse
- https://bassam.social/notice/AW0zhmGtEymBnjlftI
- https://bassam.social/notice/AW0zTY0PU3WbVDH3ke

It is already blocked on mstdn.social and masto.ai

Please boost this to spread awareness! ❤️

related to https://mstdn.social/@MagicLike/110407558763753155

#FollowerPower #FuckQueerphobia
#Queerphobia
#Harassment
#MastoAdmin #FediAdmin #MastoMod #FediMod

أحمد أبوسلطان (@ahm7d25@bassam.social)

^{bassam.social}

I recently tried to set up a https://liberapay.com so that users could help contribute to server costs of our instance. I linked it to a Stripe account and am now being told by Stripe that my account isn't permitted because "Crowdfunding" is a "Restricted Business" type.

I thought this was a common set up. Does anyone have experience with this? I can appeal, is there something I should say or do? Perhaps I didn't describe my Stripe account properly and got flagged?

#askFedi #MastoAdmin #MastoDev #HometownAdmin

Liberapay

We help you fund the creators and projects you appreciate.

^{liberapay.com}

Content warning: masto/fedi self-hosting Click to open/close

solid thread of resources (via @maloki) for anybody who's thinking about setting up their own instance and doesn't want to spend their first week playing nazi whack-a-mole: https://rage.love/@maloki/109298808353533546

#mastoAdmin #meta #fediAdmin

maloki 🍍 (@maloki@rage.love)

Has anyone made a fresh post with the recommended basic block list if you set up a new instance that I can boost!?

^Rage.love