craftxbox

View original page

@craftxbox@transfur.social · Joined ⁨Nov⁩ ⁨2022⁩

Developer & Sysadmin. Webmaster @ transfur.social. Postmaster of many.

Website
craftxbox.com verified
Official Staff
transfur.social verified

#mastoadmin #fediadmin Seeing a new spamwave that i haven't seen reported on yet. Mass-mention combined with an open redirector, google.<tld>/share.google?<etc>, Seems to layer the redirection even further. One of these i saw redirected to a porn scam site but the latest ones seem to hit to a nya5.com and die there instead of completing.

Sample: ghostarchive.org/archive/RWnsm (whenever it finishes archiving, it hasn't yet at time of posting)
mastodon.world/@groupsorlink/1 (probably will get deleted shortly)

ghostarchive.org/archive/RWnsm

we now finally have ModSecurity as a WAF for transfur.social. hopefully this helps me filter out automated spam way easier than the limited tools cloudflare gives us.

Bonus upside being able to do json-aware body text filtering for unacceptable content like CSAM hashtags and bigotry, which was previously done with a patch from fedibird that was rather flaky and sometimes just leaked stuff through for no discernible reason.

#fediadmin #mastoadmin

modsecurity.org/