We are aware of an ongoing wave of subscription spam throughout the fediverse.
We are investigating avenues to mitigate this, but they will likely involve deep changes in the sign-up flow that may break sign-up from existing applications.
In the meantime, you can find helpful resources at https://about.iftas.org/2026/09/11/boom-protocol-spam/
about.iftas.org/2026/09/11/boom-protocol-spam/
Replying to @MastodonEngineering@mastodon.social
How about a mandatory default to "No Open Enrollments"?
Like, you know, @Mastodon dot Social
Oh...
Last Checked: 2026-09-23 06:01
Signups Open: Yes
I see...
Here: https://mastodon.fediverse.observer/mastodon.social
#Mastodon #BPSpam #OpenEnrollment
mastodon.fediverse.observer/mastodon.social
Replying to @FinchHaven@hachyderm.io
@FinchHaven @MastodonEngineering @Mastodon I'm relatively certain that is in fact the default at install, along with a warning before allowing new account creation.
Very few of these spam campaigns federate across the network, they tend to be a local problem, so if you have the tooling and/or staff to deal with it...
@jaz @FinchHaven @MastodonEngineering @Mastodon
Yeah, v4.2.8 changed the default to being manual approval for new installs: https://github.com/mastodon/mastodon/releases/tag/v4.2.8
github.com/mastodon/mastodon/releases/tag/v4.2.8
⁂