I thought we had mostly avoided the Mastodon spam from the last couple of days, but it must’ve hit some users because there were a bunch of extra spam reports. I continue to have mixed feelings about how Mastodon handles private messages. Need to rethink Micro.blog’s implementation.
@manton most of the spam that hit yesterday at least to me where from accounts with no posts, followers or followings. Burn-accounts. Also to multiple recipients per post. Not sure that helps you.
@Archimage It does help. I think we should detect that and ignore those messages, although spammers could do a better job of creating fake accounts too.
@miguel Yeah, they aren’t exactly DMs, more like private mentions. They aren’t encrypted and they are readable to anyone running your Mastodon server, for example.
@manton ah gotcha. They’re just more like… non-public posts with me and one other user and the server admin
@manton glad i was able to help. Also may want to pass it through a spam filter looking for things like onlyfans in the body, which is what all the spam was pushing.
