is anyone else getting random follows from accounts on infosec
-
@varx i think it just has to do with post frequency. the more you post, the more you end up in the firehose, and the more you end up in the firehose, the more attention you attract
-
@jerry @linuxandyarn i do them here and there, but in most cases, people boosting me has a tiny chance someone may want to talk shop, and thats important
@Viss @linuxandyarn anyhow, it’s an arms race and most instances are feeling it. I have a number of sentinel accounts around the fedi and they are getting follows almost every day lately from different instances.
-
@Viss the bots have gotten very good at gaming the moderated signups. Residential IP, protonmail or gmail address, on topic reason for joining, then lay low, make a few posts, follow some accounts, then start posting about how unfair it was for Ukraine to start a war or how Christians are the most persecuted religion. It’s starting to make me crazy. Report them when you see them.
-
@Viss @linuxandyarn anyhow, it’s an arms race and most instances are feeling it. I have a number of sentinel accounts around the fedi and they are getting follows almost every day lately from different instances.
@jerry @linuxandyarn i feel like some of my old twitter experience could be handy here, but unike then, i dont have hadoop access to all the logs, heh
-
@jerry yessir. ive just been blocking them, but i'll start reporting them now.
-
@silhouette @Viss I see all sorts of wacky stuff - that gets discarded. Quite a few of them are copying the contents of bios of other mastodon accounts and using that as the reason to join. I get a lot of “Infosec.exchange requires you to enter a reason to join. You need to enter something believable. Would you like help?” (Variations of that), and lately, it’s been very on point reasons “I work in IT and trying to get into cyber security” and so on. The latest wave is not really discernible based on the reason they provide.
-
@silhouette @Viss I see all sorts of wacky stuff - that gets discarded. Quite a few of them are copying the contents of bios of other mastodon accounts and using that as the reason to join. I get a lot of “Infosec.exchange requires you to enter a reason to join. You need to enter something believable. Would you like help?” (Variations of that), and lately, it’s been very on point reasons “I work in IT and trying to get into cyber security” and so on. The latest wave is not really discernible based on the reason they provide.
@jerry @silhouette do the waves come from any isps or multiple signups from the same host? i get there are residential proxies in use, but im wondering if theres enough volume to spot patterns. or like, web/appserver logs from the same ip - do they do recon before signing up in a way that can get fingerprinted
-
@jerry @linuxandyarn i feel like some of my old twitter experience could be handy here, but unike then, i dont have hadoop access to all the logs, heh
@Viss @linuxandyarn I really don’t know what the point is. The ability to spam or scam tens of people just seems… futile.
-
@jerry @silhouette do the waves come from any isps or multiple signups from the same host? i get there are residential proxies in use, but im wondering if theres enough volume to spot patterns. or like, web/appserver logs from the same ip - do they do recon before signing up in a way that can get fingerprinted
@Viss @silhouette residential US IP addresses, tor exit nodes, and lately protonvpn. They have figured out how to mass create proton accounts because the last few day, protonmail.com and protonvpn IPs have become the strongest signal of a bot (but it’s also used by a lot of legit people)
-
@Viss @linuxandyarn I really don’t know what the point is. The ability to spam or scam tens of people just seems… futile.
@jerry @linuxandyarn dude it boggled the shit out of me at twitter too. to the best of my ability, the only thing i could figure was stuff like
- bot armies to upvote/downvote
- astroturfing campaigns
- people selling 'buy followers' bullshit
- at twitter, verified accounts, but that doesnt happen here
- having bots for harrassment campaigns
- flooding threads / doing raids -
@Viss @silhouette residential US IP addresses, tor exit nodes, and lately protonvpn. They have figured out how to mass create proton accounts because the last few day, protonmail.com and protonvpn IPs have become the strongest signal of a bot (but it’s also used by a lot of legit people)
@jerry @silhouette see you think notifying proton would have some effect but the news coming out of that place telegraphs 'they really dont care so long as the checks are clearing and they dont get creditcard chargebacks'
-
@Viss @linuxandyarn I really don’t know what the point is. The ability to spam or scam tens of people just seems… futile.
-
@jerry @silhouette see you think notifying proton would have some effect but the news coming out of that place telegraphs 'they really dont care so long as the checks are clearing and they dont get creditcard chargebacks'
@Viss I don’t know if it’s that or they have relaxed some things to balloon their user base ahead of, I don’t know, a sale or merger, or investment, or IPO. Would have been a ridiculous thought a few years ago, but lately we are swimming in ridiculousness
-
@oscarsclaws @Viss @linuxandyarn fair enough. That could be it too
-
@Viss I don’t know if it’s that or they have relaxed some things to balloon their user base ahead of, I don’t know, a sale or merger, or investment, or IPO. Would have been a ridiculous thought a few years ago, but lately we are swimming in ridiculousness
@jerry im in several ai/llm chatgroups and the shit i see on the daily is brain melty. if i could still drink i would have pickled my brain by now. one dude, someone you know, is exhibiting straight up signs of obvious ai psychosis. like, dude talks to claude like its his pal. he has conversations with it like its a person. and hes openly saying people dont need to bother with the basics anymore 'because ai'. its bananas.
-
@jerry im in several ai/llm chatgroups and the shit i see on the daily is brain melty. if i could still drink i would have pickled my brain by now. one dude, someone you know, is exhibiting straight up signs of obvious ai psychosis. like, dude talks to claude like its his pal. he has conversations with it like its a person. and hes openly saying people dont need to bother with the basics anymore 'because ai'. its bananas.
@Viss that is painful to think about. I know it happens. I also use Claude, but I don’t really talk to my hammer or my jigsaw, so I have a hard time relating. Maybe I’m just too old.
-
@Viss that is painful to think about. I know it happens. I also use Claude, but I don’t really talk to my hammer or my jigsaw, so I have a hard time relating. Maybe I’m just too old.
@Viss though I will say, I bet my hammer could tell some stories if it could talk. Whew.
-
@Viss that is painful to think about. I know it happens. I also use Claude, but I don’t really talk to my hammer or my jigsaw, so I have a hard time relating. Maybe I’m just too old.
@jerry i bark orders at daybreak/gpt-5.6, and ill cuss at it when it does stuff extremely fucking stupid. in my brain, i picture ren from ren and stimpy inside the body of marvin, the android from hitchhikers guide. oblivious and eager to please
-
@Viss though I will say, I bet my hammer could tell some stories if it could talk. Whew.
@jerry hah! totally!
-
@Viss the bots have gotten very good at gaming the moderated signups. Residential IP, protonmail or gmail address, on topic reason for joining, then lay low, make a few posts, follow some accounts, then start posting about how unfair it was for Ukraine to start a war or how Christians are the most persecuted religion. It’s starting to make me crazy. Report them when you see them.
, he’s doing his absolute best to minimise & shut this shit down 
