Lots of new people out there... #welcome
Here are my #introductions
Also big advocate of #openhardware.
I'm kind of libertarian but closer to Chomsky than Rand.
Apparently in AWS you can make it so an IAM user can start EC2 instances and stop EC2 instances but *not* be able to reboot/restart them...like reboot is a totally separate and unrelated action.
I suppose the opposite is a probable use case (allowing reboot but not stop if you don't trust your users to leave important instances running) but I can't figure out the use of the other way around.
NO REBOOT FOR YOU. You must shut down first, then ponder the meaning of life before you start!
"We find that Zoom has “rolled their own” encryption scheme, which has significant weaknesses. In addition, we identify potential areas of concern in Zoom’s infrastructure, including observing the transmission of meeting encryption keys through China."
Move Fast & Roll Your Own Crypto: A Quick Look at the Confidentiality of Zoom Meetings - The Citizen Lab
Adventures in Mastodon Admin
...anyways I'm getting very amusing spam invite requests now, by way of Russia, literally all from 188.8.131.52/24 and all putting ads for shitty websites in the comment.
And the account name ALWAYS ends with "mus".
...and so on-mus.
I'd block that IP range but it isn't enough volume to bother and it amuses me. Like, what's the point of this spammer? It's an absurdly low effort attempt on their part.
Adventures in Mastodon Admin
Since my quiet little instance was getting a number of spam accounts signing up but not confirming, and deleting unconfirmed users rather foolishly spawning thousands of tasks to announce to the fediverse users none of them should know about, I decided to make new users request an invite.
This has been good. Now these spam signups show as "pending" instead of unconfirmed so I can reject without clogging up my sidekiq (still not sure why unconfirmed is different)...
Saw today that even Signal is having capacity problems. https://twitter.com/signalapp/status/1245031128097906690?s=20
Mastodon tech question
So I occasionally get garbage user accounts being created by spambots that are never confirmed, presumably because they don't have access to the email address that the confirmation link was sent to. I try to delete these on a regular basis.
Except that for each unconfirmed user deleted THOUSANDS of "delete actor" tasks are created to notify the whole known fediverse of the user deletion. WHY?? Unconfirmed users should NEVER be known outside the local instance right?
Proprietor of coales.co, Python wrangler, tech tinkerer, advocate for freedom and openness 🇨🇦
Micro-blogging site operated by Mark Shane Hayden of Coalesco Digital Systems Inc. We are located in Alberta, Canada. This is NOT intended to be a commercial/promotional site! Registration is open to anyone interested in civil discussions on any interesting topic--especially technology, current events and politics.