I have to be careful with the accounting of the mastodon server. A Prometheus exporter monitors how many files I have and how much storage I use. I checked the implementation and looks like every time it has to count does a couple of dozen calls. Then I calculated it very frequently and spent 20$ in a couple of minutes on API calls. :D
It occurred to me that many, if not most #Mastodon instances are run by one person who maintains the server infrastructure (not just an admin Mastodon account). That leaves large chunks of the fediverse with a Bus Factor of 1, meaning if that one owner was suddenly hit by a bus and died, there would be no one left to maintain an instance.
Ideally, an instance should have at least two trusted people in geographically separate areas who can maintain the server infrastructure.
Please boost this post and tag your instance admin in a reply to see how they are mitigating this risk.
#Mastodon #AdminsOfMastodon #RiskManagement #DisasterRecovery #InfoSec
I will eventually open registrations for evilmeow.com once I feel a bit more comfortable.
I will do it with the long term thinking of maintaining this for long but it is impossible to commit to something forever. The best I can say is that if I ever think that I cannot manage it I'll be more than happy to pass the keys to someone else.
That is also the reason not to reuse the domain for more stuff.
Hi everyone, I just released version 1.1.1 of my #Mastodon #DMARC Survey tool, updated survey results, and additional documentation. This release adds a DNSSEC check and SPF record validation. Error and warning fields are now included in the CSV for easy troubleshooting. This is to help administrators configure DMARC to help prevent attackers from spoofing a domain.
Even if you looked at the results from last Friday, it's worth taking a look at these new results.
https://github.com/seanthegeek/mastodon-dmarc-survey
#Infosec #InformationSecuriy #phish #phishing #spoofing #adminsofmastodon #OpenSource #OpenSourceSoftware #FLOSS #Python #CLI #API
A survey of DMARC deployment across all domains hosting public a Mastodon instance - GitHub - seanthegeek/mastodon-dmarc-survey: A survey of DMARC deployment across all domains hosting public a Mas...