Today I received an unprecedented 123 reports from twit.social users who had been targeted by crypto spam. The spam accounts all were from mastodon.social.

I've suspended all the spammers that you reported - thank you! - but now we're going to have to keep an eye on mastodon.social. I know it's the default Masto instance, but it's up to them to prevent the mass creation of spamming accounts.

Otherwise I may have to block the instance.

@leo They're clearly aware of the problem and working to fix it, and realize the consequences of not doing that, but I hear you, and it needed to be said.

Thank you. 👍​

Michael Stanclift (@[email protected])

The urge of some folks to DEFEDERATE because an instance experiences an issue that could pretty easily happen to anyone with open registration, and which at worst provides a minor inconvenience to their users, is TOO DAMN HIGH.

vmst·io
@leo if you do that than @mikahsargent will be blocked and need to create a twit.social account
@turnitoff_onagain @leo That’s OK — I also exist as @mikah.

@mikahsargent @turnitoff_onagain @mikah I would never block you!

Hey, did you ever remember the name of that city planning movie you recommended last week?

@leo I fully support this! You do what you have to do
@leo I received spam from a crypto scammer this morning 😞 my first experience on Mastodon
@markramseydotcom Yeah there was an onslaught from mastodon.social. I suspended every account reported to me and it looks like mastodon.social deleted them all, but please continue to let me know if you get spammed. We need to be very proactive on this.
@winteram Thanks for the report. Seems like mastodon.social may be problematic.
@art not surprising. It’s the Twitter of Mastodon 😂
@leo It sucks, but at the same time I feel a little proud our little Masto has grown up so much to attract the spammers. Aww.
@leo got some, too. For a second there, I thought I was on the bird site! 🤦 Oh well.. in a way, spam might actually be a good sign.. might mean the Fediverse is growing!

@leo

> Otherwise I may have to block the instance.

That sounds as stupid as blocking Google and Microsoft for email. The reason why you don't do that for email is because of your email provider (Fastmail) and Mailroute (presuming you're still using that) apply filters on a per message basis.

You would also have a hard time explaining to others why TWiT isn't visible on a big federation, and why they cannot find you, especially when you're the center of attention at TWiT.

@leo I highly recommend looking at the list of followers for you, some of your staff, and those that your server, to see if blocking mastodon.social would do more harm than good. I for example would not be able to see your posts, or your staffs if you went forward with that decision.

Being honest with you, I have not received any spam in my mentions or DMs. Maybe twit.social is on the receiving end in particular due to some kind of popularity or being associated to you?

@leo you have the balls others are lacking
@leo Ditto for our instance. On your last episode of TWIT you mentioned that you screen new accounts. I do the same. It’s a little extra work, but helps keep the bots and spammers away. It ain’t perfect, but it’s better than a wide-open instance!

@leo I’ve received a spam DM, too - for the first time on Mastodon. I couldn’t send the report due to an error message (“instance doesn’t exist”). I tried both - reporting it just to twit.social and additionally to an mastodon.social admin.

However blocking mastodon.social completely would be a twit-dealbreaker for me since too many of my friends are over there. Would be handy to be able to block 0-follower direct messages from people you don’t follow instead.

@leo must be challenging.. I’ve had a few of these spam messages, reported every one of them. If there’s anything else we can do, let us know. Thanks for keeping/managing this instance.
@leo Thank you for your efforts! Really appreciate it, and that you run this instance in the first place!
@leo I just filter out everything with crypto. It’s the biggest scam in modern history! 🤣
@leo they did announce yesterday they were aware and were actively working to stop the deliberate spam bot attack against their server. They noted they were temporarily activating account approval while working on this.
Many instances were choosing to block them temporarily due to the massive spam attack campaign.
Not seen where things stand for them yet.
Edit: Yeah...Eugen Rochko
@Gargron was posting. Hope they got it.
@leo We need less mastodon.social and more mozilla.social. 🥰

@leo

That would be unfortunate but I get why you may need to do that.

Since it is the default server and collects most of the donations from users they need to put some investment into moderation.