Clarification

You do not have to worry about your mastodon.social (m.s) account being defederated.

There is a well meaning, but misleading post currently promoted that suggests you should move your m.s account because:

1) "Instance admins are considering defederating them"
2) "Their admin is making spam accounts easier to create."

Very few, if any, instances are considering blocking m.s, and the recent spam attacks are worthy of sober discussion, not hyperbole. [more]

1/
#moderation

So what is going on? Recently mastodon.social (m.s) has been the target of crypto spam attacks. Attackers have joined m.s and started to post many irrelevant crypto related posts. Moderators on m.s have tracked down these bad actors and isolated them, but some sneak through while the moderation effort tracks them down. It has been dealt with pretty swiftly.

2/
#moderation

Also happening recently, Eugen Rochko @Gargron, the developer of Mastodon changed the sign up process, ostensibly to make it simpler, such that people now are funneled onto mastodon.social (m.s) unless they select a different instance. This has been the source of some concern that m.s will be oversubscribed and be vulnerable to hacker attacks, as well as performance issues. Some regard the concentration at m.s as anti-Fediverse in principle.

3/
#moderation

@Gargron People point to the issue of "too big to defederate" as a reason that large instances like m.s are a bad thing. The logic goes that if bad actors are left unchecked then other instances can not simple defederate m.s because that would block too many other accounts. It is certainly true that it is not really possible to defederate a very large instance so large instances have a big responsibility to police themselves.

/4
#moderation

@Gargron Smaller instances always have the threat of defederation as motivation for doing a good job of moderating their users, but bad actors piling on a smaller instance happens too as we have seen in numerous attacks. Simply defederating that instance without any means of re-federation would disenfranchise all those users, so that's another issue that needs our attention.

/5
#moderation

@Gargron So the question remains: Should you move to a smaller instance? The answer is you are free to do whatever you want. Some people like smaller instances because of the greater sense of community or common interest. Some people like big instances because of the broader perspective they may afford. It's up to you.

If you are on mastodon.social and want a more intimate experience, open an account on a smaller server and give it a try. It's your social network.

/6
#moderation

@mastodonmigration @Gargron

thanks. it's not easy, ever, but it's worth it, too.

@mastodonmigration @Gargron I can recommend https://mstdn.social & https://masto.ai since @stux / @stux does moderate them quite well and doesn't do much of #defederation outside the obviously irredeemable hatespeech instances...
Mastodon 🐘

A general-purpose Mastodon server with a 500 character limit. All languages are welcome.

Mastodon hosted on mstdn.social
@kkarhan
Wasn't he the one who inexplicably suspended Seth Abramson? That was bad publicity for the Fediverse.
@mastodonmigration @Gargron @stux @stux

@TFFPrisoner @kkarhan @mastodonmigration @Gargron @stux @stux Yes, a pretty ban-happy/arbitrary instance; I'd avoid it if you value stability for building up a lot of followers or something.

Seth Abramson makes the point that Mastodon, generally, is sketchy for this purpose: I'd say probably get your own instance if this is your goal.

Otherwise, who cares? Use it if you like, if you get banned just go somewhere else.

I guess one problem with banning is the people who blocked you suddenly don't have you blocked, so they'll have to re-block you if they run into you again. Other than that, no biggie, right?

I think instances blocking instances is likely going to be a bigger problem going forward than banning individuals.

@ech @TFFPrisoner @mastodonmigration @Gargron well, if you don't like the rules of an instance, do #SelfHosting.

Jist be aware that instances and users can still block one anytime for any reason.

Just like #eMail.

Also I'd like to see some sources since that completely goes against the experience I have with @stux @stux ...

@mastodonmigration @Gargron
Two questions: If one does decide to check out a smaller instance, do you have to give up on mastodon.social or can one stay connected to more than one at a time? Secondly, is there a centralized place to learn about what instances, with what thematic focuses, are available to potentially broaden our interests? Thanks.
@globalpilgrim @Gargron You can open an account on another instance and keep your current account. You can look at https://joinmastodon.org/servers for some information on various instances. A good way to get a feel for an instance is to look at their /explore page (eg. https://universeodon.com/explore), which shows you what posts are currently popular among members of that instance. Happy hunting.
Servers

Find where to sign up for the decentralized social network Mastodon.

@mastodonmigration @Gargron
Thanks kindly. This is clear and helpful. Cheers.

@mastodonmigration
Thanks for this. I recently saw a toot claiming that my server - mastodonapp.uk - is being defederated for tolerating transphobia. I haven't seen any, but I don't want to be tooting into the void.

How can I verify or disprove this allegation? I saw no boosts or replies to the toot. Thx

@taoish That was a misunderstanding between mastodonapp and calckey.social specifically. They defederated for a day or two but were back in communion six days ago.

calckey.social/notes/9ejh97528…

Kainoa (@kainoa)

After talking with @[email protected] , it seems that the reports of transphobia were back from an old post/posts which never federated the delete action properly, leading to a false sense of a lack of admin/moderation action. They're committed to moderating against transphobia, so we are re-federating with mastodonapp.uk! My sincerest apologies for jumping to conclusions over something which clearly required more investigation and outreach.

Calckey Social

@clacke Thank you very much. So I can stay on mastadonapp.uk without worrying about being defederated?

I haven't seen a single transphobic post but given UK culture these days (Ricky Gervais as much as JK Rowling) I can't say I would be shocked if there was a problem.

SFBA Announcements (@[email protected])

Hello everyone! We’ve seen a large number of spam direct posts from mastodon.social. We have temporarily limited federation with them. Apologies for the inconvenience, we plan to reassess/reenable full federation tomorrow if the issue is resolved.

SFBA.social

@kevindalley @Gargron Full statement:

Hello everyone! We’ve seen a large number of spam direct posts from mastodon.social. We have temporarily limited federation with them.

Apologies for the inconvenience, we plan to reassess/reenable full federation tomorrow if the issue is resolved.

https://sfba.social/@announcements/110368103560944346

...

We are using “limited” federation. This setting means that we only receive and process events for people who are followed by our users...

#moderation

SFBA Announcements (@[email protected])

Hello everyone! We’ve seen a large number of spam direct posts from mastodon.social. We have temporarily limited federation with them. Apologies for the inconvenience, we plan to reassess/reenable full federation tomorrow if the issue is resolved.

SFBA.social
@mastodonmigration @Gargron
...and ALSO, if you happen to be in the #dotnet ecosystem, you can join dotnet.social, created by the most awesome @styx31, and have a [email protected] handle. 🙂
@mastodonmigration @Gargron There is another argument. Every time a spam wave comes from mastodon.social, they cause reports on smaller instances and the admins of these smaller instances have to deal with those reports, which costs time and energy. That's not something normal users see, but we admins have to deal with. This extra work is caused my mastodon.social. It happened 3 times in less than 10 days.
@jwildeboer @Gargron That is because they hackers are currently targeting mastodon.social. The next attack could be against another instance. Would the extra work then be caused by that instance. No. In both cases it is caused by the hackers. What they want to do is to get us blaming each other, when it is the invader that is at blame.

@mastodonmigration
I disagree. Moderation of a huge instance is a different game than moderation on a small instance. And the users/mods ratio on m.s is bad.

/cc @jwildeboer

@mastodonmigration @Gargron did I read that correctly? If an instance defederates another it *can't* re-federate with it in the future?

Hopefully it's my reading comprehension failure

@pixelpusher220 @Gargron No that is certainly not the case. However, in practice, once your instance gets on a ban list it may be difficult to get it removed from the list.

What is being said is that moderation in a federated environment is not simple and that there are multiple aspects which need to be successfully coordinated to keep our communities safe from both outside attack and unwanted isolation of normal users.

@mastodonmigration @Gargron

ok, whew :) Perhaps there's no 'built in' process for it but it's possible. Yes would be more difficult as it's likely a direct convo between admins to figure it out.

What might be useful is the 'mute for 1/3/7 days' type option we have for individual account interactions instead a complete block. Or maybe even a 'only allow people you directly follow' type thing to let the other instance get the issue under control before more dire measures.

@pixelpusher220 @Gargron Absolutely. The only point here, is that these are early days. Our community is going to come under attack from different directions as we get bigger and more influential and we need to establish more sophisticated and comprehensive means of managing and coordinating our moderation resources both human and technical.

@mastodonmigration thanks for this thread. One note though, could we do away with the h-word? Plenty of instance admins are hackers, so using this term as a way of referring to cybercriminals or malicious actors is painting with a broad brush.

Other terms exist — "cyber attacks" for example would work well here.

@rysiek Will do. Thank you for the recommendation, and apologies for the misuse of the term.
@mastodonmigration
That's a great job and a lot better moderation than I've seen on many other social media platforms, thanx.
@mastodonmigration yup. experiences some of it last night during live tooting Eurovision. blocked a few accounts.

@mastodonmigration actually it's more #spamming of #DM's and yes I myself got one...

And whilst kolektiva.social did temporarily defederate mastodon.social until they fix the #Spamming, I think this is reasonable as approach...
https://kolektiva.social/@shrugdealer/110370170067546617

#FreeSpeech doesn't mean #ConsequenceFreeSpeech - same goes for #tech.
If one's #spamming or hacking too much they get #NameThem [ https://www.spamhaus.org/rokso/ ] & #BlockThemReportThem [ https://www.spamhaus.org/drop/ ] free of charge...

ted cutezynski¹ (@[email protected])

Thank you to the friendly folks that told me that the instance has blocked mastodon.social until their spam bot situation is under control. I've been avoiding a lot today and didn't see that. Appreciate it!

kolektiva.social

@mastodonmigration

Very few, if any, instances are considering blocking m.sThat is just not true... For the first time, we are actually starting to see defederation and silencing/limiting of m.s. rather than just talk about it.

We finally pushed the limit button after the 3rd spam wave.

Being a mega instance is insurance against defederation, but it's not a guarantee

@ada

My instance popped a limit on m.s over the weekend due to the spam as well. Must've been effective as I didn't get any personally. It's a useful tool to blunt the spread of spam across the Fediverse.

It's been removed now things are back to normal.

@mastodonmigration

@mastodonmigration depends...

In the end it's up to every server & instance admin to make a decisin.

Personally I'd recommend people who can to do #SelfHosting.

Also based off #TooBigToBlock issues with #eMail - #Spamming, I think we need to avoid creating the #Fediverse  - equivalents of #GMail  , #YahooMail  & #Outlook.com where said hosters get away with ignoring #abuse #reports...

Sometimes a precendent must be set and "Fix your spamming or GTFO" is reasonable.

@mastodonmigration and yes, some instances like kolektiva.social did in fact block mastodon.social until they fix their #Spam issues...

https://kolektiva.social/@shrugdealer/110370170067546617

ted cutezynski¹ (@[email protected])

Thank you to the friendly folks that told me that the instance has blocked mastodon.social until their spam bot situation is under control. I've been avoiding a lot today and didn't see that. Appreciate it!

kolektiva.social

@kkarhan There seem to be a small number of instances that temporarily partially defederated mastodon.social (m.s) WHILE the crypto attacks were underway and being addressed. Rather than use this fact to scare m.s users that they face some sort of permanent isolation, it might be better to be clear about what is actually happening. This, by David Carroll @profcarroll is a much more sober and helpful post (https://federate.social/@profcarroll/110368100537767122).

1/
#moderation

David Carroll (@[email protected])

One emergent downside of being on mastodon.social is that you’ll get a temporary defed by a subset of the fedi while a #cryptospam op is going down

federate.social

@mastodonmigration @profcarroll

1. I'm not scaring anyone.

2. I see the problem that the  is centralizing in a single instance like mastodon.social  as a real issue.

3. Just like #Spamhaus's denylistings, such community self-defense actions are dynamic and not 100% permanent...

4. It's good to see #spamming being not just frowned upon, but actually acted upon.

@kkarhan @profcarroll Not saying you are trying to scare anyone, but the subject post certainly is.

And certainly centralization in a big instance, or concentration in a few large instances, is a community issue. We should definitely have discussions about this. But conflating big instances with cryto spam hacker problems is inaccurate and misleading and does a disservice to the larger issues of the desirability of decentralization for a whole myriad of reasons.

@mastodonmigration @profcarroll

Case in point: As I expect this to set a precedent,#abuse handling - regard liss #spam or lack of #moderation, will get fine-tuned over time.

I think the overall outcome is good and if admins are scared that their lack of care will have defederation as consequence, then maybe that's a necessary price to pay.

Just like I'd certainly face consequences if I were to leave a machine unmaintained online for ages.

@kkarhan @profcarroll Absolutely agree that a lot of attention to spamming and effective community wide measures to address this threat is a very good thing.
@mastodonmigration @profcarroll AFAICT things can only improve out of the situation...
https://mstdn.social/@kkarhan/110370612547682130
Kevin Karhan :verified: (@[email protected])

@[email protected] @[email protected] Case in point: As I expect this to set a precedent,#abuse handling - regard liss #spam or lack of #moderation, will get fine-tuned over time. I think the overall outcome is good and if admins are scared that their lack of care will have defederation as consequence, then maybe that's a necessary price to pay. Just like I'd certainly face consequences if I were to leave a machine unmaintained online for ages.

Mastodon 🐘

@kkarhan @profcarroll Here the point is phased:

"One emergent downside of being on mastodon.social is that you’ll get a temporary defed by a subset of the fedi while a #cryptospam op is going down"

OK, that's helpful. That's something that people can use to help make a real decision. It's a far cry from permanent isolation.

The same temporary measures might be applied to other instances should they be targets of attack.

Seems like this is the system working.

2/
#moderation

@mastodonmigration absolutely perplexing post, even chaos have limited m.s and are considering full suspension, lack of perspective here is incredible
@evelyn It would be great if you would support these assertions with evidence.

@mastodonmigration while I understand your point, I don’t think it is kosher to just say “to be to block” It feels like gmail and outlook of having giants. I don’t fully think it’s a bad thing, but it can breed complacency and letting the big instances bully smaller instances with might the “to big to be blocked”

That said, many instances might not defederate a bunch of us do silence your instance. Moderation issues as well as the just massive noise from an instance so large.

@mastodonmigration
Actually if mastodon.social don't publish an action plan to either fix the spam issue or reduce their size to something manageable or something else ... Well

If they believe we are going to clean their doo doo forever, they are misunderstanding a couple of things.

We are in a wait and see mood now. I am sure they are working on something to fix it

@mastodonmigration If you read through #mastoadmin posts after the recent spam wave, some admins definitely blocked or silenced mastodon.social. Some temporary, some longer.

@daniel As discussed above, the issue here is not whether some instances temporarily blocked mastodon.social while the attack was going on. The implication was that people on mastodon.social were at risk for being "defederated" and that they should change instances to avoid this. This was a misleading because peoples accounts on mastodon.social are not at risk of being isolated.

1/

@daniel If what had been presented is that instances under attack may be temporarily defederate, and that mastodon.social has recently experienced hacker attacks, which resulted in a few instances blocking them for a short period of time while the attack was being addressed that would not have been as frightening.

In fact, that would be a good description of the system working as intended. Isolating the area under attack while the problem was addressed.

2/

@daniel The implication is that mastodon.social is particularly vulnerable to such attacks because it is big, and it is too big to be successfully moderated. This simply does not make sense. Any instance with open admissions can easily be subject to such attacks and while it is certainly difficult to moderate larger instances it is just a matter of allocating sufficient resources. In this case the attack was dealt with pretty swiftly, so it is not a good example of a breakdown.

3/

@daniel Any instance, big, medium or small that is targeted in this manner will need to do the same thing. It will need to address the attack and while it is doing so, it may be defederated. Hopefully, that defederation will only be temporary as was the case with the latest mastodon.social incident. One could say that smaller instances have the risk that if they don't respond quickly enough it could trigger more permanent isolations. These are all issues we should be discussing.

4/

@daniel What attacks like this are intended to do is to exploit our weaknesses and create dissention. Rather that use this attack that was basically thwarted to initiate a blame game, we should be taking lessons from it on how better to manage the next assault, Because the bad actors are not done with us, not by a long shot. We got this, but we have to work together.

5/

@mastodonmigration I just don't understand where this certainty of your statement comes from or what your intention is. "They will not...", "They're not at risk...".

There are definitely considerations by admins to defederate mastodon.social if it reaches a certain user share:
https://mstdn.social/@feditips/110260432218416976

And I'm pretty sure I've also seen statements by bigger instances with a couple thousand of users that back this decision (unfortunately the search isn't really good enough to find those posts atm).

The question is also whether the temporary blockings of mastodon.social will at some point become very many temporary blockings which are then actually more or less permanent. The moderation of mastodon.social
will definitely suffer as the number of users increases (even if you leave out spam accounts and attacks like yesterday). The other issues were mentioned in the post by @feditips .

If the users can do it and are confident enough, they should
definitely register on other instances. If only for the reason of load distribution and to keep the #Fediverse alive and a nice and friendly place.

Btw some of the other fediverse software uses captchas to prevent bot accounts.
FediTips has moved! (@[email protected])

I don't think people are realising the danger the Fediverse is in. The only thing stopping corporations and VCs taking over this place is that the Fediverse is spread out on many different servers, which makes it very difficult to purchase. If most of the Fediverse ends up on mastodon.social, which is now a strong possibility, there will be nothing to stop most of it being sold to Musk or Zuckerberg or whoever. The bigger mastodon.social becomes, the more likely a buyout is to happen. (1/4)

Mastodon 🐘
@daniel @feditips These seem like two separable issues. 1) Vulnerability to hacker attacks and 2) The wisdom of have very large instances. We should be discussing both, but not necessarily conflating the two. You raise a good point that captchas to validate sign ups may be a good thing to reduce hacker spam. The feditips article raises a myriad of good reasons why large instances carry risk for our future. Neither of these are simple matters and they don't necessarily go together.
@daniel @feditips Regarding the "not at risk" statement. People on mastodon.social are simply not at risk of being permanently fediblocked isolated from large parts of the Fediverse. They simply are not, and to suggest they are is a scare tactic.

@mastodonmigration @daniel

It's not a scare tactic.

Blocking mastodon.social is now seriously on the cards for many admins, even ones who would never have done it before.

The reason the Fediverse exists is to be decentralised. M.s is way too large now, and getting even larger due to the official app's terrible new onboarding.

If people want this place to be decentralised, they need to move off mastodon.social. If they don't care, then they can expect more fediblocks as m.s grows.

@feditips @mastodonmigration @daniel If my instance blocks mastodon.social I will move to it.
@feditips Does this concern apply to mstdn.social as well? Thanks.

@TimKStanton

No.

Mstdn.social is a totally different server owned by totally different people. It has no connection whatsoever to mastodon.social.