We're currently experiencing an impersonation spam wave, and have closed new registrations on pixelfed.social.

If you've been followed, mentioned or messaged by one of them, please report them and opt to send the report to pixelfed.social so we can suspend them!

Boosts appreciated, we're really sorry about this, and are actively working on better mitigations to prevent this type of malicious behaviour.

@pixelfed did you also disable API access? Because the app has been dead for me since yesterday or so. Website still works.
@ReneHenrich No we didn't, that is likely due to an expired oAuth token, simply logout and log back in!
@pixelfed that was it! Thank you
@pixelfed I saw.. I switched to onboarding to get ahead of it
@pixelfed Thank you for your attention to this.
@pixelfed eli5 what is pixelfeld, pls. is this another mastodon instance?
@utf_7 nope it's the image sharing platform which can talk with mastodon servers @pixelfed
@utf_7 @pixelfed an photo sharing platform similar to instagram. It use the activitypub so it can communicate with mastodon but it has a different api and festures unique to pixelfed like the portfolio and collections of your own images
@hiphopheaven @pixelfed that sounds cool. how do i know am image here is from the pixelfed?

@hiphopheaven @utf_7

A post doesn't necessarily have to be on pixelfed.social to originate from #Pixelfed.

My own (not frequently used) Pixelfed instance, for example, runs under the domain 'bruckner.photo'.

@pixelfed @utf_7
it's an instagram-like fediverse network in the same way mastodon is a twitter-like fediverse network

@utf_7
You can think of #Pixelfed as an Instagram running on the #Fediverse.

The advantage is that Pixelfed also uses the #ActivityPub protocol, so you can follow a Pixelfed profile from your #Mastodon account. This means you don't necessarily need an account on a Pixelfed server to see the content.

@pixelfed Had similar issues with my projects. Implementing email verification early helps a ton.

@rgo we do verify emails before they can do anything, but that hasn't stopped them.

Even hCaptcha on registration doesn't stop them, it's a coordinated effort that bypasses our existing protections (like delaying the ability to send DMs until 72 hours after joining)

@[email protected] How do we know if an account is impersonating? How much of a problem is it anyway?

@pixelfed

you could compare the federated spaces to the early anarchic/socialist/communist communes that popped up in the last couple centuries...

And of course, every one of them was eventually attacked and destroyed by capitalist interests.

@pixelfed
Isn't it funny that the account [email protected] writes about impersonation at pixelfed.social and not the account [email protected] ? 🤔🤫
@[email protected]
@pixelfed its not working at all!
@pixelfed I've been reporting a lot of these and wanted to ask about romance scams. Do they fall under spam or 'abusive or harmful'?
@pixelfed Thank god for this, my timeline looked like an episode of TMZ for a while there