BrianKrebs
Someone has registered a ton of new accounts and is spamming with messages saying I'm a pedophile. Sorry @jerry
Mar 2 at 4:05pmWeb
Show threadJerry 🦙💝🦙Mar 2
@briankrebs I just nuked the ones you reported. I’ll keep an eye out for more
Show threadBrianKrebsMar 2
@jerry just search messages for krebson. reporting them all would take quite some time.
Show threadDavid Penfold Mar 2

@briankrebs @jerry

Krebson S Curity esq?

Show threadJerry 🦙💝🦙Mar 2
@briankrebs my apologies - I didn't intend for you to have to report them. I went spelunking and found about 60 accounts taken over, about 2/3 of which hadn't posted yet. I'll keep searching for more. My sincere apologies for this.
Show threadBrianKrebsMar 2
@jerry No worries. I'm sorry that this is almost certainly in response to my last story. He's been raging ever since this thing dropped.
Show threadCliff'sEsportCornerMar 2
@briankrebs @jerry IDK if it helps, but your both appreciated for doing good. Unfortunately IRL that seldom means getting any external prizes.
Show threadAllpointsMar 2

@jerry @briankrebs this, right here, is one of the major reasons why the fediverse is awesome. Actual humans administering instances and caring about their users.

#Fediverse #SysAdmin

Show threadWestFox35Mar 2

@allpoints @jerry @briankrebs One of the reasons infosec.exchange is awesome*

Plenty of fediverse instances out there that treat their instance like a cash cow and do the bare minimum.

Show threadRob RicciMar 2

@allpoints @jerry @briankrebs

This is how moderation *should work*, done by people who understand their users and the actual threat model

Show threadJerry 🦙💝🦙Mar 2
@ricci @allpoints I dunno. I feel like I let @briankrebs down by letting so many accounts get taken over to dog pile him.
Show threadRob RicciMar 2
@jerry @allpoints @briankrebs I will take an identifiable human doing their best over a faceless unaccountable system every time
Show threadAllpointsMar 2
@ricci @jerry @briankrebs same. Stuff happens and you can't block every threat or find every bug in advance. It's the response to those issues that's key.
Show threadAndrew KalatMar 2
@ricci @jerry @allpoints @briankrebs Bold of you to assume Jerry has a face. ;)
Show threadJerry 🦙💝🦙Mar 2
@lerg @ricci @allpoints @briankrebs I did until that accident thank you very much
Show threadDroppie [opensoc]Mar 2

@jerry

so many accounts get taken over


eeek, that's extremely alarming! because i much prefer the feature-set of #Friendica compared to Masto, these days my daily fedi is the former [from whence i post this now], with my #infosecspace account mainly "just" for emergency fallbacks. now i'm wondering if i should make a habit of visiting it daily again just to keep an eye on it 🤔🤷‍♀️

@briankrebs @ricci @allpoints

Show threadJerry 🦙💝🦙Mar 2
@msdropbear @briankrebs @ricci @allpoints enable 2 factor authentication and you won’t have to worry.
Show threadDroppie [opensoc]Mar 3

@jerry

hmmmm.

Two-factor Auth

Scan this QR code into Google Authenticator or a similar TOTP app on your phone. From now on, that app will generate tokens that you will have to enter when logging in.

If you can't scan the QR code and need to enter it manually, here is the plain-text secret:

can't see how that is any help for me

  • my phone is for only calls & texts, nothing else
  • all my fediversing & browserising is done on my Linux pooters
  • i will never use any google service by choice
  • i never use qr codes

🤔🤷‍♀️

ta anyway.

@ricci @allpoints @briankrebs

Show threadplasticine_eraMar 3

@msdropbear @jerry @briankrebs @ricci @allpoints

I don't know if this particular one is any good/secure ..but there are TOTP code apps for linux (like this one) you could check out if you don't want to go the phone based route. You may need a camera if you want to import QR codes.

https://github.com/paolostivanin/OTPClient. with instructions https://github.com/paolostivanin/OTPClient/wiki/How-to-use-OTPClient

GitHub - paolostivanin/OTPClient: Highly secure and easy to use OTP client written in C/GTK3 that supports both TOTP and HOTP

Highly secure and easy to use OTP client written in C/GTK3 that supports both TOTP and HOTP - paolostivanin/OTPClient

GitHub
Show threadDroppie [opensoc]Mar 3
@plasticine_era thx. @ricci @allpoints @jerry @briankrebs
Show threadSean 🤷‍♂️🤷‍♀️🤷Mar 2
@jerry @briankrebs Should they not appear in this server's live feed or do you need reports on them?
Show threadJerry 🦙💝🦙Mar 2
@seanwbruno @briankrebs I am looking for them in some ways that I'm not going to describe here, but if you see any that I'm not catching, I'd appreciate a pointer to them
Show threadrugkMar 2
@jerry
Uff my support. How comes this? Kinda "funny" side note: I saw one saying "you are a PDF" - I mean it's this a real user using a keyboard with autocorrect?
@seanwbruno @briankrebs
Show threadSamuel SmithMar 2
@rugk @jerry @seanwbruno @briankrebs not exactly, "pdf file" is a way to say it without triggering automated censors.
Show threadrugkMar 2
@Jirikiha oh uhm sorry, did not know this :|
Show threadSamuel SmithMar 2

@rugk No worries. I only learned about it a few months ago.

Now I'm wondering when this algospeak started?
https://www.bbc.com/future/article/20251118-the-words-you-cant-say-on-the-internet

The words you can't say on the internet

There's a secret list of words you can't say on social media – at least, that's what everyone seems to think.

BBC
Show threadWendroid 🇺🇦Mar 2
@briankrebs @jerry Noted - will nuke! 🖖🏼
Show threadGurologeMar 2
@briankrebs @jerry ...nuked some.
Show threadJerry 🦙💝🦙Mar 2
@briankrebs so far they're all older accounts with no 2fa, so guessing someone got an infostealer cred dump that has i.e accounts
Show threadRobert [KJ5ELX] Mar 2
@jerry @briankrebs wow, sorry you're going through this. I need to up my monthly donations. I'll do that today. $$$.
Show threadAllan ChowMar 2
@jerry @briankrebs I guess I should turn on 2fa huh
Show threadJerry 🦙💝🦙Mar 2
@grumpasaurus @briankrebs don't make me tap the sign :)
Show threadFrederic PasteleursMar 3
@briankrebs you must have done something right to piss off such an idiot so badly.