skrlet13

hey, I saw genAI scam bots federating via ActivityPub using hf.space subdomains, so be careful

#mastoadmin #fediadmin #fediblock

Mar 5 at 6:53pmWeb
Show threadKDDLBMar 5
@skrlet13 están usando Hugging Face 💀
Show threadskrlet13Mar 5
@kevin así es
Show threadFox Ritch 🇩🇪Mar 5
@skrlet13 i dont even see how someone could do something like that
Show threadskrlet13Mar 5

@fox
I didn't investigate how they do it specifically, but I've recieved mentions from links like:

https://<subdomain>.hf.space/objects/<post-id>
If you try to go to such link, it just gets stuck loading.

Based on AP protocol https://www.w3.org/TR/activitypub/

I suppose the bot does sends a POST request to multiple instances inbox (aka sends a post to other instances) with an Activity object. It's on Hugging Face, so probably has more LLM generated stuff to target mutualAid hashtag users

ActivityPub

The ActivityPub protocol is a decentralized social networking protocol based upon the [ActivityStreams] 2.0 data format. It provides a client to server API for creating, updating and deleting content, as well as a federated server to server API for delivering notifications and content.