13 Followers
32 Following
35 Posts
Privacy Advocacy
Cyber Security Advocacy
Motorcycle touring
Photographers Assistant
@dcid not any more, but I was wasn't using lastpass in September, I only just signed up for a year on the family plan before the disclosure, damn it was hard work migrating over from enpass
Sharing a little post I did about online threats to consumers, because its useful, and also testing the effect of Request Amplification in Mastodon as per my previous post
https://300m.com/security/online-threats-to-consumers/
Online threats to consumers

Online threats to consumers come in many forms, such as viruses, malware, phishing scams, and ransomware. These threats can compromise the security of a person's personal information, such as their login credentials and credit card numbers, and can lead to identity theft, financial loss, and other i...

Marc Kranat
They suspended a testing account I had about 5 years ago, I couldn't login to change notifications, so still got emails, till very recently, and I see they have deleted it now.
@cloudflare welcome to our little corner of the Fediverse
OMG I just realized Mastodon is what Twitter would be if it were Canadian
FTX hacker identity found! apparently tried to offload funds to Kraken!!

Posted in r/Bitcoin by u/Humanofnow888 • 609 points and 128 comments

reddit
@glenngabe confirmed, no referer being shown in logs, which is not good, makes visits look bot like and could contribute to triggering firewall rules

I'm really not worried about Mastodon scaling issues at all.

When I left Twitter in 2008, we had roughly twice as many users as the current combined Mastodon network, all running on one MySQL server that had the same specs as a high-end 2013 MacBook Pro, plus roughly 10 web servers and 5 queue servers.

To be fair, growth wasn't as rapid, and we had local-infra advantages over federated systems, but these problems are solvable and I have no doubt will be fixed soon.

*Hugops to all admins!*

@notdan @AztekXYZ
They have their uses, some are more reliable than others. It does seem IP related, maybe you can leverage a CDN / WAF?