• 0 Posts
  • 40 Comments
Joined 2 years ago
cake
Cake day: August 20th, 2024

help-circle

  • This has been an extremely obvious flaw in the modlog concept from the very start, and has been discussed on and off for years. IMO, it exposes a much wider issue with federated forums as currently implemented, despite the aggressive defense of some vague concept of “openness.”

    Blindly casting every user and mod action out into the universe in plaintext with no recall mechanism is problematic, and it will only get more problematic as the technical prowess of the average user drops. Doxxing is just the tip of the iceberg here, and I don’t think most people appreciate just how massive the social engineering attack surface actually is. Rogue instances could silently build engagement profiles on users, and then actually serve them targeted malicious content. This could be widespread, and almost impossible to detect.




  • It’s one of the reasons I think public voting is a terrible idea. It’s a wet dream for hyper-targeted engagement farming. Even to the point it creates a bit of a nightmare scenario for spear phishing and malware injection. The stated “transparency” benefits just seem incredibly trivial compared to the risk, especially when actual malicious actors will simply spam bots and alts, while actual users must navigate this weirdly huge threat surface for basically no good reason.







  • socsa@piefed.socialtoSelfhosted@lemmy.worldremoved a homeplug
    link
    fedilink
    English
    arrow-up
    8
    ·
    10 months ago

    Just to add that proper mesh systems are distinct from extenders as they will use separate mesh channels for back haul. They also have the “travel AP” things which act as extenders but form a new network on a different channel. You can actually do this with many Android phones as well.



  • At first, it will probably work. But you will likely lose access after a few days and your servers will be scanned for exploits, so make sure your shit it up to date.

    Source: hosted an XMPP server which was summarily banned after 2 days of access from China and then probed/attacked repeatedly until I took it offline.