Post · BT Free Social

@spielleitung@mastodon.pnpde.social last wk.

The spam accounts from the last few hours ("Automated protocol deliverability probe") appear to be logging in via their own OAuth app called “BoomProtocolProbe.” So here's an attempt:

To prevent “BoomProtocolProbe” from registering, we created a trigger in the Mastodon database that checks the name BEFORE INSERT and blocks the app if it matches.

https://pad.pnpde.social/p/FUloCtoOiNZPX6d18-_r

#MastoAdmin #BoomProtocolProbe #FediBlock

CREATE OR REPLACE FUNCTION block_boomprotocolprobe()
RETURNS trigger AS
$$
BEGIN
IF NEW.name = 'BoomProtocolProbe' THEN
RETURN NULL;
END IF;
RETURN NEW;
END;
$$ LANGUAGE plpgsql;

CREATE TRIGGER trg_block_boomprotocolprobe
BEFORE INSERT ON oauth_applications
FOR EACH ROW
EXECUTE FUNCTION block_boomprotocolprobe();

COPY oauth_applications TO '/tmp/oauth_applications.copy';

DELETE FROM oauth_applications WHERE name = 'BoomProtocolProbe'; — CREATE OR REPLACE FUNCTION block_boomprotocolprobe() RETURNS trigger AS $$ BEGIN IF NEW.name = 'BoomProtocolProbe' THEN RETURN NULL; END IF; RETURN NEW; END; $$ LANGUAGE plpgsql; CREATE TRIGGER trg_block_boomprotocolprobe BEFORE INSERT ON oauth_applications FOR EACH ROW EXECUTE FUNCTION block_boomprotocolprobe(); COPY oauth_applications TO '/tmp/oauth_applications.copy'; DELETE FROM oauth_applications WHERE name = 'BoomProtocolProbe';

Etherpad auf pnpde.social

#boomprotocolprobe #fediblock #mastoadmin

1 Boost

0 Likes

@spielleitung@mastodon.pnpde.social last wk.

The above also works on the PeerTube-Database. Just replace

IF NEW."registrationReason" = 'Automated protocol deliverability probe' THEN

and

BEFORE INSERT ON "userRegistration"

#MastoAdmin #PeerTube #BoomProtocolProbe #AutomatedProtocolDeliverabilityProbe

@spielleitung@mastodon.pnpde.social 3 days ago

Update: They switched their OAuth-App name to 'sf-probe-' + 8 Chars. Function and Delete Statement in the Pad are updated

CREATE OR REPLACE FUNCTION block_boomprotocolprobe()
...
IF NEW.name = 'BoomProtocolProbe'
OR NEW.name ~ '^sf-probe-[A-Za-z0-9]{8}$' THEN
...

delete ... OR name ~ '^sf-probe-[A-Za-z0-9]{8}$';

https://pad.pnpde.social/p/FUloCtoOiNZPX6d18-_r

Etherpad auf pnpde.social

@spielleitung@mastodon.pnpde.social 3 days ago

Another Update: And now they switched to just "mastodon" 😫 Ok, you've won! I'm not trying to stop you anymore. You're just too smart! I'm giving up

(no, I'm not)

@kini@maro.xyz 3 days ago

@spielleitung They're very persistent and getting on my nerves. I fear I'll have to add a small patch to mastodon.

Log in