FediTips

RE: mas.to/@markwyner/…

The reason I posted this yesterday is that I suspended hundreds of accounts, just as @jerry@infosec.exchange did. And other moderators as well.

Important: this is NOT an issue with Mastodon. Or the fediverse. It’s a common thing that happens when passwords are compromised and folks use the same ones for many or all of their online accounts. Mastodon is simply one of the targets at the moment.

For server admins, Jerry has a script that will reset passwords on dormant accounts. I highly recommend running this on your instance.

infosec.exchange/@jerry/…

Y’all! Please, please, please use appropriate passwords. We’re seeing a big spam campaign across the fediverse, using hacked accounts.

First, change your fediverse password. Especially if it’s reused elsewhere, short/weak, or really old.

Then, here are some simple steps to protect you and your accounts:

1. Never reuse passwords. Use a password manager so you’ll only have to remember one password.

2. Make sure your passwords are secure. They should be 12+ characters with at least one capital letter and one special character. Good password managers have a generator built-in.

3. Set-up multi-factor authentication (MFA/2FA).

4. Use passkeys wherever possible.

If you need help, ask someone. Folks who know will help.

Mastodon’s “import and export” feature lets you share account settings such as blocks, mutes, filters etc with other people. (For example you could share your filters file and they could upload it to their account to get the same filters as you.)

You can find out more including step-by-step instructions in this guide:

➡️ fedi.tips/how-to-share-your-blocks-mute…

I’ve tried to cover possible questions about this feature. Let me know if I’ve missed something by replying to this post.

Would you like to publish videos on the Fediverse? You might want to try PeerTube! Here’s a step-by-step easy-to-follow guide that covers everything you need to know:

➡️ fedi.tips/how-to-publish-videos-and-aud…

The guide also answers lots of questions about publishing videos and audio on PeerTube.

#fediVerse

Why we choose at least a decentralized setup?