Post by @spielleitung@mastodon.pnpde.social

@spielleitung@mastodon.pnpde.social 4 wk. ago

The spam accounts from the last few hours ("Automated protocol deliverability probe") appear to be logging in via their own OAuth app called “BoomProtocolProbe.” So here's an attempt:

To prevent “BoomProtocolProbe” from registering, we created a trigger in the Mastodon database that checks the name BEFORE INSERT and blocks the app if it matches.

https://pad.pnpde.social/p/FUloCtoOiNZPX6d18-_r

#MastoAdmin #BoomProtocolProbe #FediBlock

CREATE OR REPLACE FUNCTION block_boomprotocolprobe()
RETURNS trigger AS
$$
BEGIN
IF NEW.name = 'BoomProtocolProbe' THEN
RETURN NULL;
END IF;
RETURN NEW;
END;
$$ LANGUAGE plpgsql;

CREATE TRIGGER trg_block_boomprotocolprobe
BEFORE INSERT ON oauth_applications
FOR EACH ROW
EXECUTE FUNCTION block_boomprotocolprobe();

COPY oauth_applications TO '/tmp/oauth_applications.copy';

DELETE FROM oauth_applications WHERE name = 'BoomProtocolProbe'; — CREATE OR REPLACE FUNCTION block_boomprotocolprobe() RETURNS trigger AS $$ BEGIN IF NEW.name = 'BoomProtocolProbe' THEN RETURN NULL; END IF; RETURN NEW; END; $$ LANGUAGE plpgsql; CREATE TRIGGER trg_block_boomprotocolprobe BEFORE INSERT ON oauth_applications FOR EACH ROW EXECUTE FUNCTION block_boomprotocolprobe(); COPY oauth_applications TO '/tmp/oauth_applications.copy'; DELETE FROM oauth_applications WHERE name = 'BoomProtocolProbe';

Etherpad auf pnpde.social

#boomprotocolprobe #mastoadmin #fediblock

1 Boost

0 Likes

No replies yet

Be the first to share your thoughts.