== Update from the sendflood (aka boomprobe or bpspam) attack ==

Since 2026-09-20 it seems the attacker has switched gears again. We can now see them registering new oauth apps with what seems to be randomly generated name+website references (e.g. "violetcaravan" and "divisiondeliver.com"), but currently there are no follow-up account creation attempts.

At this time it is unclear what those apps are created for, but it's safe to assume that it's not in the interest of instance operators or the Fediverse ecosystem as a whole.

Administrators who want to check their databases can use the following SQL statement to do so:
---
SELECT id,name,redirect_uri,website,created_at FROM oauth_applications WHERE '[2026-09-20, 2026-09-30]'::daterange @> created_at::date ORDER BY created_at ASC;
---

CC: @MastodonEngineering @iftas @ilanti

#sendflood #bpspam #boomprobe #FediAdmin #MastoAdmin #FediverseFoundation

Someone sent us this @Mastodon merch.
Thank you! 😘

#MastodonMerch #mastodon #FediverseFoundation #FediverseMerch

#ClosePayPal #ClosePayPalChallenge #UnplugTrump #UnplugPayPal #FediverseFoundation

Ich hab noch ein Problem mit der Suche nach ernsthaften PayPal-Alternativen.

- SEPA-Überweisungen sind immer noch zu langsam fürs Online-Shopping.
- Kreditkarte, Google/Apple/Amazon-Pay treibt den Teufel mit dem Beelzebub aus.
- Twint, iDeal, Boleto Banciario, etc. sind alles tolle Ansätze, aber halt nur regionale Angebote.

1/2