Source code and details: https://git.anarchists.space/nemesis/Vigil
A privacy-friendly anti-spam system for account registration on a public Matrix Synapse homeserver. Before an account is created, the client solves an Argon2id puzzle that is intentionally slow and memory-intensive, taking approximately 30 minutes by default, though the homeserver owner can configure the duration. This makes large-scale bot registration expensive.
Synapse's own open registration gets turned off; Vigil is the only thing that can create an account, and it only does that once a client proves it solved a fresh puzzle.
Features
- Privacy-friendly
- A lot harder to bypass than traditional anti-spam systems
- Optional CLI tool to solve cryptographic challenges for people who don't wanna use JavaScript
- Small codebase
4 Comments
glowie@infosec.pub · 1 pts · 19d
Hey nem, how’s the hack freedom group been!?
nemesis3469@lemmy.world · 1 pts · 19d
It's kinda dead now since most active members migrated to another room, give me your MXID if you wanna join 😁
WolfLink@sh.itjust.works · -2 pts · 19d
I’m not waiting 2 minutes much less 30 minutes to create an account wtf
Maybe if it takes like 10s. That’s still slow enough to discourage mass spam bots.
nemesis3469@lemmy.world · 2 pts · 19d
That's configurable by homeserver owner, it's just a default value