c/fediverse · by vantablack@lemmy.blahaj.zone · 6d

defeating a fediverse spamwave

i've found the source!!!

post is a screencap of https://cyberpunk.lol/@vantablack/117288419882119459

EDIT: WE DID IT LEMMY

175 points · 16 comments · view on lemmy.world

16 Comments

0ndead@infosec.pub · 45 pts · 6d (5 replies)

I’ve been reporting spam coming from Spaceship domains for months now; I can assure you they DGAF :/

Here’s a list of valid addresses to forward spam back to, even though it hasn’t done me any good:

abuse@spaceship.com support@spaceship.com postmaster@spaceship.com ceo@spaceship.com

TragicNotCute@lemmy.world · 37 pts · 6d (1 reply)

ICANN is your next stop.

https://www.icann.org/resources/pages/abuse-2014-01-29-en

Edit: I did some digging because I was curious. Spaceship looks like a related company to Namecheap (perhaps even fully owned by them). Business records in Arizona for Spaceship, Inc have the founder and CEO of namecheap and namecheap itself named.

https://www.bizapedia.com/az/spaceship-arizona-inc.html

https://www.namecheap.com/about/

0ndead@infosec.pub · 4 pts · 4d

Yeah, I found the Namecheap connection too. Can’t remember who bought who. The current CEO seems like a real slimeball.

NorthWestWind@lemmy.zip · 8 pts · 6d (2 replies)

Realistically, why would they GAF? They aren't exactly doing something illegal. It's just morally wrong.

artyom@piefed.social · 13 pts · 5d

Because someone like Google might block all of their domains and make the entirety of their products functionally useless.

TragicNotCute@lemmy.world · 8 pts · 5d

They have a contractual obligation to investigate and respond to abuse complaints. ICANN will punish them if they don’t.

queerlilhayseed@piefed.blahaj.zone · 23 pts · 6d

Nice!

Thanks for doing the gumshoe work to protect this place, I appreciate it ❤️❤️❤️

SkaveRat@discuss.tchncs.de · 15 pts · 6d

Abuse report is sent

and a couple hundred requests deleted from the queue sigh

What a bunch of slopped together crap

otter@lemmy.ca · 15 pts · 6d (1 reply)

Is there more context on what this is or what was happening?

vantablack@lemmy.blahaj.zone · 28 pts · 6d

lots of fedi instances have been getting hit hard with an absurd amount of spam signups

https://cyberpunk.lol/@vantablack/117288120898233209

antianarchist@sopuli.xyz · 8 pts · 5d (2 replies)

a registrar will not care about random abuse messages that do not show clear illegal behavior or is not signed by any lawyers office
even if the domain get’s blocked, how long does it take to set up a new one? How long does it take to set up 100 new ones?
activitypub is by default very vulnerable and inefficient. Sources are not validated and the protocol does not have any mechanisms to protect itself from such attacks.

ademir@lemmy.eco.br · 1 pts · 1d (1 reply)

Seems you were wrong

antianarchist@sopuli.xyz · 2 pts · 1d

For me the site is still online.

vantablack@lemmy.blahaj.zone · 4 pts · 4d

WE DID IT LEMMY

Frenchgeek@lemmy.ml · 4 pts · 5d

Brb: Searching and playing the Dagothwave for a bit... Far more enjoyable.

BrickEater@lemmy.world · 1 pts · 6d

Is that why Lemmy wasn't responding yesterday morning?