2026-09-23 14:37 UTC
@MastodonEngineering@mastodon.social
Here are some ideas:
1. Account creation should only be done by the instance not apps
2. Accounts cannot be created without confirming email first
3. Emails that are not on popular services (e.g. gmail, hotmail, yahoo etc) should prompt a difficult captcha to solve even before verification is sent
Replies (1)
-
@gunchleoc@mastodon.scot 2026-09-23 15:29
@samir@m.fedica.com 2. is already there. The problem with this particular spam wave is that they are using Mastodon servers to flood people's inboxes. The point isn't the mastodon account, it's sending the e-mail. https://en.wikipedia.org/wiki/Email_bomb