Remote

Social Web ISAC

@sw_isac@mastodon.iftas.org

Social Web Information Sharing & Analysis Centre helps infrastructure owners and operators protect their operations, staff, and users from service abuse, security threats, and other hazards.

Scopes: csam, disinformation, ncii, service-abuse, spam, tvec (definitions @ https://connect.iftas.org/library/iftas-documentation/shared-vocabulary-labels/)

This account is not monitored for replies. Contact IFTAS at https://about.iftas.org/contact/

0 Followers

0 Following

14 Posts

Joined February 01, 2024

About SW-ISAC:

https://connect.iftas.org/library/iftas-documentation/social-web-information-sharing-and-analysis-centre/

About IFTAS:

https://about.iftas.org

Label Definitions:

https://connect.iftas.org/library/tools-resources/iftas-documentation/shared-vocabulary-labels/

IFTAS Connect Community:

https://connect.iftas.org

Posts

Social Web ISAC @sw_isac@mastodon.iftas.org · Sep 29, 2025

This account will be merging with @iftas@mastodon.iftas.org and all future notifications will come from that account.

mastodon.iftas.org

IFTAS (@iftas@mastodon.iftas.org) - IFTAS

Social Web ISAC @sw_isac@mastodon.iftas.org · Aug 12, 2025

Discussion is growing about LLM bots and other tools scraping public posts. This raises concerns about privacy, consent, and community safety. IFTAS has compiled community conversations, expert advice, and tools for identifying and blocking scrapers: https://connect.iftas.org/library/tools-resources/web-crawlers-and-scrapers/

Social Web ISAC @sw_isac@mastodon.iftas.org · Aug 05, 2025

The following modified Mastodon servers are a collection of automated accounts that create ~15,000 posts per day with the intent to generate traffic to related ad-farm web sites, using scraped and republished content.

pubeurope[.]com
newsbeep[.]org
theater[.]im

If your service prohibits uncurated bots, #spam, and/or inauthentic activity, we recommend you review your federation policy for these domains.

Learn more: https://connect.iftas.org/library/iftas-documentation/spam-fediverse-services/

Social Web ISAC @sw_isac@mastodon.iftas.org · Aug 04, 2025

The Cloudflare CSAM Scanning Tool (https://developers.cloudflare.com/cache/reference/csam-scanning/) is now available worldwide to any Cloudflare user, and no longer requires NCMEC credentials. This is a free service available to any Cloudflare-protected web site.

See https://connect.iftas.org/library/legal-regulatory/ for more information.

Social Web ISAC @sw_isac@mastodon.iftas.org · Apr 02, 2025

@diffrentcolours@tech.lgbt @kyva @pixelfed@mastodon.eus @mark it's a hefty update that requires other updates including PHP, but in the meantime folks with Pixelfed followers should understand (a) their followers-only messages may be leaking (b) they may still have unapproved followers after the remote server updates, and (c) there's no federated/remote blocking so you can't remove old posts from those unapproved followers. The sooner we get everyone updated (and FEP-8fcf implemented) the better.

Social Web ISAC @sw_isac@mastodon.iftas.org · Apr 02, 2025

Pixelfed versions 0.12.4 and earlier contain a critical privacy vulnerability that impacts any and all Fediverse service providers that support follower-only messaging from follower-approvals-required accounts.

Ref: https://fokus.cool/2025/03/25/pixelfed-vulnerability.html

A tracking spreadsheet of domains by version is available at https://docs.google.com/spreadsheets/d/1t9wlqXC89EJwccxFAT_VknRdVAw6K6h-dMqVtaRVB-I/

If you host accounts that expect their followers-only posts to be non-visible to unapproved followers on remote Pixelfed services, consider informing your members.

Social Web ISAC @sw_isac@mastodon.iftas.org · Apr 01, 2025

social[.]freysa[.]ai is now one of the highest content-producing sources of federated content. All 1,468 users are AI bots that have collectively posted over 3.7 million posts in the past 40 days.

If your service prohibits uncurated bots and/or inauthentic activity, we recommend you review your federation policy for domain freysa[.]ai

Social Web ISAC @sw_isac@mastodon.iftas.org · Mar 07, 2025

social.freysa[.]ai/directory is a Mastodon service running a collection of over a thousand genAI bots, and is federating rapid-fire bot content. If your service prohibits uncurated bots and/or inauthentic activity, review your federation policy for domain freysa[.]ai

Social Web ISAC @sw_isac@mastodon.iftas.org · Mar 03, 2025

FediCheck will cease automatically updating connected service accounts effective immediately.

The CARIAD app will remain online in read-only mode until further notice.

We are working on releasing a community (open source) edition of FediCheck to allow self-hosting. If you have interest in acting as a maintainer for this codebase please reach out to @jaz@mastodon.iftas.org directly

Social Web ISAC @sw_isac@mastodon.iftas.org · Feb 19, 2025

FediCheck has been updated. Please see https://connect.iftas.org/news/connect/fedicheck-cariad-update/ for details about this update.

Social Web ISAC @sw_isac@mastodon.iftas.org · Feb 17, 2025

#FediCheck users, please see an important announcement about our upcoming update: https://connect.iftas.org/news/connect/fedicheck-cariad-update/

Social Web ISAC @sw_isac@mastodon.iftas.org · Feb 17, 2025

SW-ISAC is aware of bulk inauthentic account creation on multiple ActivityPub service providers.

The following domains have been investigated and reviewed and are now available via FediCheck CARIAD and the IFTAS Do Not Interact list.

Domain | Label
mast-serv[.]site | Spam, Coordinated Inauthentic Activity
webmasto[.]online | Spam, Coordinated Inauthentic Activity

Reference: @trankten@tkz.one

Social Web ISAC @sw_isac@mastodon.iftas.org · Jan 15, 2025

Please see some important announcements on our blog at https://connect.iftas.org/news/connect/fedicheck-cariad-updates-q1-2025/

We accidentally removed some domain blocks from some servers in November of 2024.
We are updating our observed servers list.
We are withholding threads.net from FediCheck temporarily.

Social Web ISAC @sw_isac@mastodon.iftas.org · Dec 30, 2024

The following domain(s) have been reviewed and are now available via FediCheck CARIAD and/or the IFTAS Do Not Interact list.

Domain | Label
pravda[.]me | Suspended by >=51%

DNI: https://connect.iftas.org/library/iftas-documentation/iftas-dni-list/
CARIAD: https://connect.iftas.org/library/iftas-documentation/iftas-cariad-audit-log/

https://groups.google.com/a/iftas.org/g/sw-isac-announce/c/qawgRXoGn3k

Social Web ISAC

Posts

IFTAS (@iftas@mastodon.iftas.org) - IFTAS

Remote instance