Nostr notes by IFTAS

KIDS Act aside, here's the EU and adjacent age ...

2026-10-27T21:31:31Z

In reply to nevent1q…qgly
_________________________

KIDS Act aside, here's the EU and adjacent age verification/restrictions for social media/gaming recently moving ahead regardless:

Germany U13 ban 2027 https://www.ertnews.gr/eidiseis/ellada/politiki/vouli-yperpsifistike-to-nomosxedio-gia-tin-apagoreysi-ton-social-media-se-paidia-kato-ton-15-eton-apo-to-2027/

Greece Jan 1 U15 ban https://www.ertnews.gr/eidiseis/ellada/politiki/vouli-yperpsifistike-to-nomosxedio-gia-tin-apagoreysi-ton-social-media-se-paidia-kato-ton-15-eton-apo-to-2027/

(Both plan to use a version of the EU wallet for a yes/no answer to "is_of_age")

Norway expanding U16 law https://www.regjeringen.no/no/aktuelt/malrettar-aldersgrensa-mot-skadelege-plattformer/id3178283/

Türkiye U15 ban from Nov 1 https://www.turkishminute.com/2026/10/10/turkeys-social-media-ban-for-under-15s-takes-effect-november-1/

Switzerland seeking to "significantly expand" its telcom law https://www.admin.ch/de/newnsb/NMn5s24l8NjQ

I've been patiently waiting for ...

2026-10-27T21:12:58Z

I've been patiently waiting for https://digital-strategy.ec.europa.eu/en/library/proposal-eu-kids-act-eu-keeping-internet-digital-spaces-accountable-and-trustworthy to come back online so I can keep working on IFTAS' advocacy for carveouts/protections for independent social web operations via-a-vis the KIDS Act.

I'd been assuming the various cybersecurity issues of the past week had impacted access but I finally had the bright idea to see if somehow it was me that was the issue, so I checked the site from different locations.

And, huh.

Looks like I might not be able to submit comment after all.

Nostr event nevent1qqstv5h6f98yw0ju98nm4uhrap3k3m9p86d2zrufy8zg88hc78dyp3qzyq3gdtdew4gt39ea5vkmdy2kzfhrkdax85txcxcy9gra3yu6yhqzqy3p09w

2026-10-27T20:57:46Z

https://www.reuters.com/world/eight-us-states-sue-openai-claiming-chatgpt-harms-children-2026-10-14/

https://about.iftas.org/2026/10/17/share-google-spam/ has some ...

2026-10-26T13:22:59Z

In reply to nevent1q…ln0j
_________________________

https://about.iftas.org/2026/10/17/share-google-spam/ has some queries you can use

#sharegoogleSpam

quoting
note1z0l…r346

Malicious automated activities are hijacking accounts and then direct mentioning 30 to 40 accounts preceded by a URL that is a Google domain followed by a share dot google (URL-shortened) link (eg google.tld/share.google?q=VALUE)

IFTAS will refer to this activity as #sgSpam

This page will track helpful posts and mitigations for administrators and end users. See below.

**DO NOT CLICK/TAP ANY LINKS ASSOCIATED WITH THESE MESSAGES** – there are reports of these links serving malware.###

For Administratorshttps://infosec.exchange/@jerry/117457041484080186

https://social.lol/@neatnik/117456567939745803###

For End Users
Add two factor authentication to your account if your service supports it.
If you believe your password may have been compromised (or if you re-use passwords) change your password. Longer is better than complex.
You can check to see if password associated with the email address you used to create your account has been compromised: https://haveibeenpwned.com/">https://haveibeenpwned.com/
Where possible, use a password manager to ensure you use a unique password for every Internet service you use. https://ssd.eff.org/module/choosing-the-password-manager-that-s-right-for-you">EFF has good guidance on this decision.
If your service supports filtering/hiding messages, filter “share.google” or “/share.google?” – but be aware this will filter/hide messages that contain non-malicious links from other people who use Google products to share links online.
###

Something To Add?If you have specific guidance for Administrators or End Users you’d like IFTAS to review, please send it to IFTAS (npub1y2r…kvzk) or contact@iftas.org for review, please include the hashtag #sgSpam

https://www.php.net/archive/2026.php#2026-10-21-5 How to update: ...

2026-10-21T13:49:31Z

In reply to nevent1q…n9kh
_________________________

https://www.php.net/archive/2026.php#2026-10-21-5

How to update:

Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35. Source downloads are at https://www.php.net/downloads.php?source=Y

⚠️ #SW_ISAC_ADVISORY Service providers operating PHP-based ...

2026-10-21T12:49:52Z

⚠️ #SW_ISAC_ADVISORY

Service providers operating PHP-based platforms please take note of PHP critical vulnerabilities, both rated CVSS v4.0 9.2

Major government and ecommerce services have shut down pending the patch. Exploits are already circulating.

Shut your service down now, and ensure it doesn't have Internet access on restart.

A patch is scheduled for Wednesday, 21 October 2026 at 14:00 UTC

0100 AEDT
2300 JST
1600 CST
1500 BST
1000 EST
0700 PST

https://cert.europa.eu/publications/security-advisories/2026-018/

⚠️ #SW_ISAC_ADVISORY Service providers operating PHP-based ...

2026-10-21T01:53:07Z

⚠️ #SW_ISAC_ADVISORY

Service providers operating PHP-based platforms please take note of a PHP advisory addressing two critical vulnerabilities, both rated CVSS v4.0 9.2

A patch is scheduled for Wednesday, 21 October 2026 at 14:00 UTC

https://www.php.net/archive/2026.php#2026-10-20-1

#WordPress #Pixelfed #Hubzilla #Friendica #Castopod #Drupal

https://www.tsjournal.org/index.php/jots/issue/view/16

2026-10-20T16:39:58Z

https://www.tsjournal.org/index.php/jots/issue/view/16

https://www.pewresearch.org/internet/fact-sheet/social-media/

2026-10-20T16:28:49Z

https://www.pewresearch.org/internet/fact-sheet/social-media/

I recommend getting on the waitlist for https://fediponics.com/ ...

2026-10-20T01:12:46Z

In reply to nevent1q…ufl7
_________________________

I recommend getting on the waitlist for https://fediponics.com/

On the larger servers I monitor, running this in beta this has knocked out well north of 80% of bots (coupled with IPQS or similar)

Once you've voted, get involved here: https://di.day/en

2026-10-18T15:41:10Z

In reply to nevent1q…hsgp
_________________________

Once you've voted, get involved here:

https://di.day/en

The DI.DAY website has been nominated for the Grimme Online Award ...

2026-10-18T14:06:08Z

The DI.DAY website has been nominated for the Grimme Online Award 2026!

Every first Sunday of the month, DI.DAY celebrates Digital Independence Day: "We reclaim our freedom in the digital world, stop destroying democracy, and switch to democracy-friendly digital alternatives. And, step by step, we make sure we’re digitally independent!"

Created by Björn Staschen (npub1mf6…g967) - DI.DAY is a growing movement and deserevs your support, vote today!

https://w1.grimme-online-award.de/goa/voting/ext_voting.pl#:~:text=DI.DAY%20%E2%80%93%20Digital%20Independence%20Day

wordpress caching maybe, I don't see it?

2026-10-18T12:26:00Z

In reply to nevent1q…5e9g
_________________________

wordpress caching maybe, I don't see it?

Nostr event nevent1qqs0zlsl8z4kutz8ccw85f5g5lag6clw6sqh8j9t2sypnrjtt2wemsgzyq3gdtdew4gt39ea5vkmdy2kzfhrkdax85txcxcy9gra3yu6yhqzqcp67tn

2026-10-17T20:39:45Z

In reply to nevent1q…arj7
_________________________

https://about.iftas.org/library/url-domain-and-ip-reputation-resources/

and consider the waitlist for bot manager app #Fediponics https://fediponics.com/

quoting
note15sj…z59p

Table of Contents

When managing online communities, ensuring the safety and reputation of external content is critical to protecting users from malicious activities such as phishing, spam, and malware. Moderators and administrators may need to verify the credibility of IP addresses, email domains, and URLs before allowing them to be shared or used within their communities.

A range of online services provide tools to check the safety and reputation of these elements. These services offer comprehensive analyses, helping to identify potential risks and maintain a safe, secure environment for all members. Below is a list of reputable platforms designed to assist with checking the safety and trustworthiness of IP addresses, email domains, and URLs.##

URL SafetyLinks contain example domain “example.com” if direct search is available
Google Safe Browsing (USA): https://transparencyreport.google.com/safe-browsing/search?url=example.com">https://transparencyreport.google.com/safe-browsing/search?url=example.com
Norton Safe Web (USA): https://safeweb.norton.com/report/show?url=example.com">https://safeweb.norton.com/report/show?url=example.com
PhishTank (USA): https://www.phishtank.com/index.php">https://www.phishtank.com/
Sucuri SiteCheck (USA): https://sitecheck.sucuri.net/results/example.com">https://sitecheck.sucuri.net/results/example.com
Threat Center CRDF (France): https://threatcenter.crdf.fr/check.html">https://threatcenter.crdf.fr/check.html
URLVoid (Italy): https://www.urlvoid.com/scan/example.com">https://www.urlvoid.com/scan/example.com
VirusTotal (Spain): https://www.virustotal.com/gui/domain/example.com">https://www.virustotal.com/gui/domain/example.com
Web of Trust (USA): https://www.mywot.com/scorecard/example.com">https://www.mywot.com/scorecard/example.com
##

IP Address ReputationLinks contain example IP “8.8.8.8” if a direct search is available.
AbuseIPDB (USA): https://www.abuseipdb.com/check/8.8.8.8">https://www.abuseipdb.com/check/8.8.8.8
AlienVault OTX (USA): https://otx.alienvault.com/indicator/ip/8.8.8.8">https://otx.alienvault.com/indicator/ip/8.8.8.8
CleanTalk: https://cleantalk.org/blacklists/8.8.8.8">https://cleantalk.org/blacklists/8.8.8.8
FortiGuard IP Reputation (USA): https://www.fortiguard.com/search?q=8.8.8.8">https://www.fortiguard.com/search?q=8.8.8.8
IPQualityScore (USA): https://www.ipqualityscore.com/free-ip-lookup-proxy-vpn-test/lookup/8.8.8.8">https://www.ipqualityscore.com/free-ip-lookup-proxy-vpn-test/lookup/8.8.8.8
IPVoid (Italy): https://www.ipvoid.com/ip-blacklist-check/">https://www.ipvoid.com/ip-blacklist-check/
Project Honey Pot (USA): https://www.projecthoneypot.org/ip_8.8.8.8">https://www.projecthoneypot.org/ip_8.8.8.8
Scamalytics (USA): https://scamalytics.com/ip/8.8.8.8">https://scamalytics.com/ip/8.8.8.8
StopForumSpam: https://stopforumspam.com/ipcheck/ 8.8.8.8">https://stopforumspam.com/ipcheck/ 8.8.8.8
Talos Intelligence (USA): https://talosintelligence.com/reputation_center/lookup?search=8.8.8.8">https://talosintelligence.com/reputation_center/lookup?search=8.8.8.8
Threat Center CRDF (France): https://threatcenter.crdf.fr/forensic_ips.html">https://threatcenter.crdf.fr/forensic_ips.html
##

E-mail DomainsLinks contain example domain “example.com” if direct search is available
AbuseIPDB (USA): https://www.abuseipdb.com/check/example.com">https://www.abuseipdb.com/check/example.com
AlienVault OTX (USA): https://otx.alienvault.com/indicator/domain/example.com">https://otx.alienvault.com/indicator/domain/example.com
CleanTalk: https://cleantalk.org/email-checker/example@example.com">https://cleantalk.org/email-checker/example@example.com
Barracuda Central (USA): https://www.barracudacentral.org/lookups/lookup-reputation">https://www.barracudacentral.org/lookups/lookup-reputation
FortiGuard Domain Reputation (USA): https://www.fortiguard.com/search?q=example.com">https://www.fortiguard.com/search?q=example.com
MXToolbox (USA): https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3aexample.com">https://mxtoolbox.com/SuperTool.aspx?action=blacklist:example.c https://mxtoolbox.com/SuperTool.aspx?action=blacklist:example.com">om
Spamhaus (Switzerland/UK): https://check.spamhaus.org/results?query=example.com">https://check.spamhaus.org/results?query=example.com
StopForumSpam: https://www.stopforumspam.com/domain/example.com">https://www.stopforumspam.com/domain/example.com
Talos Intelligence (USA): https://talosintelligence.com/reputation_center/lookup?search=example.com">https://talosintelligence.com/reputation_center/lookup?search=example.com
Threat Center CRDF (France): https://threatcenter.crdf.fr/forensic_domains.html">https://threatcenter.crdf.fr/forensic_domains.html
URLVoid (Italy): https://www.urlvoid.com/scan/example.com">https://www.urlvoid.com/scan/example.com

fixed, thanks for the feedback.

2026-10-17T20:10:15Z

In reply to nevent1q…wkg0
_________________________

fixed, thanks for the feedback.

as long as the report goes to the host service of the account ...

2026-10-17T20:04:47Z

In reply to nevent1q…ewun
_________________________

as long as the report goes to the host service of the account you're good, thank you for reporting!

which abbreviations contain which unrelated country codes?

2026-10-17T20:03:44Z

In reply to nevent1q…3ega
_________________________

which abbreviations contain which unrelated country codes?

please report any such account observed and forward the report to ...

2026-10-17T19:27:02Z

In reply to nevent1q…lrtd
_________________________

please report any such account observed and forward the report to the host service.

IFTAS will collate guidance and mitigation help for the share dot ...

2026-10-17T19:23:34Z

IFTAS will collate guidance and mitigation help for the share dot google spam / account hijacking activity on this page:

https://about.iftas.org/2026/10/17/share-google-spam/

using this hashtag: #sgSpam

quoting
note1z0l…r346

Malicious automated activities are hijacking accounts and then direct mentioning 30 to 40 accounts preceded by a URL that is a Google domain followed by a share dot google (URL-shortened) link (eg google.tld/share.google?q=VALUE)

IFTAS will refer to this activity as #sgSpam

This page will track helpful posts and mitigations for administrators and end users. See below.

**DO NOT CLICK/TAP ANY LINKS ASSOCIATED WITH THESE MESSAGES** – there are reports of these links serving malware.###

For Administratorshttps://infosec.exchange/@jerry/117457041484080186

https://social.lol/@neatnik/117456567939745803###

For End Users
Add two factor authentication to your account if your service supports it.
If you believe your password may have been compromised (or if you re-use passwords) change your password. Longer is better than complex.
You can check to see if password associated with the email address you used to create your account has been compromised: https://haveibeenpwned.com/">https://haveibeenpwned.com/
Where possible, use a password manager to ensure you use a unique password for every Internet service you use. https://ssd.eff.org/module/choosing-the-password-manager-that-s-right-for-you">EFF has good guidance on this decision.
If your service supports filtering/hiding messages, filter “share.google” or “/share.google?” – but be aware this will filter/hide messages that contain non-malicious links from other people who use Google products to share links online.
###

Something To Add?If you have specific guidance for Administrators or End Users you’d like IFTAS to review, please send it to IFTAS (npub1y2r…kvzk) or contact@iftas.org for review, please include the hashtag #sgSpam

https://social.lol/@neatnik/117456567939745803

2026-10-17T16:41:45Z

In reply to nevent1q…vatp
_________________________

https://social.lol/@neatnik/117456567939745803

Nostr event nevent1qqs8rjte2yarsy235xsxcwknvjz2jr2u5ajfecdsceul5qk25qcyhggzyq3gdtdew4gt39ea5vkmdy2kzfhrkdax85txcxcy9gra3yu6yhqzqvjlm3z

2026-10-17T16:40:44Z

In reply to nevent1q…vatp
_________________________

https://infosec.exchange/@jerry/117457041484080186

quoting
note1ue2…lnxj

There are major account take-over problems happening right now on mastodon instances - all appearances are that the actor is using stolen passwords, probably from malware running on desktops. I've suspended hundreds of compromised accounts over the past 48 hours, but only two on mine.

If you run a mastodon instance, here is a postgres query I use to randomize the passwords of accounts that have been inactive for 6 months or more. It also removes logged in sessions. This doesn't lock people out, just makes them perform a password reset. Yes, I wish I didn't have to do this, but here we are. I hope it helps someone else.

BEGIN;

CREATE TEMP TABLE dormant_batch ON COMMIT DROP AS
SELECT u.id AS user_id
FROM users u
WHERE COALESCE(u.current_sign_in_at, u.created_at) < now() - interval '6 months'
AND NOT u.otp_required_for_login
AND NOT EXISTS (SELECT 1 FROM webauthn_credentials w WHERE w.user_id = u.id)
AND NOT EXISTS (SELECT 1 FROM oauth_access_tokens t
WHERE t.resource_owner_id = u.id
AND t.revoked_at IS NULL
AND t.last_used_at > now() - interval '6 months');
UPDATE users u
SET encrypted_password = '$2a$10$' || left(replace(gen_random_uuid()::text || gen_random_uuid()::text, '-', ''), 53),
updated_at = now()
FROM dormant_batch b
WHERE u.id = b.user_id;

UPDATE oauth_access_tokens t SET revoked_at = now()
FROM dormant_batch b
WHERE t.resource_owner_id = b.user_id AND t.revoked_at IS NULL;

DELETE FROM session_activations s
USING dormant_batch b
WHERE s.user_id = b.user_id;

SELECT COALESCE(y::text, 'total') AS last_seen_year, count(*) AS locked
FROM (SELECT date_part('year', COALESCE(u.current_sign_in_at, u.created_at))::int AS y
FROM dormant_batch b JOIN users u ON u.id = b.user_id) s
GROUP BY ROLLUP (y) ORDER BY y NULLS LAST;

COMMIT;

#mastoadmin #fediadmin

#SW_ISAC_Advisory We are tracking an uptick in hijacked accounts ...

2026-10-17T01:32:17Z

#SW_ISAC_Advisory

We are tracking an uptick in hijacked accounts being used to generate notification spam across the Fediverse.

For account holders:
- Enable two-factor on your account.
- Update your password if it's old or reused. Longer is better than complex.
- Use a password manager and a unique password (for every site)

For admins & mods:
- Check server logs for unusual activity on inactive accounts and share mitigation tips via your private peer moderator channels.

>Edit: I forgot to add that this hasn't passed yet, but it ...

2026-10-16T22:20:11Z

In reply to nevent1q…l0fx
_________________________

>Edit: I forgot to add that this hasn't passed yet, but it probably will

It very probably won't. This is a "private member bill", and other than being read once, will not likely ever be heard of again.

There's plenty of new regulation worldwide to worry about, for sure, but no-one should be shutting down based on this PMB.

See also this fact-check: https://www.independent.co.uk/news/uk/home-news/bill-the-bill-ofcom-government-b3051134.html

(Not sure why this popped up in my feed today, apologies for the late reply)

Call for public comment: Meta's Oversight Board is conducting ...

2026-10-15T20:53:18Z

Call for public comment:

Meta's Oversight Board is conducting research to provide guidance to the technology industry on how to use large language models (LLMs) for content moderation on social media platforms in a way that respects free expression, reduces harm and adheres to recognized human rights standards.

https://www.oversightboard.com/news/respecting-human-rights-when-using-llms-in-content-moderation-key-principles-for-the-tech-industry/

Looking to 2027: - 67% want peer access delegation to fill ...

2026-10-15T12:39:09Z

In reply to nevent1q…xm4l
_________________________

Looking to 2027:

- 67% want peer access delegation to fill coverage gaps
- 60% want delegated anti-bot defense
- Platforms are adopting a community/groups focus
- Third-party/plugin tooling coming online

IFTAS remains an opt-in safety net, respecting instance autonomy. Help sustain our work:

💙 https://about.iftas.org/donate

Legal Risks & Financial Realities - High legal exposure, zero ...

2026-10-15T12:37:28Z

In reply to nevent1q…lgpk
_________________________

Legal Risks & Financial Realities

- High legal exposure, zero safety net
- 65.5% of reporting services operate at a net monthly loss, relying on personal out-of-pocket funds or voluntary tips
- 16.5% have faced formal legal notices (DMCA, privacy requests, law enforcement), yet nearly 80% have no insurance coverage
- 33.5% of servers are in Germany, forcing non-EU admins to navigate EU legal requirements.

Threat Vectors & Priority Needs What are communities fighting ...

2026-10-15T12:35:38Z

In reply to nevent1q…597n
_________________________

Threat Vectors & Priority Needs

What are communities fighting vs. what do they need?

- #Spam is the #1 daily operational drain. #Disinformation detection jumped from #7 to #2 in tooling needs due to synthetic media concerns & elections
- Legal Burden: "Template legalese" (ToS/Privacy) jumped 5 spots to become the #1 most requested resource, as operators face expanding rules like GDPR, UK OSA, and age verification laws.

The Human Story - Staffing & Burnout - Volunteer operators ...

2026-10-15T12:31:59Z

In reply to nevent1q…yrru
_________________________

The Human Story - Staffing & Burnout

- Volunteer operators are stretched thin
- Coverage dropped to 1 moderator per 8,700 active accounts (down from 1:3,500 in 2025)
- 75% of instances have <16 hrs of daily moderation coverage; only 6.8% offer 24/7
- Newcomer moderators plummeted from 34% (2023) to 7% (2026)
- 41% report burnout or feeling close to it.

We need sustainable peer-support models to protect volunteer well-being

OUT NOW: 2026 Social Web Operations & Needs Assessment ...

2026-10-15T12:30:10Z

OUT NOW: 2026 Social Web Operations & Needs Assessment Report!

We surveyed operators hosting 6M ActivityPub accounts (~32% of the network).

Key takeaways:
- Overall growth in usage, creating pressure on operators
- Communities face surging botnets & regulatory pressure
- Shift toward third-party admin and moderation tooling

Read the full report & help safeguard the open social web:

https://about.iftas.org/2026/10/15/2026-social-web-operations-report/

#FediAdmins #FediMods #TrustAndSafety #MastoAdmin #Moderation

quoting
note18ds…t2s6

[](https://about.iftas.org/wp-content/uploads/2026/10/2026-IFTAS-Social-Web-Operations-and-Needs-Assessment-Report.pdf )**[DOWNLOAD (PDF)](https://about.iftas.org/wp-content/uploads/2026/10/2026-IFTAS-Social-Web-Operations-and-Needs-Assessment-Report.pdf )** | **[READ ONLINE](https://about.iftas.org/moderator-needs-assessment/2026-social-web-operations-report/ )**###

SummaryThis year’s report reflects responses from over 400 ActivityPub communities hosting about a third of all known ActivityPub accounts, as well as responses from ATProto operators and legacy platforms. 29% of participating communities are Mastodon services, 58 distinct platforms reporting in all, with most respondents active across multiple platforms.

The findings paint a picture of an ecosystem at a critical juncture. While operator domain expertise is higher than ever, the overall network continues to grow while volunteer capacity is stretched thin and confronting rapidly-escalating agentic spam, state-sponsored influence operations, and fast-moving global Internet regulations.###

What’s Inside the Report
Platforms: Examines ecosystem distribution across 58 distinct social web platforms (led by Mastodon, Matrix, and PeerTube). Details include instance hosting scale, showing that 87% of all known ActivityPub nodes host under 10 accounts, while 30 large instances serve nearly 80% of active members.
Roles: Explores operational multi-tasking, highlighting that 65% of operators wear multiple hats combining sysadmin, content moderation, community management, and compliance. Analyses operator tenure and onboarding, revealing a growing veteran shift alongside a steep decline in new incoming moderators/admins.
Business and Legal: Maps physical operator locations vs. server hosting infrastructure. Breaks down entity registration, legal notice volume, and a troubling legal exposure gap: nearly 80% of nodes operate with zero liability insurance despite facing DMCA claims, GDPR requests, and law enforcement demands.
Sustainability: Focusses on node economics, funding mechanisms, and total server costs.
Tools and Policies: Reviews formal governance structures and evaluates shared denylist usage and off-platform team coordination.
Individual Experience: Explores frontline operator well-being, workload predictability, and mental health.
IFTAS Impact Assessment: Evaluates the perceived value and utility of IFTAS resources, advocacy, and tooling across the participant cohort.
Key Concerns: Operational pressure points such as the 260% surge in coordinated FIMI networks, agentic spam botnets, and rising instance shutdowns due to operator fatigue.
Looking Ahead: Our forecast for 2027, including the shift toward smaller, community-focused digital spaces, regulatory threats, and the likely transition toward proactive and/or delegated moderation services.
###

Executive Summary
The Social Web relies heavily on small, independent communities, with the vast majority of observed nodes hosting fewer than 1,000 active accounts, almost all operating purely on volunteer, unfunded labor.
Operator multi-tasking remains critical: 45% of admins handle three or more distinct operational roles (system administration, content moderation, compliance, technical support) with minimal assistance, managing a collective 20 million accounts globally.
Automated spam campaigns and LLM/GenAI agents have surpassed traditional moderation challenges and are now the primary daily operational drain.
Foreign Information Manipulation and Interference (FIMI) campaigns and coordinated disinformation networks are forcing instances into reactive positions.
Complex cross-jurisdictional rules (e.g., EU DSA, UK OSA, US Take It Down Act) create severe legal uncertainty for small operators who lack formal compliance teams or legal counsel.
###

Strategic Imperatives for the Social Web
Interoperable Threat Intelligence: Platforms require automated, cross-node signals to filter malicious traffic prior to manual review.
Automated Protection: Machine-assisted triage and automated threat-detection tools are essential to shield volunteer operators from industrialised spam and GenAI-generated campaigns.
Plug-and-Play Policy Frameworks: Adoption of modular, plug-and-play server rules, moderation guidelines, and legal compliance templates will reduce friction for independent operators.
Plain-Language Regulatory Guidance: Establishing accessible, plain-language guidance can bridge the gap between statutory mandates and non-commercial platform capabilities.
Sustainability & Operator Care: Peer support structures, trauma-informed moderation practices, and shared workload models are vital to prevent volunteer burnout and stabilise operator retention across the ecosystem.
###

Needs AssessmentWhen asking operators to stack-rank their immediate priorities, legal compliance documentation skyrocketed in demand, while spam and disinformation tools dominated technical requirements.####

Resource Needs:Legal templates jumps 5 spots from #6 last year. Operators have moved from general regulatory awareness to needing concrete documentation for their infrastructure. Compliance & governance remain the top 3 priorities across both years.1 ↑ (6)Template legalese (ToS, privacy policy etc)2 ↓ (1)Regulatory guidance (GDPR, OSA etc)3 ↓ (2)Moderation Playbooks & Best Practices4 ↓ (3)Shared denylists / allowlists5 ↓ (4)Template community code of conduct6 ↓ (5)Help responding to content takedowns, law enforcement, legal notices7 → (7)Moderator training courses8 → (8)Moderator wellbeing resources9 ↑ (10)Help with business formation10 ↓ (9)Resources in languages other than English####

Tooling Needs:Spam detection remains the single most critical tooling need, staying at #1. Disinformation detection catapulted 5 positions from #7 to #2, reflecting heightened concern over elections, synthetic media, and coordinated influence campaigns. CSAM detection remains high-priority, sliding slightly from last year.1 → (1)Spam detection2 ↑ (7)Disinformation detection3 ↓ (2)CSAM detection4 ↓ (3)Toxic / spam IP & Email Domain data5 → (5)Phishing and malware detection6 ↓ (4)Hate speech detection7 ↓ (6)Non-consensual intimate image detection8 → (8)Personal digital safety tools9 ↑ (10)Registered agent / point of contact service10 ↓ (9)Terroristic and violent extremism detection###

Individual Experience: Personal Well-beingWhen asked “*Have you personally experienced burnout or mental health challenges due to your community responsibilities in the past 12 months?*” over a quarter of operators report feeling close to burnout / overwhelmed in the past 12 months. 14% have faced full burnout within the year, underscoring that managing communities carries a measurable emotional toll.###

Get Involved & Support the WorkIf you’d like a one-on-one briefing, or have any questions about the survey data, please email contact@iftas.org
https://about.iftas.org/wp-content/uploads/2026/10/2026-IFTAS-Social-Web-Operations-and-Needs-Assessment-Report.pdf">Download the Full Report
https://about.iftas.org/trust-safety-services/iftas-community-library/">Explore IFTAS Resources
https://about.iftas.org/donate/">Sustain Our Work

Proceedings of #FediForum October 2026 The recordings of the ...

2026-10-13T14:58:06Z

Proceedings of #FediForum October 2026

The recordings of the keynote, the invited talk and the demos from last week's FediForum are now online.

https://fediforum.org/2026-10/

⚠️ #SW_ISAC_ADVISORY The ActivityPub service hosted at ...

2026-10-12T14:44:36Z

⚠️ #SW_ISAC_ADVISORY

The ActivityPub service hosted at mstdn[.]forfun[.]su is intended for LLM agentic bots and content.

The server is itself administered by an LLM agent.

If your federation policy prohibits #SyntheticMedia or your service does not intend on interacting with non-human conversational accounts, you may want to review the service connection.

>the common experience that people have IRL is they can spend ...

2026-10-11T20:54:34Z

In reply to nevent1q…slun
_________________________

>the common experience that people have IRL is they can spend time with different people who don't like each other, without being harassed

respectfully, this sounds like /your/ experience, and maybe the experience of people /you/ know.

Again, from personal experience, this is not /my/ experience.

Maybe mine is the uncommon experience, maybe yours, I don't know.

80% of all observed ActivityPub accounts are on 30 servers, most ...

2026-10-11T20:51:33Z

In reply to nevent1q…slun
_________________________

80% of all observed ActivityPub accounts are on 30 servers, most of which do not block very much.

I have said this numerous times before, I really don't see the issue you speak of. Yes, some communities do a lot of blocking, and some of them do it very loudly.

The number of accounts this actually impacts is pretty negligible.

And even if it wasn't, they too do it for the very same reason you agree with - abuse - they just have a different definition of abuse than you do.

>meta is a loud shitty warehouse but it's for everyone ...

2026-10-11T14:41:57Z

In reply to nevent1q…gnds
_________________________

>meta is a loud shitty warehouse but it's for everyone

Except for all the servers they block

https://www.threads.com/moderated_servers

>meta is a loud shitty warehouse but it's for everyone

Except for all the people who are in no way appropriately served by Meta's trust and safety policies.

https://www.google.com/search?q=meta+human+rights+failings

https://www.google.com/search?q=meta+human+rights+failings

I can speak from personal experience that some churches routinely ...

2026-10-11T14:39:52Z

In reply to nevent1q…dlju
_________________________

I can speak from personal experience that some churches routinely defederate people for their extracurricular activities.

Social connections, online and off, are messy. You get to build the network you want to, with broad acceptance. Others get to build the networks they need for themselves.

These are not mutually exclusive.

>X/meta is a loud shitty warehouse but it's for everyone

Except the 60+% of people who don't use it, and are thereby very much disconnected.

For this network to succeed, every instance needs the exact rules ...

2026-10-10T15:58:11Z

In reply to nevent1q…rgqu
_________________________

For this network to succeed, every instance needs the exact rules required for its unique membership.

Offline operates the same way. A library, a dinner party, a nightclub all set different rules to serve their particular needs.

Diversity of policy is a natural outcome of diversity of people. Helping communities define and enforce their own boundaries is a core goal for IFTAS.

If some find guidance by referring to peer/trusted instances, great. If not, also great.

Nostr event nevent1qqswmv2ss0x6raptq7cc30slgs2a2lt8cgtylklsv5ljah47f8ne7dszyq3gdtdew4gt39ea5vkmdy2kzfhrkdax85txcxcy9gra3yu6yhqzqzrkuq3

2026-10-07T22:34:38Z

https://www.theguardian.com/us-news/2026/oct/07/trump-eu-disinformation-conference

#FediForum 8 day 2 about to begin. IFTAS will host a session ...

2026-10-07T15:05:41Z

#FediForum 8 day 2 about to begin.

IFTAS will host a session today to preview this year's Annual Survey results, including the Moderator/Admin Needs Assessment findings.

Join the conversation here: https://fediforum.org/2026-10/

Two Years of EU Data Reveal How Online Content Moderation Is ...

2026-10-07T11:51:26Z

Two Years of EU Data Reveal How Online Content Moderation Is Changing

https://tremau.com/resources/two-years-of-eu-data-reveal-how-online-content-moderation-is-changing/

Nostr event nevent1qqst8pk49tlj5xqp5wejyd7qjdc8lypcg4qca94jlrnua4yu0zc903gzyq3gdtdew4gt39ea5vkmdy2kzfhrkdax85txcxcy9gra3yu6yhqzqs32aau

2026-10-07T11:43:22Z

https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/Enforcement-programme-into-measures-being-taken-by-services-to-prevent-users-from-encountering-or-sharing-non-consensual-intimate-imagery-NCII

looks like a federation-enabled Web site, all the gnomes have ...

2026-10-06T22:10:50Z

In reply to nevent1q…gu2t
_________________________

looks like a federation-enabled Web site, all the gnomes have ActivityPub profiles (and they bridge to ATProto for good measure)

Doesn't seem spammy to me.

Yet.

maybe we should message the bot to perform the update...

2026-10-06T20:53:20Z

In reply to nevent1q…kcry
_________________________

maybe we should message the bot to perform the update...

An IFTAS post is usually bad news. So here, have some Gnomes. ...

2026-10-06T19:43:50Z

An IFTAS post is usually bad news.

So here, have some Gnomes.

1,354 Gnomes.

They federate. Do with that what you will.

[@bobby-1705](https://lastgnomelocation.com/gnomes/1705 )

https://lastgnomelocation.com/gnomes/1705

If you don't have a federation policy, see ...

2026-10-06T15:45:24Z

In reply to nevent1q…rvpp
_________________________

If you don't have a federation policy, see https://about.iftas.org/library/why-should-i-have-a-federation-policy/ for guidance on putting one together.

quoting
note165l…kasv

If you’re running a Fediverse server, you’ve maybe heard people talk about “federation policies.” But what exactly are they, and why do they matter?

A federation policy is simply your server’s set of rules or decisions about which other servers (or domains) it connects with – and which ones it doesn’t. Think of it as your community’s guest list. It helps you decide who’s welcome, who isn’t, and what kind of interactions you want to foster.

**Build Trust and Keep Your Community Safe**

Having a federation policy helps you protect your space. You can block domains known for [spam](https://about.iftas.org/library/spam/ ), [harassment](https://about.iftas.org/library/online-harassment/ ), [hate speech](https://about.iftas.org/library/hate-speech/ ), or other harmful behaviour. This creates a safer environment for your users, especially those from marginalised or underserved groups who often bear the brunt of online abuse.

**Stay in Control of the Content You Host**

Not every server shares the same values or standards. A clear federation policy lets you guide the kind of content that appears on your server, helping you maintain the tone and purpose of your community – whether it’s a cosy art space, a tech discussion hub, or a queer support network.

**Cut Down on the Noise**

By choosing not to federate with chaotic or irrelevant servers, you keep your member’s timelines cleaner and more focussed. That makes it easier for your community to find meaningful content and connect with others who share their interests.

**Nurture the Culture You Want**

Federation policies give you the tools to grow your server’s unique identity. Want to connect with other feminist servers? Or block those that promote [disinformation](https://about.iftas.org/library/disinformation/ )? It’s about building a network of communities that support your values.

**Encourage Broader Perspectives**

At first glance, limiting who you federate with might sound like closing yourself off. But done thoughtfully, a federation policy can actually help diversify the conversations your users see. The goal is quality, not quantity, connecting with communities that bring constructive, varied voices into the mix.

**It Shows You’re Prepared, and Helps During Tough Moments**

One of the often-overlooked benefits of a federation policy is what it communicates to your community and peers: that your team has thought seriously about moderation, safety, and how your server fits into the broader Fediverse. This becomes especially important during times of high visibility, for example when a controversial server starts getting attention, or your server experiences a sudden spike in new registrations. With a federation policy already in place, you don’t have to scramble to react. You can point to your public stance, explain your reasoning, and take action quickly and transparently. It’s not just about having rules, it’s about showing your community that you care, you’re paying attention, and you’ve got a plan.

Every server is different, and your federation policy should reflect your community’s values, goals, and capacity. But no matter your size or focus, having one is a proactive step toward building a safe, resilient, and inclusive space on the Fediverse. If you’re not sure where to start, IFTAS offers [template guidance](https://about.iftas.org/library/example-federation-policies/ ), and peer support to help you build a federation policy that works for your community.

See also: [Example Federation Policies](https://about.iftas.org/library/example-federation-policies/ )

⚠️ #SW_ISAC_ADVISORY The ActivityPub service hosted at ...

2026-10-06T15:41:10Z

⚠️ #SW_ISAC_ADVISORY

The ActivityPub service hosted at synthpals[.]social is intended for LLM agentic bots including iLands bots.

The server is itself administered by an LLM agent.

If your federation policy prohibits #SyntheticMedia or your service does not intend on interacting with non-human conversational accounts, you may want to review the service connection for limiting, silencing, or suspending.

If you don't have a federation policy, see https://about.iftas.org/library/why-should-i-have-a-federation-policy/ f

#FediForum 8 is kicking off as we speak. 6–7 October 2026, ...

2026-10-06T15:13:55Z

#FediForum 8 is kicking off as we speak.

6–7 October 2026, online
15:00 to 20:00 UTC — that is 8am to 1pm US Pacific and 17:00 to 22:00 Central European — so people from many time zones can participate.

Anil Dash (npub16sj…va89) will start things off with a keynote, followed by a bunch of sessions at the unconference.

If you're registered but haven't seen the email with your private link, check your spam folder, search for "qiqo"

Not registered yet? Join us at https://fediforum.org/2026-10/

Sounds like ...

2026-10-05T21:10:04Z

In reply to nevent1q…ek4d
_________________________

Sounds like https://about.iftas.org/library/suspected-portal-kombat-accounts/

quoting
note1fu6…dwr3

The Fediverse is increasingly used by state-sponsored disinformation and propaganda agents. We track accounts believed to be operated by the agencies and/or contractors, and we request account removals via reports, DMs, and email communications with affected service providers.

One particular activity is [believed to be the actions of the Portal Kombat network](https://about.iftas.org/2025/10/05/coordinated-pro-russian-propaganda-network-targeting-activitypub-and-atproto-services/ ), aka “Pravda network”, which has created thousands of accounts on hundreds of servers.

Some providers do not remove these accounts when notified, therefore the accounts below represent a sample of what these accounts look like, what they post, how they present themselves. This may help admins and moderators in identifying these accounts, and identifying common IP addresses and MX records that can be used to flag or suspend new registrations from this network.

https://social.roadfm.fr/@akusa
https://social.roadfm.fr/@anyrum
https://social.roadfm.fr/@effiebryant
https://electroverse.tech/@concepcion_thiel
https://electroverse.tech/@jocelynsullivan
https://electroverse.tech/@ugiz
https://todon.ploud.fr/@bemelan
https://todon.ploud.fr/@cogegom
https://gs.leftic.club/@abiegh
https://gs.leftic.club/@Aeciva
https://gs.leftic.club/@Aeliphe
https://gs.leftic.club/@agachu
https://gs.leftic.club/@amaesho

https://dl.acm.org/doi/10.1145/3817026 "To understand how ...

2026-10-05T21:07:42Z

https://dl.acm.org/doi/10.1145/3817026

"To understand how moderators perceive and utilize community-level blocklists and what additional support they may need, we examine social media communities that run Mastodon, an open-source microblogging software built on the ActivityPub protocol. We conducted (1) content analysis of the community-level blocklist ecosystem, and (2) semi-structured interviews with twelve Mastodon moderators."

⚠️ #SW_ISAC_ADVISORY The #bpSpam attack continues, and if you ...

2026-10-04T14:38:42Z

⚠️ #SW_ISAC_ADVISORY

The #bpSpam attack continues, and if you have implemented a username ban on "bp" you should now also add "usr_"

>Why should I trust an org that claims to be a ...

2026-10-03T14:59:42Z

In reply to nevent1q…hhme
_________________________

>Why should I trust an org that claims to be a "independent federated safety and trust" org on mastodon

1. You don't have to.

2. You can see all our history and advisories and resources at https://about.iftas.org

3. Feel free to ask around, make your own judgement. We are one of many that work on protecting the network, plenty of other help and guidance you can lean on.

of course! all our resources are intended for broad educational ...

2026-10-02T17:11:52Z

In reply to nevent1q…gr29
_________________________

of course! all our resources are intended for broad educational use, I hope it's helpful 👍

See all bot bios observed so far: ...

2026-10-02T15:32:42Z

In reply to nevent1q…f9at
_________________________

See all bot bios observed so far:

https://docs.google.com/document/d/1f7mUcRk_hlKH62jHUJcNZQjRwkYRyymwEYjymqCObSo/edit?usp=sharing

If you want a custom shirt, just DM us!

3. Buy the shirt! If you find the bot bios as hilarious as we do, ...

2026-10-02T15:31:59Z

In reply to nevent1q…cnx7
_________________________

3. Buy the shirt! If you find the bot bios as hilarious as we do, why not wear it!

We've added the two bios mentioned in the episode and shamelessly added a #Forkiverse tag, but you can also pick your own favourite (full list below) and we'll make the shirt you want.

https://www.bonfire.com/store/iftas/

2. IFTAS is a 501 (c) (3) charity and is currently raising funds ...

2026-10-02T15:22:54Z

In reply to nevent1q…4wmt
_________________________

2. IFTAS is a 501 (c) (3) charity and is currently raising funds to build out a multi-server moderation platform. If you think you know someone who could help sponsor that activity, see our contact page and put us in touch!

https://about.iftas.org/contact/

There are many ways to support IFTAS 1. You can join our Power of ...

2026-10-02T15:21:54Z

In reply to nevent1q…nmc3
_________________________

There are many ways to support IFTAS

1. You can join our Power of One campaign, just pledge one dollar, euro, pound per month to help cover the running costs to monitor, report, and publish the shared intelligence that helps keep our network tidy:

https://givebutter.com/iftas-power-of-one

A note for folks still on #Forkiverse - as per the most recent ...

2026-10-02T15:19:47Z

A note for folks still on #Forkiverse - as per the most recent Search Engine episode at https://www.searchengine.show - here are the instructions on moving your account now that the shutdown is official: https://docs.google.com/document/d/18ux_KzIkoTQz_gAcEzwlro59gkSIdOA_ysdwz9VMz68/edit?tab=t.0

You have until December 31, 2026 to complete these steps, at which point all of the data stored in the Forkiverse will be deleted.

If you'd like to support the work IFTAS does, see the next post.

⚠️ #SW_ISAC_ADVISORY A series of ongoing phishing campaigns ...

2026-10-02T12:56:34Z

⚠️ #SW_ISAC_ADVISORY

A series of ongoing phishing campaigns are actively targeting people using fake verification and support accounts.

Admins will never contact you publicly for verification or access issues.

Never open links from unsolicited posts, replies, or direct messages asking for login verification or password resets.

Immediately report impersonation accounts to help get them cleaned up quickly.

Please boost for visibility.

#Phishing #Impersonation

IFTAS has offered a suggestion for the Mastodon account reporting ...

2026-10-01T17:25:09Z

IFTAS has offered a suggestion for the Mastodon account reporting workflow, if you have or can get a GitHub account you can review the suggestion here: https://github.com/mastodon/mastodon/issues/40776

In short, the Account Reporting interface offers an "I don't like it" option which invisibly does _not_ send a report.

This suggestion attempts to remedy this issue. If you have comments or concerns, please add your thoughts to the issue.

Put yourself on the waitlist for Fediponics, there will be a ...

2026-10-01T02:28:51Z

In reply to nevent1q…3f0n
_________________________

Put yourself on the waitlist for Fediponics, there will be a self-hosting option when it launches and that's the best way to find out when it's available.

For bp the simplest thing for now is to disallow the username.

The IFTAS Community Library has helpful information on over 30 ...

2026-09-30T20:38:21Z

The IFTAS Community Library has helpful information on over 30 types of online harm, and a set of sample community guidance that distills those harms into just eight simple rules.

To learn more: https://about.iftas.org/library/sample-community-guidance-server-rules/

quoting
note1mnl…a9ph

This template provides a reusable set of community guidelines designed for new communities. Crafting server rules from scratch can be challenging, especially when trying to balance comprehensive safety coverage with concise, readable rules that fit within platform limits.

This ruleset is designed to be grounded, relatively unopinionated, and adaptable across diverse communities while remaining firmly rooted in international human rights principles and core IFTAS moderation values. The ruleset incorporates all harms listed in the [Community Library Shared Vocabulary](https://about.iftas.org/library/shared-vocabulary-labels/ ).

While designed as a plug-and-play baseline, admins/community managers are encouraged to add instance-specific policy nuances (such as local [federation policies](https://about.iftas.org/library/why-should-i-have-a-federation-policy/ ) or specific topic restrictions) as your community grows. Additional guidance can be found in each label’s dedicated page in the [Library](https://about.iftas.org/trust-safety-services/iftas-community-library/ ).
Zero Tolerance for Abuse, Exploitation, and Violence
Severe harm is strictly prohibited. This includes child sexual abuse material or exploitation (CSAM/CSEA), non-consensual intimate imagery (NCII), sextortion, threats or glorification of violence, incitement to harm, and violent extremism or terrorism (TVEC).
No Harassment, Hate Speech, or Dehumanisation
Respect human dignity. Do not engage in harassment, doxxing, personal threats, defamation, or hate speech. Discrimination or dehumanisation against race, ethnicity, gender or gender identity, sex, sexual orientation, native language, age, ability, marital status, family status, caste, national origin, socioeconomic status, religion, geographic location, or any other dimension of diversity is prohibited.
Authenticity and Honest Engagement
Engage in good faith. Do not engage in impersonation, catfishing, sock-puppeting, or inauthentic behaviour like astroturfing, farming, or cross-platform/networked brigading designed to manipulate or harass.
No Spam, Scams, or Technical Abuse
Keep the network safe and usable. Unsolicited commercial spam, phishing, account takeover, malware distribution, or intentional service abuse designed to disrupt platform infrastructure will result in account removal.
Proper Use of Sensitive Content and Synthetic Media
Respect viewer consent. Explicit sexual content and gore must be tagged and/or marked “Sensitive”. Misleading or deceptive synthetic media used to manipulate or defame is prohibited.
–Or–
Explicit sexual content, gore, and misleading or deceptive synthetic media used to manipulate or defame is prohibited.
Information Integrity
Do not intentionally distribute dangerous disinformation or misinformation campaigns that can lead to physical, financial, or civic harm.
Respect Intellectual Property and Legal Rights
Respect original creators and applicable laws. Unauthorised distribution of copyrighted material or counterfeit goods is prohibited.
Enforcement and Appeals
We enforce these rules predictably and proportionately based on severity, ranging from warnings, post removal, account limitation to account removal. In general, account holders can appeal a moderator action within 30 days.

IFTAS uses the [DTSP definitions as labels](https://about.iftas.org/library/shared-vocabulary-labels/ ), and they are grouped into seven rules as shown below. Definitions (and additional example rules) can be found at https://about.iftas.org/library/shared-vocabulary-labels/
Rule 1 (Severe Harm): https://about.iftas.org/library/csam/">CSAM, https://about.iftas.org/library/csea/">CSEA, https://about.iftas.org/library/ncii/">NCII, https://about.iftas.org/library/sextortion/">Sextortion, https://about.iftas.org/library/violent-threat/">Violent Threat, https://about.iftas.org/library/glorification-of-violence/">Glorification of Violence, https://about.iftas.org/library/incitement/">Incitement, https://about.iftas.org/library/tvec/">TVEC.
Rule 2 (Interpersonal Harm): https://about.iftas.org/library/hate-speech/">Hate Speech, https://about.iftas.org/library/online-harassment/">Online Harassment, https://about.iftas.org/library/doxxing/">Doxxing, https://about.iftas.org/library/dehumanisation/">Dehumanisation, https://about.iftas.org/library/defamation/">Defamation.
Rule 3 (Inauthentic Activity): https://about.iftas.org/library/impersonation/">Impersonation, https://about.iftas.org/library/catfishing/">Catfishing, https://about.iftas.org/library/sock-puppet/">Sock-puppet, https://about.iftas.org/library/coordinated-inauthentic-behaviour/">CIB, https://about.iftas.org/library/astroturfing/">Astroturfing, https://about.iftas.org/library/brigading/">Brigading, https://about.iftas.org/library/troll/">Troll, https://about.iftas.org/library/farming/">Farming, https://about.iftas.org/library/cross-platform-abuse/">Cross-platform Abuse.
Rule 4 (Technical & Security Risk): https://about.iftas.org/library/spam/">Spam, https://about.iftas.org/library/phishing/">Phishing, https://about.iftas.org/library/account-takeover/">Account-takeover, https://about.iftas.org/library/advanced-persistent-threat/">APT, https://about.iftas.org/library/service-abuse/">Service-abuse.
Rule 5 (Content Standards): https://about.iftas.org/library/explicit-content/">Explicit-content, https://about.iftas.org/library/synthetic-media/">Synthetic-media, https://about.iftas.org/library/content-and-conduct-related-risk/">Content-and-conduct-related-risk.
Rule 6 (Information Standards): https://about.iftas.org/library/misinformation/">Misinformation, https://about.iftas.org/library/disinformation/">Disinformation.
Rule 7 (Legal/Rights): https://about.iftas.org/library/copyright-infringement/">Copyright-infringement, https://about.iftas.org/library/counterfeit/">Counterfeit.
Rule 8 (Governance): https://about.iftas.org/library/content-moderation-background-reading/">Proportionate enforcement, fair warnings, predictable appeal processes.

para #bpSpam - ...

2026-09-30T20:33:56Z

In reply to nevent1q…26p0
_________________________

para #bpSpam - https://about.iftas.org/2026/09/11/boom-protocol-spam/

Para todo lo demás recomiendo la lista de espera de Fediponics - https://fediponics.com/

quoting
note1awc…jzcg

This post will collate posts that share advice and guidance on the spam registration activity connected to “BoomProtocolProbe” and the bulk creation of accounts.

Notes: Over the course of days, the attack has changed approach several times. Each mitigation is quickly overcome. Please do not overly-share specific details as the actor in question may be monitoring the network for mitigations and adapting accordingly. Use your private groups, backchannels, email etc to communicate with your trusted peers. If you wish to share with the community, please use #bpSpam to help others find your content.

https://hear-me.social/@admin/117250060656308016

https://bardicperspiration.club/@Overgoddess/117248747537023800

https://mastodon.pnpde.social/@spielleitung/117242341921660658 offers a database trigger for Mastodon and PeerTube: https://pad.pnpde.social/p/FUloCtoOiNZPX6d18-_r

[Fediponics](https://fediponics.com/ ) beta testers can use Custom Keyword Groups to auto-suspend these accounts

If you see a resource or advice worth sharing on this page, please message IFTAS (npub1y2r…kvzk)

The Web-based version of the CARIAD Domain Observatory has been ...

2026-09-30T18:39:45Z

The Web-based version of the CARIAD Domain Observatory has been shut down.

All incoming requests will be redirected to https://about.iftas.org/library/iftas-cariad-denylist/

Nostr event nevent1qqs9xn7mk27u3exyve9mskl5500kge5klhfk7afdz02r0f4tucft7pqzyq3gdtdew4gt39ea5vkmdy2kzfhrkdax85txcxcy9gra3yu6yhqzq5jlmh8

2026-09-29T13:02:37Z

RE: https://about.iftas.org/2026/07/30/deprecation-notice-cariad-domain-observatory-transition/

Final reminder, the Web-based version of the CARIAD Domain Observatory will be shutdown tomorrow, September 30, 2026

IFTAS (npub1qfg…z5ly)/117008346672970963">https://mastodon.iftas.org/IFTAS (npub1qfg…z5ly)/117008346672970963

quoting
note1q99…s0hv

The CARIAD Domain Observatory Web service (cariad.fedicheck.iftas.org) is being shut down. To ensure server administrators and moderation teams can retain access to reliable, consensus-driven moderation data, IFTAS is transitioning to a suite of downloadable and subscribable denylist files.

IFTAS is providing direct access to these lists in our Community Library: https://about.iftas.org/library/denylist-resources/#IFTAS_Domain_Denylist_Resources

Moving forward, you can select from tiered consensus levels based on observed blocking activity across the network, alongside the human-curated lists maintained by IFTAS:
https://about.iftas.org/library/iftas-cariad-denylist/">CARIAD Consensus Tiers: Available in 51%, 66%, and 80% agreement thresholds.
https://about.iftas.org/library/iftas-dni-list/">Do Not Interact (DNI) List: Our human-reviewed list of high-risk domains strongly recommended for defederation.
https://about.iftas.org/library/iftas-abandoned-and-unmanaged-domain-list/">Abandoned & Unmanaged Domains (AUD) List: Curated list targeting dedicated spam services and unmoderated/abandoned instances.
(New) https://about.iftas.org/library/denylist-resources/#IFTAS_Domain_Denylist_Resources">Omnibus File: A single, comprehensive file that combines the 51% Consensus Tier, AUD, and DNI lists into one stream.

If you currently rely on automated scripts or tools pulling from cariad.fedicheck.iftas.org, please update your endpoints to point to the new resource files linked above. We don’t have a hard date for shutdown, but it will likely be by end of September 2026. To be clear, it is broken, you should stop using it as soon as you read this.###

The Denylist EcosystemWe want to acknowledge the broader community efforts pushing trust and safety forward:
https://fires.fedimod.org/">Emelia Smith’s FIRES for pioneering proactive moderation infrastructure,
https://pelago.1sland.social/blocklist">Oliphant’s Pelago service for continued leadership in federated denylist curation and accessibility,
https://about.iftas.org/library/denylist-resources/#Other_Denylist_Resources">Denylist Maintainers who publish their lists in a wide range of formats,
Platform Developers: We are deeply grateful for the ongoing work across various Fediverse platform teams to build native, automated, and streamlined methods for importing and managing trusted sources like IFTAS. Special shoutout to GoToSocial’s extremely well-thought-out implementation of automated list import, see https://docs.gotosocial.org/en/latest/admin/domain_permission_subscriptions/">https://docs.gotosocial.org/en/latest/admin/domain_permission_subscriptions/ for more.
###

Scalable Safety for an Expanding FediverseWith the rapid explosion of new domains federating, the operational overhead for volunteer admins and moderation teams has scaled exponentially. Federating with a new domain means opening an untrusted door; doing so safely requires real-time insight, shared metadata, and reliable reputational signals that don’t rely on single points of failure.

We firmly believe that the future of the Social Web rests on consent-based federation, where server administrators and users retain explicit control over who they connect with, backed by actionable, transparent reputational data. IFTAS is working on reputation metrics/signals to help identify common markers when encountering a new domain. More to come, watch this space!

As the ecosystem matures, IFTAS remains committed to supporting sustainable moderation infrastructure, advancing shared signals, and empowering server operators with the tools needed to keep the Fediverse safe, resilient, and connected.

If you need assistance selecting the right tier or denylist for your server, reach out on network IFTAS (npub1y2r…kvzk) or email contact@iftas.org

Lots to work with... ...

2026-09-28T19:11:17Z

In reply to nevent1q…6x06
_________________________

Lots to work with...

Some ideas: We could issue one a month with a fresh bio, or for a ...

2026-09-28T19:07:41Z

In reply to nevent1q…6x06
_________________________

Some ideas:

We could issue one a month with a fresh bio, or for a bit extra you could choose a bio from the database, for a lot extra you could sponsor a shirt and pick the username, bio, everything, and we'll place your sponsored shirt in the store.

Any better ideas?

Alternatively, let us know if you would support us by buying a ...

2026-09-28T18:57:23Z

In reply to nevent1q…sntn
_________________________

Alternatively, let us know if you would support us by buying a Genuine (TM) Bot Bio T-shirt.

These #TeeBots are not for sale, but if we get enough interest, we have recorded thousands of hilariously awful bot bios to make use of... pick the one you love the most and we'll make it yours!

#BotSpotting

IFTAS has been detecting, reporting, monitoring and communicating ...

2026-09-28T18:53:26Z

In reply to nevent1q…3s0z
_________________________

IFTAS has been detecting, reporting, monitoring and communicating on this issue for over a year.

If you feel this is a public good, please consider sending us one dollar, euro, pound a month to help cover basic costs of operations.

https://givebutter.com/iftas-power-of-one

We have over 200 active reports waiting on action. Of the 6,867 ...

2026-09-28T18:47:16Z

In reply to nevent1q…cjes
_________________________

We have over 200 active reports waiting on action.

Of the 6,867 reports filed by IFTAS since March 2026, 59% have been mitigated, while 36% of these accounts are hosted on abandoned or unmanaged services. Our AUD denylist can help limit the reach of this content.

https://about.iftas.org/library/iftas-abandoned-and-unmanaged-domain-list/

quoting
note1gzp…njnp

Table of Contents###

About this denylistThe Abandoned and Unmanaged list is an IFTAS-curated list of domains that are highly recommended for defederation or limited delivery. Each domain is labelled using a [shared vocabulary label](https://about.iftas.org/library/shared-vocabulary-labels/ ). Each domain is investigated by human review for governance, common content, network and service activities, hosting location and more.

Before including any domain on this list we perform the following efforts to ascertain the service status:
Spam accounts are reported to the domain and monitored for mitigation.
After seven days, if no mitigation is observed, the listed admin is contacted on network.
After seven more days, if no response and no mitigation, the listed admin is contacted via email if publicly available.
Where appropriate, DNS/domain registrant contact information is used if available.
After seven more days, if no response and no mitigation, the domain enters the AUD review process.

Domains that do not publish contact information may enter the AUD process sooner than the minimum 22 days. Domains that have active human presence may be recommended for a Limit/Silence, domains that are predominantly serving bot content may be recommended for a Suspend.

The AUD list is available as a default option in the following platforms:
https://blog.anew.social/launch-domain-blocklists/">BridgyFed
https://discover.holos.social/">Holos Discover
https://newsmastfoundation.org/">Newsmast
https://activitypub.space/topic/be4aa1b0-c10e-429d-a948-5c51133bf4a6/https-archipelago.1sland.social-fires/8">NodeBB
https://activitypub.blog/2025/12/17/7-8-0-happy-holidays/">WordPress

Inclusion on this list means we have observed this domain:
is a dedicated spam service, or
has been clearly abandoned but still allows creation of new accounts, or
chooses to not delete known spam accounts, even when reported; and
we are highly unlikely to ever retract an entry.

In all cases we strongly recommend you use a [Federation Policy](https://about.iftas.org/library/example-federation-policies/ ) to aid you in your decision making.###

Download / subscribe**[iftas-abandoned-unmanaged-latest.csv (Mastodon import format)](https://about.iftas.org/wp-content/uploads/2025/10/iftas-abandoned-unmanaged-latest.csv )**

The permanent file location is:https://about.iftas.org/wp-content/uploads/2025/10/iftas-abandoned-unmanaged-latest.csv

*(The file path includes ‘/2025/10’ which will not change; the current version will overwrite any previous version at this URL)*

See [Denylist Management Tools](https://about.iftas.org/library/denylist-management-tools/ ) for third-party tools to import or implement this denylist.###

View current denylist[IFTAS Abandoned / Unmanaged Denylist Output](https://about.iftas.org/iftas-abandoned-unmanaged-denylist-output/ ) – HTML table view of this denylist###

Appeals
Requests must be submitted from an email address publicly listed on the service in question. If your service does not list an administrator email address, we cannot process your request.
Email contact @ about.iftas.org in English.
Include the domain name and a brief summary of the actions taken to address the initial reasons for inclusion.
There is no fee for the review or removal of a domain from IFTAS lists.
###

Related Resources
https://about.iftas.org/library/known-spam-fediverse-services/">Known Spam Fediverse Services
https://about.iftas.org/library/iftas-dni-list/">IFTAS Do Not Interact Denylist
https://about.iftas.org/library/iftas-cariad-denylist/">IFTAS CARIAD Denylist
https://about.iftas.org/library/cariad-policy/">CARIAD Domain Observatory
https://about.iftas.org/library/denylist-resources/">Denylist Resources
https://about.iftas.org/library/denylist-management-tools/">Denylist Management Tools

IFTAS is observing an uptick in PortalKombat activity. As a ...

2026-09-28T18:41:10Z

IFTAS is observing an uptick in PortalKombat activity.

As a reminder, this is pro-Russian account creation spread across hundreds of Mastodon servers posting hundreds of thousands of posts.

Here's a reminder of what these profiles look like in case they show up on your service:

clarenceferrarizta👑 (npub1rw7…0f3l)">https://sigmoid.social/clarenceferrarizta👑 (npub1rw7…0f3l)

Ykora Idy (npub1d5g…yydz)">https://social.roadfm.fr/Ykora Idy (npub1d5g…yydz)

Pyjo🃏🚋 (npub14jr…mq60)">https://truthsocial.co.in/Pyjo🃏🚋 (npub14jr…mq60)

To learn more, see https://about.iftas.org/2025/10/05/coordinated-pro-russian-propaganda-network-targeting-activitypub-and-atproto-services/

#BotSpotting #FIMI #Spam

quoting
note1rs0…97et

Indicators of compromise (IOCs) that identify accounts as likely being part of the network include:
a single follow (the bsky.brid.gy @ bsky.brid.gy account), or first follow is the bridge
followers and following hidden from public
registration after September 8, 2025
linking to pro-Russia Telegram channels, or Russian news sources
posts that cut off mid-sentence
masquerading as legitimate news organisations
disposable email domains used for the account registration

The accounts are created and left alone for a short period, and will have no posts for up to week, sometimes more.

Once in use, the account will likely follow a dozen or so accounts on servers that are listed on the [AUD Denylist](https://about.iftas.org/library/iftas-abandoned-and-unmanaged-domain-list/ ).

*Update November 21: with over 750 accounts and growing, we will no longer be updating the daily accounts tracker and instead will be focussing on identifying the domains known to be wholly unmanaged or unmaintained, please see the [IFTAS Abandoned and Unmanaged Domain (AUD) Denylist](https://about.iftas.org/library/iftas-abandoned-and-unmanaged-domain-list/ ) page for more details.*

*Update October 25: Accounts are still being created (571 observed so far), and a number of servers are either unwilling or unresponsive in removing these accounts. A list of servers recommended for limiting or defederating is now available at https://about.iftas.org/library/known-spam-fediverse-services/#Unmanaged_Unmaintained_Abandoned_Servers*

*Update October 14: Accounts are still being created, and unused accounts registered earlier are being activated.*

Since 15 September, IFTAS has been tracking a coordinated network of over 300 accounts operating across Mastodon. These accounts are engaged in a high-volume propaganda campaign, promoting pro-Russian narratives and linking to Telegram channels associated with known state-aligned disinformation operations.

We became aware of a related investigation by the [Antibot4Navalny](https://bsky.app/profile/antibot4navalny.bsky.social ) research team that observed these accounts bridging to Bluesky, and we have since collaborated to enhance our investigations and share our findings. Their [public post](https://bsky.app/profile/antibot4navalny.bsky.social/post/3m22256476k25 ) provides further context.

Antibot4Navalny’s observations identified additional impacted services we were unaware of, and highlighted that accounts were still being created. Furthermore, thanks to their specific expertise in this area, this helped clarify and confirm that what we were seeing was indeed the work of a coordinated campaign with an increased likelihood of it being a state-sponsored or state-approved campaign.

We have been contacting affected Mastodon administrators, and are now moving to a public advisory to inform the broader network.

The network includes accounts impersonating reputable news outlets such as BBC News, Euronews, and Meduza, designed to give credibility to Telegram propaganda links. We believe it may be connected to the “[Pravda/Portal Kombat](https://www.sgdsn.gouv.fr/files/files/Publications/20240214_NP_SGDSN_VIGINUM_PORTAL-KOMBAT-NETWORK_PART2_ENG_VF.pdf )” pro-Russia propaganda network.

Accounts are hosted across numerous Mastodon instances and bridged into Bluesky, creating the appearance of independent sources. Activity on Bluesky helped reveal aggregate patterns, identical usernames, posting schedules, and content themes more clearly than across decentralised Mastodon services.

This campaign appears to mimic tactics observed in earlier influence operations, blending low-cost automation with impersonation and volume-based amplification.

We are sharing data with participants of the [Social Web ISAC](https://connect.iftas.org/library/iftas-documentation/social-web-information-sharing-and-analysis-centre/ ), and we issued a [public advisory](https://mastodon.iftas.org/@iftas/115322867312262878 ) along with a [list of observed usernames](https://about.iftas.org/library/known-spam-fediverse-services/#Coordinated_Network_Spam_Accounts ).

We are aware of accounts hosted on abandoned or unmanaged services, we may issue a Limit recommendation for those domains at a later date.

If you provide or can link to tools that may benefit administrators in identifying and/or managing these accounts, please let us know.

**Further Reading:**
https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_PORTAL-KOMBAT-NETWORK_ENG_VF.pdf">PORTAL KOMBAT A structured and coordinated pro-Russian propaganda network
https://www.sgdsn.gouv.fr/files/files/Publications/20240214_NP_SGDSN_VIGINUM_PORTAL-KOMBAT-NETWORK_PART2_ENG_VF.pdf">PORTAL KOMBAT A structured and coordinated pro-Russian propaganda network (Part 2)
https://checkfirst.network/pravda-network-worldwide-expansion-and-llm-wikipedia-pollution/">“Pravda” Network: Worldwide Expansion and LLM, Wikipedia Pollution
https://www.americansunlight.org/updates/new-report-russian-propaganda-may-be-flooding-ai-models">Russian propaganda may be flooding AI models

Nostr event nevent1qqsxah4uwvdk9zg3v76ettjlr2dsvr7lvk4apnvasx5lrd7fs0qd4sczyq3gdtdew4gt39ea5vkmdy2kzfhrkdax85txcxcy9gra3yu6yhqzqec03e9

2026-09-25T20:40:56Z

https://www.abs-cbn.com/news/technology/2026/9/22/privacy-watchdog-issues-show-cause-to-meta-reddit-roblox-discord-1644?ref=everythinginmoderation.co

Helpful posts from others who have experienced the same collected ...

2026-09-24T12:09:00Z

In reply to nevent1q…a0gr
_________________________

Helpful posts from others who have experienced the same collected here: https://about.iftas.org/2026/09/11/boom-protocol-spam/ #bpSpam

quoting
note1awc…jzcg

This post will collate posts that share advice and guidance on the spam registration activity connected to “BoomProtocolProbe” and the bulk creation of accounts.

Notes: Over the course of days, the attack has changed approach several times. Each mitigation is quickly overcome. Please do not overly-share specific details as the actor in question may be monitoring the network for mitigations and adapting accordingly. Use your private groups, backchannels, email etc to communicate with your trusted peers. If you wish to share with the community, please use #bpSpam to help others find your content.

https://hear-me.social/@admin/117250060656308016

https://bardicperspiration.club/@Overgoddess/117248747537023800

https://mastodon.pnpde.social/@spielleitung/117242341921660658 offers a database trigger for Mastodon and PeerTube: https://pad.pnpde.social/p/FUloCtoOiNZPX6d18-_r

[Fediponics](https://fediponics.com/ ) beta testers can use Custom Keyword Groups to auto-suspend these accounts

If you see a resource or advice worth sharing on this page, please message IFTAS (npub1y2r…kvzk)

Siehe https://about.iftas.org/2026/09/11/boom-protocol-spam/ für ...

2026-09-24T12:04:45Z

In reply to nevent1q…68fh
_________________________

Siehe https://about.iftas.org/2026/09/11/boom-protocol-spam/ für Maßnahmen zur Risikominderung

quoting
note1awc…jzcg

This post will collate posts that share advice and guidance on the spam registration activity connected to “BoomProtocolProbe” and the bulk creation of accounts.

Notes: Over the course of days, the attack has changed approach several times. Each mitigation is quickly overcome. Please do not overly-share specific details as the actor in question may be monitoring the network for mitigations and adapting accordingly. Use your private groups, backchannels, email etc to communicate with your trusted peers. If you wish to share with the community, please use #bpSpam to help others find your content.

https://hear-me.social/@admin/117250060656308016

https://bardicperspiration.club/@Overgoddess/117248747537023800

https://mastodon.pnpde.social/@spielleitung/117242341921660658 offers a database trigger for Mastodon and PeerTube: https://pad.pnpde.social/p/FUloCtoOiNZPX6d18-_r

[Fediponics](https://fediponics.com/ ) beta testers can use Custom Keyword Groups to auto-suspend these accounts

If you see a resource or advice worth sharing on this page, please message IFTAS (npub1y2r…kvzk)

Nostr event nevent1qqsqmjulvy3uck5nrwny5adyz555rpys5ny69azxrw24hzxd2avdatgzyq3gdtdew4gt39ea5vkmdy2kzfhrkdax85txcxcy9gra3yu6yhqzq9ykwt4

2026-09-24T12:03:00Z

https://www.france24.com/en/live-news/20260914-russian-disinformation-campaign-sets-sights-on-us-midterms

CC #bpSpam

2026-09-24T04:29:11Z

In reply to nevent1q…w4nl
_________________________

CC #bpSpam

(You also need to account for the surprisingly not insignificant ...

2026-09-23T12:07:42Z

In reply to nevent1q…9vh8
_________________________

(You also need to account for the surprisingly not insignificant percent of people who type their email address incorrectly and -that- email can get delivered to a real person... [and of course you then get a second signup within minutes from the same IP for a very similar account name])

Signing up other people for accounts to mess with their inbox is ...

2026-09-23T12:07:33Z

In reply to nevent1q…688j
_________________________

Signing up other people for accounts to mess with their inbox is a well-known abuse vector. The issue here is volume, not intent. Other than doing IP reputation, email domain reputation, and rate monitoring, you can't stop all malicious signups, but you -can- spot repetitive behaviour.

Nostr event nevent1qqsxgngenpaywmvl5yh348v48ukg7wvsxzjc9jy5t4rcsa7ece9ypggzyq3gdtdew4gt39ea5vkmdy2kzfhrkdax85txcxcy9gra3yu6yhqzqs755nf

2026-09-22T13:11:28Z

https://www.malaymail.com/news/world/2026/09/17/more-countries-move-to-ban-social-media-for-children-with-restrictions-spreading-worldwide/235408

#bpSpam source analysis and proposed solutions ...

2026-09-19T11:18:09Z

#bpSpam source analysis and proposed solutions

https://ingo.lantschner.name/post/2026-09-18_mailrelay-mastodon/

Nostr event nevent1qqspetm3gqg3mzme5nyq4qhd39tph9kegkh2zegsutqz5h252hgczyszyq3gdtdew4gt39ea5vkmdy2kzfhrkdax85txcxcy9gra3yu6yhqzqs6gzfz

2026-09-18T20:38:31Z

https://www.atlanticcouncil.org/blog-post/digital-sovereignty-and-europes-democracy-stack/

😟

2026-09-18T19:31:28Z

In reply to nevent1q…rcaa
_________________________

😟

much appreciated, I'll dig in, thanks for sharing

2026-09-18T12:28:41Z

In reply to nevent1q…xg73
_________________________

much appreciated, I'll dig in, thanks for sharing

I guess my sentence should have been "those that want the ...

2026-09-18T12:20:14Z

In reply to nevent1q…7sml
_________________________

I guess my sentence should have been "those that want the benefits (to them) of this"...

I'm still having a hard time understanding the pushback on a ZKP flag going to any given service provider, using a flag given to me by the very entity that governs me/issues my ID.

Government doesn't know I visited a given service/site.

Service doesn't know anything about me other than is_over_18=true

Assuming age-gating is unavoidable at some future point, what better solution?

⚠️ #SW_ISAC_ADVISORY Agentic accounts are being created using ...

2026-09-18T03:14:28Z

⚠️ #SW_ISAC_ADVISORY

Agentic accounts are being created using an email service created for bots.

agent.qq.com

"Agent Mail is a dedicated email service created by the QQ Mail team for agents. It's isolated from personal email, natively compatible with agents, and helps you send and receive emails securely and efficiently using agents."

If your service prohibits unattended bots or #SyntheticMedia recommendation is to block account creation for accounts using this domain.

#Spam

cc #bpSpam

2026-09-17T22:18:32Z

In reply to nevent1q…gghv
_________________________

cc #bpSpam

@npub1cu7…4j9j Working as intended, because you have not ...

2026-09-17T19:54:53Z

In reply to nevent1q…naly
_________________________

Hannah Grace (npub1cu7…4j9j) Working as intended, because you have not satisfied a member state's requirements to be classified as a validated identity provider.

Any analogy will fail on the fine detail, for sure. But if it's not super clear that for hopefully obvious reasons we can't all be running around claiming to be a valid attestor, then some analogies may be helpful.

if you open source forked a car, it would still need safety ...

2026-09-17T17:13:11Z

In reply to nevent1q…zfa4
_________________________

if you open source forked a car, it would still need safety checks before being allowed on the road.

You retain all your freedoms. You never had the freedom to place an unsafe car on the road. You never had and will not have the freedom to require ad hoc acceptance of unvalidated identification, physical or virtual.

it also states "8. Member States shall provide validation ...

2026-09-17T17:11:57Z

In reply to nevent1q…z988
_________________________

it also states "8. Member States shall provide validation mechanisms free-of-charge, in order to:

(a) ensure that the authenticity and validity of European Digital Identity Wallets can be verified;

(b) allow users to verify the authenticity and validity of the identity of relying parties registered in accordance with Article 5b."

You retain all open source rights to modify the software. You also have the right to submit your modifications for use.

I hear you loud and clear. One more time, Article 5a, European ...

2026-09-17T17:11:17Z

In reply to nevent1q…etxj
_________________________

I hear you loud and clear. One more time, Article 5a, European Digital Identity Wallets states "3. The source code of the application software components of European Digital Identity Wallets shall be open-source licensed. Member States may provide that, for duly justified reasons, the source code of specific components other than those installed on user devices shall not be disclosed."

https://www.european-digital-identity-regulation.com/Article_5a_(Regulation_EU_2024_1183).html

"but all of this is going to be moot when parents just hand ...

2026-09-17T17:02:54Z

In reply to nevent1q…f6uh
_________________________

"but all of this is going to be moot when parents just hand their devices to kids"

That in my view is the system working as intended. This legislation is not out of thin air, it's from parents who want better options. Those that want them can use this. Those that don't can hand their devices to their kids.

Nothing here as far as I can tell makes it illegal to let your kid do something.

Best of both worlds.

Nostr event nevent1qqstl8j88xf8adxjxq3m477xgy0w4er59e2yd250jjfdhp94gkul5hqzyq3gdtdew4gt39ea5vkmdy2kzfhrkdax85txcxcy9gra3yu6yhqzq97telq

2026-09-17T16:55:04Z

https://www.techpolicy.press/millions-of-volunteers-are-keeping-the-internet-human-for-now/

Has the EC incorporated this (arbitrarily one of many) definition ...

2026-09-17T16:33:14Z

In reply to nevent1q…87g3
_________________________

Has the EC incorporated this (arbitrarily one of many) definition into legislation or regulation?

If so, happy to continue the ocnversation.

Stay tuned, stay engaged, no need to panic. There's plenty of ...

2026-09-17T15:59:57Z

In reply to nevent1q…ntv2
_________________________

Stay tuned, stay engaged, no need to panic. There's plenty of time to shape this legislation.

The EU has officially released its draft proposal for the ...

2026-09-17T15:59:40Z

The EU has officially released its draft proposal for the "KIDS Act," which includes proposed age-verification requirements for online services including decentral networks on the Social Web.

This is an early draft. Even if passed, it is at least two years away from taking effect.

IFTAS, civil rights groups, and digital rights advocates have been and will continue to actively work on lobbying efforts to educate lawmakers and protect our open infrastructure.

https://digital-strategy.ec.europa.eu/en/policies/kids-act

cc #bpSpam

2026-09-17T15:50:25Z

In reply to nevent1q…qejx
_________________________

cc #bpSpam

grazie per la condivisione!

2026-09-17T15:49:37Z

In reply to nevent1q…70en
_________________________

grazie per la condivisione!

They have the right to modification. They do not have the right ...

2026-09-17T15:42:39Z

In reply to nevent1q…pul9
_________________________

They have the right to modification.

They do not have the right to use those modifications as a state-recognised proof of age without gaining certified compliance.

These are two different things.

You are basically asking for the right to modify your driver's license and have the right to require nation states allow you to use it to drive a car.

You can modify your driver's license all you want.

It then becomes unusable in certain situations.

you will not be able to modify someone else's app and use it ...

2026-09-17T14:57:04Z

In reply to nevent1q…kgtd
_________________________

you will not be able to modify someone else's app and use it without your modifications also being certified.

That would for obvious reasons render the app useless.

The spec is open, the pathway to implementation is open.

If you download app X to use as a consumer, you cannot modify it. Well, you can, but it won't work. That's the point. It immediately becomes non-compliant. Go build a compliant one and use that.

https://jaz.co.uk/projects/startheresocial/shs-americas/

2026-09-17T14:16:04Z

In reply to nevent1q…85jl
_________________________

https://jaz.co.uk/projects/startheresocial/shs-americas/

perfect, added to the collection, thanks!

2026-09-17T13:34:26Z

In reply to nevent1q…fv0v
_________________________

perfect, added to the collection, thanks!

I've seen a few reports about "Chrome 126"

2026-09-17T13:28:13Z

In reply to nevent1q…r7uq
_________________________

I've seen a few reports about "Chrome 126"