Post by @econads@mendeddrum.org

Kevin Beaumont
@GossiTheDog @cyberplace.social

Running a Mastodon server is becoming increasingly problematic due to GenAI.

There’s multiple different things happening, including but not limited to:

- very aggressive scraping of user content and block evasion, with the resource costs that come with it

- AI agents aggressively trying to register accounts and evade restrictions

- rising cost of RAM - Mastodon is memory hungry, RAM is really expensive now

It’s odd to experience first hand, it’s like being consumed by.. a void.

Vysogota
@petko @petko.me

@GossiTheDog what blocking is in place that is being successfully evaided?

edit: i already know anubis is useless

Replying to @petko@petko.me
Luna Lactea
@jackemled @furry.engineer

@petko @GossiTheDog Literally everything, because these companies have the money to spend on cat & mouse games & we have none. All moderators can do is pile hacks on top of their networking setups to block protocol abuse & manually sort through registration applications to kick out bots.

Vysogota
@petko @petko.me

@jackemled, thank you but I was looking for concrete examples... That are not anubis since I already know it doesn't work.

Replying to @petko@petko.me
Ganondalf
@Walruths @mastodon.social

@petko @jackemled

"Anubis doesn't work" seems a bit of a quick and concrete judgement. I find it or something like it is a good first step and cuts out the low-effort bots at least unless it really is that bypassable by literally everything.

If this is our future, every account should be an instance. Bloat? Sure, but bot farms wouldn't be able to pull it off at scale for every single bot. For us individually? Ez pz.

Luna Lactea
@jackemled @furry.engineer

@Walruths @petko Anubis & other proof of work systems do work & that is the problem. They harm real users far more than they harm attackers, because the large companies executing these DDoS attacks can afford the power bill, but my phone battery can't last when every other webpage needs me to spend a few percent of the charge to be able to access it.

Making every account its own server is not a solution. The technical barrier to entry to real users is far too high, it's far too expensive, & it defeats the moderation ability that exists now. A large company such as Google or OpenAI can also afford to do this for the purpose of doing more attacks without issue.

econads
@econads @mendeddrum.org

@jackemled
Invitation only? :(

@Walruths @petko

Luna Lactea
@jackemled @furry.engineer

@econads @Walruths @petko That would work as long as none of the attacker's accounts were successfully created before. If even one got in, it would begin generating a million invitations. I'm sure invitation creation can be disabled too though.