**Tinker** @tinker@infosec.exchange · May 23, 2018, 12:42

**Tinker** @tinker@infosec.exchange · May 23, 2018, 12:42

Tinker @tinker@infosec.exchange

You know Mastodon is getting popular when people spend the time to register multitudes of spam bots. Here’s hoping @Gargron and others build in tools to help admins control these at scale.

**orangesec333** @orangesec_0 · 2018-05-23T13:01:55Z

orangesec333 @orangesec_0

@tinker @Gargron at a level not having a valid email address is good for activists, but it gets abused by spam bots...

May 23, 2018, 13:01 · Web · 1 · 1

**Eugen** @Gargron@mastodon.social · May 23, 2018, 13:05

**Eugen** @Gargron@mastodon.social · May 23, 2018, 13:05

@orangesec_0 @tinker E-mails *are* confirmed. The bots just confirm them because either they're specially automated towards Mastodon or somebody's manually creating all that stuff

**orangesec333** @orangesec_0 · May 23, 2018, 13:06

**orangesec333** @orangesec_0 · May 23, 2018, 13:06

@Gargron @tinker On MOST instances they are confirmed. That is what I'm talking about.

**Eugen** @Gargron@mastodon.social · May 23, 2018, 13:07

**Eugen** @Gargron@mastodon.social · May 23, 2018, 13:07

@orangesec_0 @tinker No, it's built into mastodon. Can't login until e-mail is confirmed.

**orangesec333** @orangesec_0 · May 23, 2018, 13:10

**orangesec333** @orangesec_0 · May 23, 2018, 13:10

@Gargron @tinker Guess that was an update then, or the blocklist was lying. I read a blocklist that said to block a now down instance for spam.