<\\ Hamed //> here?

Updates about the spam situation? I still cannot write in -dev and -community and i think most bridges are either gone or partially working.

we can make voice only an requirement for e.g. tor

a

should just move it all to matrix

is matrix spam proof

selsta: That's a good compromise imo

kinda

how? lol

It's the future bro

Jokes aside. Afaik it's not really used for spam

but in case thhey can be shut down quickly. One good side is that the messages can be removed, so that's a deterrent

but yeah, still waiting for the spam proof protocol to be announced :P

Btw, would be good to do the "tor users only with voice" thing asap. I'm feeling cut out, i miss you guys :(

fluffypony: ^

Not sure why you are able to talk here but not in -dev or -community

Same permissions as far as I can see

selsta: can you ELI5: if you guys are making a ban list, why cant the software make the ban list?

because these nodes are following what we are doing

and if we add software detection they will change behaviour

which is good because it shows us more holes?

yep

they did reveal a lot of bugs already that we fixed now

free audit w0w

we just need to change the behavior until its no longer relevant?

> I don't know about how spam prevention works on IRC, but there are a number of ways spam can be prevented on Matrix. For example, Synapse supports adding a custom spam prevention plugin to your server, which lets that plugin decide whether or not an action (such as sending a message) is spam, and allow or block it based on that

Then there's shared ban lists and ignore lists that can be used by multiple people to automatically share blocks with a group of different people for example

and moderation bots such as Mjölnir that can automate room moderation to certain extents

<selsta "how? lol"> > I don't know about how spam prevention works on IRC, but there are a number of ways spam can be prevented on Matrix. For example, Synapse supports adding a custom spam prevention plugin to your server, which lets that plugin decide whether or not an action (such as sending a message) is spam, and allow or block it based on that

> regular old bans allow you to ban individual users from a room, but there is also a server ACL setting that lets you ban entire servers from interacting with a room if you want

that probably looks terrible on irc 🤷‍♂️

> Some links to check out: github.com/matrix-org/mjolnir matrix.org/blog/2020/10/19/combatin…g-abuse-in-matrix-without-backdoors

> github.com/matrix-org/synapse/blob/master/docs/spam_checker.md

dEBRUYNE: Then could be a problem of the matrix bridge.

> One thing to keep in mind is that Matrix has no expectation of trust between the different servers, so anything you can do as a server admin (abuse management bots, room shutdowns for example) can only affect what is done on your own server, and anything you can do as a room admin (room bans, server ACLs) can only affect that specific room, but you still have no way to control what the greater Matrix network (other

servers, other rooms) does

That's one major difference to IRC networks, where the network assumes some level of trust between the different server operators that are part of the same network

kinghat[m]: right, but I meant all of this is not going to stop someone from trolling with spam messages

though hiding messages sounds useful in these situations

Are you guys using github Actions?

quote: "The big problem with this feature is that it is highly vulnerable to injection attacks. As the runner process parses every line printed to STDOUT looking for workflow commands, every Github action that prints untrusted content as part of its execution is vulnerable. In most cases, the ability to set arbitrary environment variables results in remote code execution as soon as another workflow is executed."

n8

d4ndo[m]: yes but none of them take any user input from places like github issues

asymptotically: good to know.