Public
- Public
- Groups
- Popular
- People

Conversation

Notices

Lukas Martini (lutoma@ohai.su)'s status on Tuesday, 11-Apr-2017 10:23:24 UTC Lukas Martini

I just went around and did some basic nmap-ing on the most popular Mastodon instances, and there's some seriously sketchy stuff in there. Publicly reachable Postgres servers, tons of open internal HTTP ports, SSH with password login, multiple Mastodon instances that seem to be running on mail server VMs, …
I guess if you're just running a single-user instance for yourself, sure, but those are all 2000+ user instances.

In conversation Tuesday, 11-Apr-2017 10:23:24 UTC from ohai.su permalink
- Kermit Unchained, Bob Mottram and (-(-_(-_-)_-)-) repeated this.

Feeds