CXPLAY World

#吐槽 In reply to nevent1q…4yc4 _________________________ quoting nevent1q…0ylu Today we were made aware of multiple Fediverse blog posts incorrectly attributing “vote Trump” spam on Bluesky to the Mostr.pub Bridge. This spam is NOT coming from Mostr. From…

When Mostr.pub launched, multiple major servers immediately blocked Mostr, including Mastodon.social. The moderators of Mastodon.social claimed that this was because Nostr was unregulated, and suggested to one user that if they want to bridge their account they should host their own bridge.

That is exactly what momostr.pink, the source of this spam, has done.

The obvious response to the censorship of the Mostr Bridge is to build more bridges.

While we have opted for pro-social policies that aim to reduce spam and build better connections between decentralized platforms, other bridges built to get around censorship of the Mostr Bridge may not — as we’re already seeing.

There will inevitably be multiple bridges, and we’re working on creating solutions to the problems that arise from that. In the meantime, if the Fediverse could do itself a favor and chill with the censorship for two seconds, we might not have so many problems.

via Nostr@cxplay

CXPLAY (npub1gd8…h58h)

CXPLAY on Nostr (reply) :

nostr:nevent1qvzqqqqqqypzq6lr37xx8hmah7zdklky5mn0h0vdr8w28wvqa7k3skzugmcykfheqywhwumn8ghj7mn0wd68ytfsxyh8jcttd95x7mnwv5hxxmmd9uq3xamnwvaz7tm0venxx6rpd9hzuur4vghsqgqjvnxyq5wmtxhe5g0hl5qplh6jzdpy74vw4x43dgdszn72yfg275af0ylu

#吐槽

In reply to nevent1q…4yc4
_________________________

quoting nevent1q…0ylu
Today we were made aware of multiple Fediverse blog posts incorrectly attributing “vote Trump” spam on Bluesky to the Mostr.pub Bridge.

This spam is NOT coming from Mostr. From the screenshots used in these blogs, it's clear the spam is coming from an entirely different bridge called momostr.pink. This bridge is not affiliated with Mostr, and is not even a fork of Mostr. We appreciate that the authors of these posts responded quickly to us and have since corrected the blogs.

Mostr.pub uses stirfry policies for anti-spam filtering. This includes an anti-duplication policy that prevents spam like the recent “vote Trump” posts we’ve seen repeated over and over.

It is important to note WHY there are multiple bridges, though.

#吐槽

In reply to nevent1q…alc5
_________________________

quoting nevent1q…ezwl
Correction: the original version stated that the Mostr.pub bridge was used for a spam wave on Bluesky. This is incorrect, a different bridge between Nostr and the fediverse, momostr.pink, was used. Mostr.pub creator Alex Gleason explains that the Mostr.pub bridge has anti-spam filtering that would have prevented such as spam attack.

https://mastodon.social/@fediversereport/112468656710956489

via Nostr@cxplay

CXPLAY (npub1gd8…h58h)

CXPLAY on Nostr (reply) :

nostr:nevent1qvzqqqqqqypzq6lr37xx8hmah7zdklky5mn0h0vdr8w28wvqa7k3skzugmcykfheqywhwumn8ghj7mn0wd68ytfsxyh8jcttd95x7mnwv5hxxmmd9uq3xamnwvaz7tm0venxx6rpd9hzuur4vghsqgqjvnxyq5wmtxhe5g0hl5qplh6jzdpy74vw4x43dgdszn72yfg275af0ylu

#吐槽

这位朋友最近利用 Nostr 的特点进行了一次模拟攻击, 目的是自动生成密钥对并关注主账号, 达成一百万追随者. 实际上是对公共中继服务器的一次压力测试, 可以看出一些目前 Nostr 网络状态的实际状态.
PS: 这种攻击可能只有实行黑白名单和付费准入的中继才能完全避免. 公共中继除了速率限制基本上没有好的应对措施, 之后要定期清理数据库, 可以一定程度上消除长期影响, 一百万虚假追随者也会随着时间大量消失.

quoting nevent1q…wtyt
Here's how I hit 1 million followers.
https://ron.stoner.com/I_Gained_1_Million_Followers_in_24_Hours/

Key takeaways:

- over half the Nostr listed relays are using some sort of spam mitigation technique(s)
- the attack was still achieveable
- socal media is easily manipulated
- follower counts and engagement are worthless
- content is the real treasure

via Nostr@cxplay

Ron Stoner (npub1qjt…z44v)

Short Text Note by Ron Stoner

seen on wss://nos.lol, wss://nostr.bitcoiner.social, wss://relay.mostr.pub, wss://relay.noswhere.com

#吐槽

#原神 什么? 双子又同框了? 是动画短片? 是飞碟社的饼? 还是DM短片? 等不及了, 快端上来罢!
(十个小时后) 急死我了, 还不发还不发还不发? 吊我胃口是吧. 怎么还不发? 急急急.
https://fxtwitter.com/GenshinImpact/status/1792767528076218658

via Nostr@cxplay

#吐槽

In reply to nevent1q…a5zx
_________________________

是的, 唯一能真正治理滥用的只有中继也就是服务端, 不过目前除了付费墙好像没有什么特别好的办法.

via Nostr@cxplay

DASHU (npub19ye…zqwk)

Short Text Note by DASHU (reply)

感觉 Nostr 这边比较容易被滥用

#吐槽

In reply to nevent1q…4ezk
_________________________

这可能只是一次针对 Bluesky 的实验而已, Nostr 的这些桥有必要加强一下反滥用了.

via Nostr@cxplay

CXPLAY (npub1gd8…h58h)

CXPLAY on Nostr :

Mostr.pub 和 Momostr.pink Bridge 继续被滥用: Fediverse 和 Bluesky 之间的桥被用来向 Bluesky 发送支持特朗普的垃圾邮件, 这些垃圾邮件来自 Nostr. 垃圾邮件是在 Nostr 上创建的, 而 Nostr 通过 Mostr

#吐槽

Mostr.pub 和 Momostr.pink Bridge 继续被滥用:

Fediverse 和 Bluesky 之间的桥被用来向 Bluesky 发送支持特朗普的垃圾邮件, 这些垃圾邮件来自 Nostr. 垃圾邮件是在 Nostr 上创建的, 而 Nostr 通过 Mostr 桥接器与 fediverse 桥接, 后者又可以与 Bluesky 桥接. 虽然所有网络都有许多方便, 开放注册的地方, 但垃圾邮件往往发生在容易大量注册的地方, 而 Nostr 的协议设计使得创建新账户特别容易.
—— https://fediversereport.com/last-week-in-fediverse-ep-69/ (The Fediverse Report)

支持特朗普的垃圾帖子是如何从 Nostr 转移到 Bluesky 的? 首先, Nostr 内容通过 Mostr Bridge 传播到 Mastodon (基于 ActivityPub 协议). 然后, 使用名为 Bridgy Fed 的工具将内容从 Mastodon 推送到 Bluesky. 这一过程的痕迹出现在 Bluesky 版本的帖子中, 其中的账户柄格式为 npub************.momostr.pink.ap.brid.gy. 其中的第一部分(从 npub 到第一个点)是 Nostr 账户的公钥, 而其余部分(momostr.pink.ap.brid.gy)则包含了用于桥接帖子的工具(Mostr 和 Bridgy Fed)的一些说明.
—— https://conspirator0.substack.com/p/federation-and-political-spam (Conspirador Norteño)

#Nostr #Fediverse #Bluesky

via Nostr@cxplay

fediversereport.com

Last Week in Fediverse – ep 69

Happy 16th birthday of the fediverse! 16 years ago, on May 18th 2008, the first post was published on identi.ca. The News The European Commission has announced their new Mastodon account, and that they will stay on the fediverse. Over the last 2 years, the…

#吐槽

In reply to nevent1q…eeu4
_________________________

静态站点生成器主要还得看主题的适配, Hexo 这边也是这样.

via Nostr@cxplay

DASHU (npub19ye…zqwk)

Short Text Note by DASHU (reply)

好像有现成的

#吐槽

In reply to nevent1q…89j9
_________________________

梳理一下我的认知时间线, 也补一下这条线程遗漏的:
- 2022 年 08 月 05 日: Pornhub
- 2022 年 11 月 15 日: pixiv, BOOTH, pixivFANBOX
- 2023 年 11 月 08 日: Niconico
- 2024 年 03 月 15 日: Gumroad
- 2024 年 04 月 03 日: DLsite
- 2024 年 05 月 09 日: Niconico
- 2024 年 05 月 21 日: Fantia

via Nostr@cxplay

CXPLAY (npub1gd…ch58h)

CXPLAY on Nostr (reply):

Fantia 今天发公告称 Visa 和 Mastercard 已经暂停使用, 下个月开始已有的付款方式也将失效. - https://spotlight.fantia.jp/news/240521_payment_method - https://fxtwitter.com/fantia_jp/status/1792811477256343764

#吐槽

In reply to nevent1q…r5z5
_________________________

Fantia 今天发公告称 Visa 和 Mastercard 已经暂停使用, 下个月开始已有的付款方式也将失效.
- https://spotlight.fantia.jp/news/240521_payment_method
- https://fxtwitter.com/fantia_jp/status/1792811477256343764

via Nostr@cxplay

CXPLAY (npub1gd…ch58h)

CXPLAY on Nostr (reply):

Niconico 继去年年底受到 Mastercard 卡组织的影响后: https://blog.nicovideo.jp/niconews/207309.html 这个月 9 号宣布受到了 Visa 卡组织的影响: https://blog.nicovideo.jp/niconews/222629.html

#吐槽

In reply to nevent1q…zvm5
_________________________

program技术力不足 :eveonecat_coffeebath: 正在努力学习.

via Nostr@cxplay

DASHU (npub19ye…zqwk)

DASHU on Nostr :

CXPLAY 怎么不给博客添加一个基于 Nostr 的评论系统。

#吐槽

In reply to nevent1q…qajr
_________________________

去中心化难道不是提倡自托管吗, 自己支付自己的费用, 可用性也只对自己负责.
发现其他图片服务商里的文件也只是快捷保存已经有的文件的一个小功能而已, 主要还是应该和 NIP-94 结合使用, 如果自己托管自己的文件那实际上 NIP-94 都不需要, Blossom 只是更加规范了文件保存这部分.

via Nostr@cxplay

DASHU (npub19ye…zqwk)

Short Text Note by DASHU (reply)

seen on wss://purplerelay.com, wss://relay.noswhere.com

#吐槽

In reply to nevent1q…y2pc
_________________________

Blossom 没有设计这个规范, 在外部服务器发现和保存文件是一些服务端实现里单独加的功能:

quoting nevent1q…9ch2
Discovering and downloading (or streaming) blobs from other servers isn't part of the blossom spec but its something I added to my blossom-server implementation
By default the example config has it setup to check cdn.satellite.earth and nostr 1063 events to find blobs, but if you want you can turn it off in the config https://github.com/hzrd149/blossom-server/blob/master/config.example.yml#L15-L30

I don't know if there are any security implications of downloading a blob. but its possible an attacker could flood a server by asking it to download everything from another server

via Nostr@cxplay

DASHU (npub19ye…zqwk)

Short Text Note by DASHU

seen on wss://purplerelay.com, wss://relay.noswhere.com

#吐槽

几年前, 某些手机厂商为了宣传自己家的语音助手, 煞有介事地给自己家的手机上专门放了一个语音助手的实体按键, 虽然是默认的唤起语音助手, 但实际是一个通用的功能键, 按键的外观设计并没有给语音助手绑定起来, 而功能上后期还能通过系统设置更换成其他更有实用价值的快捷功能.
几年之后, 某手机厂靠强大的整合能力居然也开始造笔记本了, 于是把自家语音助手又装到了笔记本上, 又给笔记本键盘上塞进去一个语音助手的按键, 这次不一样了, 笔记本键盘布局本来就容不得多少 "创意", 而这个按键上面居然雕上了语音助手的 Logo, 还放在了本来是 Del 键的位置. 好吧, 我承认确实有部分人用 Del 键的次数不比数字小键盘多, 但是一旦这波来自软件驱动的热度一过, 硬件的独特设计反而变成了一个附庸, 因为也必须要承认, 有人用语音助手的频率还不及打开某些系统预装的第三方软件的次数多, 而这个硬件上的 "预装" 可不是随便就能 "卸载" 的.

到了现在, Microsoft 一拍脑门想起学习借鉴 OEM 厂的经验, 想给各位的 AI PC 都想要装上一个 Copilot 按键. 什么叫 AI PC 啊? 当然不是你的 PC 本地能跑大模型才是, 而是你的 PC 能用 Copilot 就是啦! 简直是天才, 难不成还有 PC 装不上浏览器甚至 WebView Runtime 的? 当然, Microsoft 也想到了这种可能, 于是给 Windows 11 直接内置了 Copilot, 就像内置 Edge 一样信手拈来.
等到某家手机厂要发新产品了, 不知道会选择映射自己家的语音助手还是 Microsoft 的 Copilot 到那个按键上呢? (可千万别都加上了)

via Nostr@cxplay

CXPLAY (npub1gd8…h58h)

CXPLAY on Nostr :

几年前, 某些手机厂商为了宣传自己家的语音助手, 煞有介事地给自己家的手机上专门放了一个语音助手的实体按键, 虽然是默认的唤起语音助手, 但实际是一个通用的功能键, 按键的

#吐槽

In reply to nevent1q…kdln
_________________________

GPT-4o 已经被污染了, 垃圾内容更是 LLM 致幻剂. 但相比起垃圾内容, 应该也没有人想去用 4chan 或者孙吧的语料吧.

LLM: 这是红药丸还是蓝药丸?
人类: 这是彩虹糖.

quoting nevent1q…lx8l
GPT-4o 中文token库被垃圾内容污染

OpenAI于5月13日发布GPT-4o后，一些中文用户发现其token库中充满了垃圾词汇。普林斯顿大学博士生蔡天乐（音）分析了最长的100个中文token，发现大部分与赌博或色情有关，只有少数是常用词。
> https://gist.github.com/ctlllll/4451e94f3b2ca415515f3ee369c8c374
大型语言模型通过分词解析文本。GPT-4o的新分词工具在处理多语言任务上优于前代产品，但其中文token库因数据清理不足而被污染。这导致GPT-4o的大语言模型无法正确解析这些词汇，并可能被用来绕过OpenAI的安全措施。前代的GPT-3.5和GPT-4则没有这种问题。
这些无效数据主要来源于垃圾和色情网站，这些网站通过劫持无关内容来提升搜索引擎排名，从而污染了GPT-4o的训练数据。
目前尚不清楚其他语言是否受影响，但有用户报告韩语token库也有类似问题。
> https://fixupx.com/dhsusj144284/status/1790302306669670680

- 竹新社: https://t.me/tnews365/30454
- MIT Technology Review: https://www.technologyreview.com/2024/05/17/1092649/gpt-4o-chinese-token-polluted/

via Nostr@cxplay

CXPLAY (npub1gd8…h58h)

CXPLAY on Nostr (reply) :

控制信息危害其实就是对抗信息系统滥用, 在社交媒体中就是对抗垃圾内容和有毒言论, 既是所谓的 "反极端审查". 现代的自动化内容审查需要更多结合所谓 "语义分析"(从关键词到信

#吐槽

🤩

quoting nevent1q…hhvl

via Nostr@cxplay

#吐槽

In reply to nevent1q…9kqv
_________________________

This feature definitely makes sense, but requires more security. For example, a signed event would be required to allow files to be discovered and saved through other servers.

via Nostr@cxplay

hzrd149 (npub1ye5…knpr)

Short Text Note by hzrd149 (reply)

seen on wss://relay.noswhere.com