From Neowin
by Paul Hill
July 1, 2023
When Elon Musk took over Twitter and started getting on people’s nerves, some users left to join Mastodon. Unlike Twitter, Mastodon is a federated network where individual servers run by different people interact using the Mastodon software. Now, one server admin has been raided and plenty of unencrypted user data is now in the hands of the FBI.
Unlike Twitter and Facebook which have their own legal teams, follow laws such as GDPR, and can overall be considered professional, just about anyone with technical know-how can set up a Mastodon instance.
This is exactly what the admins over at Kolektiva.social have done and now one of them has been raided and charged by the FBI for activities unrelated to Mastodon. To top things off, the admin in question just happened to be troubleshooting an issue and working with a backup copy of the server’s database which was in an unencrypted state when the raid took place and it was seized.
According to the admin who reported the incident, the raid took place in mid-May and the backup was dated from the first week of May. User data that the FBI will now have access to includes:
- User account information like the e-mail address associated with your account, your followers and follows, etc.
- All your posts: public, unlisted, followers-only, *and direct ("DMs")*.
- Possibly IP addresses associated with your account - IP addresses on Kolektiva.social are logged for 3 days and then deleted, so IP addresses from any logins in the 3 days prior to the database backup date would be included.
- A hashed ("encrypted") version of your password.
The admin that announced the capture of his comrade (Kolektiva is an anti-colonial anarchist collective) said that as a precaution users should change their password to something “new, unique, and strong” and change their two-factor authentication if they had that switched on.
The most damaging impact on users is probably the seizure of private DMs and their IP addresses. In the case of the DMs, users on other Mastodon instances could be affected with regard to any messages they sent to Kolektiva users.
While federated platforms like Mastodon are nothing new, many mainstream users are only just coming into contact with them. One of the new issues people need to think about is whose server they join. Do you trust anarchists with your data and ones that have come under the suspicion of the FBI?
Comments
never post what you don't
Nettle Fri, 07/07/2023 - 08:47
never post what you don't want someone else reading, but fuck the feds.
letter writing needs to make a comeback. lol.
Oh, pretty sure the dear
anon (not verified) Fri, 07/07/2023 - 10:36
In reply to never post what you don't by Nettle
Oh, pretty sure the dear postal services of "our" governments aren't tracking down who sends what to whom!
true
Nettle Fri, 07/07/2023 - 11:31
In reply to Oh, pretty sure the dear by anon (not verified)
true. best to never say anything to anyone then, i guess.
Binary much?
anon (not verified) Fri, 07/07/2023 - 12:08
In reply to true by Nettle
Binary much?
yes
Nettle Fri, 07/07/2023 - 12:48
In reply to Binary much? by anon (not verified)
you are totally correct and i have absolutely no sense of humor.
smoke signals are still possible, tho...
anon (not verified) Fri, 07/07/2023 - 14:33
In reply to yes by Nettle
and fire works!
smoke signals & fireworks in
Nettle Fri, 07/07/2023 - 16:52
In reply to smoke signals are still possible, tho... by anon (not verified)
smoke signals & fireworks in this climate ?!
Not from trees, duh...
anon (not verified) Sat, 07/08/2023 - 07:34
In reply to smoke signals & fireworks in by Nettle
Like from cars, construction sites, concert stages n shit.
YeAh, frOm the trunk or
anon (not verified) Sat, 07/08/2023 - 17:20
In reply to Not from trees, duh... by anon (not verified)
YeAh, frOm the trunk or exhaust pipe, from the dumpster in the construction site and concert n shit toilet cubicles
I wish the moderators would
anon (not verified) Sun, 07/09/2023 - 11:59
I wish the moderators would've been able to tell us months ago instead of possibly risking safety and anonymity of users.
It's as if moderators are
anon (not verified) Sun, 07/09/2023 - 13:06
In reply to I wish the moderators would by anon (not verified)
It's as if moderators are only in it for themselves and simply interested in controlling others.
Never trust your security or privacy with others that simply want to control you and the narrative for their own image or gains.
Posts and DM's on mastadon
Tim Sun, 07/09/2023 - 18:47
In reply to I wish the moderators would by anon (not verified)
Posts and DM's on mastadon aren't end to end encrypted and you shouldn't share personal or sensitive information on there. It has a bunch of other security vulnerabilities that may have been patched. It's your responsibility to determine which server you should trust with your communications. If you or anyone used the particular mastadon instance/server without first determining whether it's safe and secure then that's your problem. Period. Don't rely on moderators having to tell you whether it's secure or not. You should've looked into that before you joined.
The users should've used a
Tim Sun, 07/09/2023 - 14:25
The users should've used a vpn or tor.
that always slows down internet speeds
CalvinSmith (not verified) Wed, 07/12/2023 - 12:28
In reply to The users should've used a by Tim
But yeah, that probably would have kept the FBI from locating the admin.
Fellow Anarcho-Communist Here
anon (not verified) Fri, 07/14/2023 - 17:18
In reply to The users should've used a by Tim
Fellow Anarcho-Communist Here. I am getting pretty paranoid that the government/police may do something about anarchists, espescially since I live in a very conservative region. This is why I started using TOR for such purposes.
Okay brilliant, so it's more
anon (not verified) Fri, 07/14/2023 - 20:31
In reply to The users should've used a by Tim
Okay brilliant, so it's more secure to use the clearnet, lol...
What a rat.
I'm very pleased by this response.
Rat (not verified) Sat, 07/15/2023 - 09:36
In reply to Okay brilliant, so it's more by anon (not verified)
Open information for everyone 24/7
"The users should've used a
anon (not verified) Sat, 07/15/2023 - 11:44
In reply to I'm very pleased by this response. by Rat (not verified)
"The users should've used a vpn or tor."
...is a claim, which doesn't provide with any useful information whatsoever. If you gotany solid reasons to believe people "shouldn't" to be using VPNs or Tor for more secure connection that is harder to track by the FBI, at least harder than the clear net which amounts to be talking inside a police station, then let us know 24/7!
what VPN and Tor do is obscure information about internet users
Rat (not verified) Sat, 07/15/2023 - 11:56
In reply to "The users should've used a by anon (not verified)
and encrypt the packets, but yeah the cops can totally find ways to get around that with social engineering and have done so before.
Do you not know the
anon (not verified) Sat, 07/15/2023 - 12:21
In reply to "The users should've used a by anon (not verified)
Do you not know the difference between the words "should've" and "shouldn't"?
That anon was saying users should have (should've) used a VPN or Tor to connect to Kolektiva.
Are you okay?
My thoughts:
CalvinSmith (not verified) Wed, 07/12/2023 - 10:42
"Do you trust anarchists with your data and ones that have come under the suspicion of the FBI?"
Uhm, no? If you are using the internet, it's generally to think of it like you are in a coffee shop and be careful about mentioning illegal activities.
For example, one time when I was using the anarchy planet chatroom anonymously, there was someone using a handle that was also the acronym of an Italian cybercrimes agency. It seemed like they were fishing for information about pedophiles. They said I could open a room to talk about things, so I did and I asked them why they were using that screen name. Then, they just that that wasn't an appropriate question for the time and place, so I just left. Wtfk what that was about?
*it's generally good
CalvinSmith (not verified) Wed, 07/12/2023 - 10:43
In reply to My thoughts: by CalvinSmith (not verified)
To think of it like you are in a coffee shop
Sounds like a VERY REAL story
anon (not verified) Wed, 07/12/2023 - 11:27
In reply to My thoughts: by CalvinSmith (not verified)
Sounds like a VERY REAL story and not made up AT ALL.
We're relieved you survived, CalvinSmith
LMFAO, im glad that i can come to my beautiful anarchist news
CalvinSmith (not verified) Wed, 07/12/2023 - 11:52
In reply to Sounds like a VERY REAL story by anon (not verified)
site and encounter more sarcastic people! That's at least how i remember it, the most important point is you should always expect cops to be interested in online anarchist projects...even if there's definetly a chance that i have failed and jumbled some fax.
Two new restaurants open up
anon (not verified) Wed, 07/12/2023 - 13:00
Two new restaurants open up in town where avowed enemies of the state can choose to dine and plot the destruction of the state.
One is called "Death to America Bistro".
The other is called "Applebees".
Which one do you think the FBI are going to surveil?
Think about, people!
Add new comment