Skip to main content

Open source code repository says ‘far-right forces’ are behind massive spam attacks

The open source code repository Codeberg has blamed the far right for a recent campaign of abuse and harassment across its systems. “Projects advocating tolerance and equal rights” were subjected to spam campaigns using abusive messages, which escalated to spam emails sent to users via Codeberg’s own automated systems. Codeberg says it stands strong “against hate and hatred” that endangers free software projects.

On February 12th, some Codeberg users received emails from Codeberg containing abusive content. The site says that this was sent by an abuser who took advantage of the site’s ability to notify up to 100 users at once, generating a notification email each time. Codeberg says that while it has blocked both the accounts and the functionality they used, “a large amount of notification emails” had already been sent, and the site itself experienced brief downtime.

“Your private data was not leaked,” Codeberg reassures users in a statement. “All emails have been generated through Codeberg’s servers using the notification feature and the abusers had no access to your email address directly.”

Codeberg is a Berlin-based non-profit organization that provides hosting and other services for free and open source software projects. It boasts more than 150,000 users who’ve worked on over 200,000 projects, and claims a community that celebrates “free culture, openness and creativity.”

The organization, mostly run by volunteers, says that while it runs with some extra capacity to handle abuse campaigns, that capacity “was obviously exhausted this time.”

“Spamming notification emails to users is a new abuse vector to us, and we did not sufficiently prepare for this,” the statement says. “For that, we are sorry.” The team is working on plans to improve its protection against this and similar kinds of abuse in the future, while responding to users affected by the recent campaign.

One thing the attack hasn’t done is deter Codeberg’s commitment to open source software, which it says is “endangered” by far-right forces. “By targeting some of our most active translators, nicest designers, best developers and all other motivated contributors, they are hurting the free/libre software ecosystem as a whole.”

“We will not be discouraged in our fight against far-right ideologies,” the statement continues. “They are currently on the rise in many parts of the world, and we believe it is important to protect all kinds of marginalized groups. However, if you believe this does not affect your project, you are wrong. Far-right forces pose a threat to all of us.”



from The Verge https://ift.tt/KWmbedS

Comments

Popular posts from this blog

Pandora Stories lets artists add commentary to their own playlists

Pandora launched Stories today, a tool that lets artists and creators add voice commentary to their own playlists. The Stories feature merges podcasts with music playlists, and is meant for artists to add context to an album, or for podcasters to experiment with new storytelling formats. The feature is part of Pandora AMP, the streaming service’s free Artist Marketing Platform that helps creators promote their work. To kick off the launch, Pandora’s prepared some Stories by artists like John Legend and Daddy Yankee, who tell listeners their personal stories interspersed between their own songs. There’s also a Stories playlist called Love Songs That Aren’t Really Love Songs , which includes commentary on individual songs like a podcast... Continue reading… from The Verge - All Posts https://ift.tt/2Xz1oNc

Minneapolis hiring social media influencers for former police officers’ trials

George Floyd died in police custody in May 2020 | Getty Minneapolis is hiring social media influencers to share “city-generated and approved messages” during the trials of four former city police officers charged in the May 2020 killing of George Floyd, according to the Minnesota Reformer . The Minneapolis city council approved the plan on Friday, which calls for six influencers to be paid about $2,000 each to spread the city’s messages with Black, Native American, Hmong, and Latino communities. The goal is to “address/dispel incorrect information” by using “trusted messengers,” part of a program the city refers to as its Joint Information System to share “timely and relevant information” with the public during the trials. “Through the Communications and Neighborhood and Community Relations... Continue reading… from The Verge - All Posts https://ift.tt/3q1AY3x

Android Addition Opens FIDO Password Killer to Billions

The FIDO Alliance hammered another nail into the passwords coffin with the announcement that devices running Android 7.0 or higher will be compatible with FIDO2. Certification of Android 7.0+ means devices running those versions of Google's mobile operating system will support FIDO2 out of the box or through a software update. FIDO2, introduced last year, provides a FIDO Web authentication standard that combines the World Wide Web Consortium's Web Authentication specification with FIDO's Client-to-Authenticator protocol. from TechNewsWorld https://ift.tt/2GQVG4f