Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| rules:rule_10_no_attacks_against_or_from_the_instance [2022/11/18 16:10] – cirriustech | rules:rule_10_no_attacks_against_or_from_the_instance [2022/11/20 00:17] (current) – Add tip block dreadpir8robots | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Rule 10: No attacks against (or from) the instance ====== | ====== Rule 10: No attacks against (or from) the instance ====== | ||
| + | You may not do anything which may impact confidentiality, | ||
| - | You may not do anything which may impact confidentiality, | + | <block alert> |
| - | You may not undertake any activity that would in any way put the confidentiality, | + | Activities which would breach this rule may include, but are not limited to: |
| - | + | ||
| - | This may include, but is not limited to: | + | |
| * Denial of Service attack (DoS) | * Denial of Service attack (DoS) | ||
| Line 12: | Line 11: | ||
| * Attempting to hack/ | * Attempting to hack/ | ||
| * Compromise/ | * Compromise/ | ||
| - | * Impersonation of any user or admin | + | * [[rules: |
| * Posting of malicious links/ | * Posting of malicious links/ | ||
| - | |||
| - | **Breach of this rule will lead to an immediate lifetime ban and may also include reporting to the relevant authorities.** | ||
| This rule also encompasses using Infosec.Exchange in any way to impact other servers or people. | This rule also encompasses using Infosec.Exchange in any way to impact other servers or people. | ||
| - | If you are looking for somewhere | + | ===== Other instances may provide security research environments ===== |
| + | Conducting invasive vulnerability research/ | ||
| + | |||
| + | < | ||
| + | There’s been a lot of discussion about a rule we recently instituted regarding security testing on the infosec.exchange instance. I understand the value or pen testing as much or more than most people, and I’m fully cognizant that pen tests are happening all the time and I’m not getting the report. I get it. But there are now 28,000 people using this service | ||
| + | |||
| + | As a result, I am going to set up two instances tomorrow that only federate with each other. This is where I’d prefer legitimate security testing be performed. I’ll also be using it as the QA environment to test new updates and settings prior to deploying to the production instance. I’ll moderate signups because I don’t want it accidentally becoming fediverse 2.0 in the ongoing rush for the doors at twitter, but will accept anyone who wants to join, with clear indications that it’s a sandbox and should not be considered safe. | ||
| + | |||
| + | Thanks for patience as we continue to find out way. | ||
| + | < | ||
| + | <block tip>If you are looking for somewhere to test vulnerabilities of Mastodon, [[faq: | ||