This is insane.

sshhole.com

#SysAdmin #CyberSecurity #mastoadmin #alpine

burningboard.net is now running Mastodon 5.0.0-beta.1! 🐘

The upgrade from 4.7.5 went surprisingly smoothly on FreeBSD 15.1 with Bastille jails. The biggest hurdle was Ruby: 5.0 requires exactly 4.0.9, and the FreeBSD package isn’t there yet. So: Ruby 4.0.9 via rbenv first, then the Mastodon upgrade.

New highlights include the redesigned web interface and colour themes. Since this is a beta, please let me know if anything looks off.

#MastoAdmin #Mastodon #FreeBSD

burningboard.net läuft jetzt auf Mastodon 5.0.0-beta.1!

Das Upgrade von 4.7.5 lief auf FreeBSD 15.1 in Bastille-Jails erstaunlich glatt. Der größte Brocken war Ruby: 5.0 verlangt exakt 4.0.9, das FreeBSD-Paket ist noch nicht so weit. Also erst Ruby per rbenv auf 4.0.9, dann das Mastodon-Upgrade.

Neu sind unter anderem das überarbeitete Webinterface und die Farbthemen. Da es eine Beta ist, meldet euch bitte, falls euch etwas auffällt.

#MastoAdmin #Mastodon #FreeBSD

mementomori.social is 4 years old today! 🎂

On 5 November 2022, we started as a small server for @rolle and his wife @mustikkasoppa, who wanted to distance themselves from Musk's X and Zuck's Meta by self-hosting their own calm, safe and tech-friendly corner of the Fediverse. Four years later, we're home to over 1000 people, companies, associations, authors, bands, bots and everything in between.

The most refreshing thing is seeing an influx of Catalan gardeners here, alongside businesses like a small farm in Airaksela that produces honey, eggs, wool, handmade beeswax candles and goat's milk-honey soap (shout out to @pientilabartos). The point is, we're not just Finnish nerds, we come in all shapes and sizes.

The year 2026 was a big year for us. We founded Mementomori ry, a non-profit association that now owns and runs the instance, so it no longer depends on one person. We have 50 members, 3 admins and 1 backup guy. Membership fees cover all our costs, and thanks to our sponsor @upcloud, our servers run on super fast European hardware in Helsinki indefinitely.

We also made our server cluster portable with open source ansible playbooks, so we're not tied to a single infrastructure and can move elsewhere at any time (not that we will any time soon!). We also have backups in several forms, so we can safely say we're covered in terms of continuity.

Thank you for posting, replying, boosting, reporting and keeping this place warm and welcoming. Here's to many more years, for as long as we mortals draw breath.

#MementomoriSocial #MementomoriRy #Fediverse #Mastodon #MastoAdmin

Alt...

A large holographic silver number 4 with the word “YEARS” below it, on a dark purple and blue gradient background. The Mementomori ry skull logo and name are in the bottom left corner, and mementomori.social is in the bottom right.

WHUUP WHUUP
Wir sind auf Mastodon v5.0.0 beta1

Bitte wild weitertooten!

#mastodon
#mastoadmin
#afterspace

https://github.com/mastodon/mastodon/releases/tag/v5.0.0-beta.1

The first beta version for Mastodon 5.0 is now available!

After testing it on mastodon.social for a few weeks, we believe that this version is stable enough to be deployed by others, so if you like testing our new things feel free to install this beta version and report any bugs your find on GitHub or our community forum (https://community.joinmastodon.org/)

We expect the final release to happen within the next 2-3 weeks.

Release notes and upgrade instructions here: https://github.com/mastodon/mastodon/releases/tag/v5.0.0-beta.1

#mastoadmin

Upgraded this Mastodon instance from 4.7.5 to 5.0.0-beta.1. Some sneaky version upgrades necessary, but I made it through. Lost the Tangerine UI, but not worried about it right now.

Don't know if this was just me, but after the update I wasn't able to get to the Admin areas without logging out and back in again on my Admin account.

#MastoAdmin

v5.0.0-beta.1

WarningThis is a pre-release! This has not been as widely tested as regular releases, although it is still tested on mastodon.social and some other servers. If you update to this release, you will not be able to safely downgrade to the existing...

https://github.com/mastodon/mastodon/releases/tag/v5.0.0-beta.1

#mastodon #mastoadmin

Updated to Mastodon v4.7.5 with no drama

#MastoAdmin

v4.5.21

WarningWhile we do our best to support Mastodon 4.5 until 2027-02-20, there are known security issues in some of the dependencies we use. We recommend administrators to update to a newer Mastodon version when they can, especially if you use...

https://github.com/glitch-soc/mastodon/releases/tag/v4.5.21

#glitchsoc #glitch #mastodon #mastoadmin

v4.6.11

Changelog Security Fix DoS through JSON-LD compaction (mastodon#41482 by @ClearlyClaire, GHSA-cf49-73r7-rxj6) Fix Forwarded header taking precedence over X-Forwarded-For (mastodon#41481 by @ClearlyClaire, GHSA-qp4r-p842-mw5c) If your...

https://github.com/glitch-soc/mastodon/releases/tag/v4.6.11

#glitchsoc #glitch #mastodon #mastoadmin

We just released Mastodon v4.7.5, v4.6.11, v4.5.21 and v4.4.28.

They fix multiple high severity security issues. We encourage admins to update as soon as they can.

Full release notes and update instructions are available on the GitHub releases page.

https://github.com/mastodon/mastodon/releases

#MastoAdmin

v4.5.21

WarningWhile we do our best to support Mastodon 4.5 until 2027-02-20, there are known security issues in some of the dependencies we use. We recommend administrators to update to a newer Mastodon version when they can, especially if you use...

https://github.com/mastodon/mastodon/releases/tag/v4.5.21

#mastodon #mastoadmin

v4.6.11

Changelog Security Fix DoS through JSON-LD compaction (#41482 by @ClearlyClaire, GHSA-cf49-73r7-rxj6) Fix Forwarded header taking precedence over X-Forwarded-For (#41481 by @ClearlyClaire, GHSA-qp4r-p842-mw5c) If your reverse-proxy setup uses...

https://github.com/mastodon/mastodon/releases/tag/v4.6.11

#mastodon #mastoadmin

v4.7.5

Changelog Security Fix password authentication bypass for inactive accounts (GHSA-3xjw-gv43-3w62) Fix DoS through JSON-LD compaction (#41482 by @ClearlyClaire, GHSA-cf49-73r7-rxj6) Fix Forwarded header taking precedence over X-Forwarded-For...

https://github.com/mastodon/mastodon/releases/tag/v4.7.5

#mastodon #mastoadmin

We have updated to v4.8.0-alpha.3+mementomods-2026-11-03-v4-security, which means today's Mastodon 4.7.5 security fixes cherry-picked on top of our 29.10.2026 security build.

🔒 Security

- Fixed a password authentication bypass for inactive accounts (https://github.com/mastodon/mastodon/security/advisories/GHSA-3xjw-gv43-3w62).
- Fixed a way to overload the server with specially crafted ActivityPub data (https://github.com/mastodon/mastodon/security/advisories/GHSA-cf49-73r7-rxj6).
- Fixed the Forwarded header taking precedence over X-Forwarded-For. Our proxy now also strips the Forwarded header (https://github.com/mastodon/mastodon/security/advisories/GHSA-qp4r-p842-mw5c).
- Updated dependencies with security advisories: addressable, loofah, rack and rails-html-sanitizer.

🔧 Fixes

- Invite use counts no longer go down when an invited user deletes their account.

🧭 Mastodon 5 status

Mastodon 5 with its new design is still in alpha, and Mastodon Bird UI is not ready for it yet. Until we get things ready, we stay on our v4 build and pick only the security updates on top of it.

Source code: https://github.com/mementomori-social/mastodon

As always, if you notice anything unusual or buggy, please reach out to me or any of the admins. Enjoy your time here, and feel free to message me with any questions or thoughts.

If anything feels off, please let us know!

#MementoMoriSocial #Mastodon #MastoAdmin

Going to cherry-pick the newest security updates on top of our v4.8.0-alpha.3 release now. We're still not ready for v5 - everything in due time. Soon.

#MementomoriSocial #MastoAdmin

We've implementend some new anti scraping filters. If you can't reach chaos.social please send us a mail. #mastoadmin

What is going on with Mastodon/4.7.3 (http.rb/5.3.1; +https://toot.community/)? 4494 Requests from them since midnight (8717 yesterday 😀) to an old testing instance, answered with 410… #fediadmin #mastoadmin #mastodon

When journalists are fighting to be the first to post on Mastodon, I think we might be doing something right here.

#mastodon #mastoadmin #mstdnca

I goess [privacysafe] [dot] [social] is an instance safe to block?
Just receiving spam from there..

#mastoadmin #mastodonadmin #sysadmin

Goodbye https://bunnymotorsports.com, we hardly knew ya.

#mastodon #mastoadmin #fediverse

Alt...

screenshot of the tootctl self-deestruct command

You can now add up to 10 links on your DMV.community profile page!

#mastodon #fediverse #mastoadmin #LinksLinksLinks

We just released Mastodon v4.7.4, v4.6.10, v4.5.20 and v4.4.27.

For those using our nightly containers, the `nightly.2026-10-30-security ` tag is available with the fix.

In addition to several bugfixes and dependency updates, they fix a critical security issue that can be used to impersonate remote accounts and activities. We urge admins to update as soon as possible.

Full release notes and update instructions are available on the GitHub releases page.

https://github.com/mastodon/mastodon/releases

#MastoAdmin

📬 Trunk & Tidbits for September 2026 is now out!

Our monthly blog post series is there to showcase what we worked on last month.

A lot happened last month in preparation of our upcoming Mastodon 5.0 release. We also merged an optimisation to account deletion federation (which requires signed fetches for accounts), a few improvements to the moderation panel and to our FASP integration.

https://blog.joinmastodon.org/2026/10/trunk-tidbits-september-2026/

#mastodev #mastoadmin #TrunkAndTidbits

We are planning to release new Mastodon security updates for versions 4.4, 4.5, 4.6, 4.7 and nightly this Thursday, Oct 29, at around 14:00 UTC.

It solves a critical severity security issue.

We encourage server administrators to plan for an update in the hours following the release to ensure their instance is protected. These versions will not require database migrations.

#MastoAdmin

I know VPNs exist, but if there was an option in the Mastodon admin interface to only allow new users to register if they have an IP-address that resolves to Norway... that would get rid of 99% of spam sign-ups and I would probably open registration (as opposed to requiring approval).

#Mastodon #MastoAdmin #Administrators #Allheimen #Fediverse #Norway #Norge #MastodonFeedback