Webfinger error

Tue, 20 Jun 2023 17:55:17 +0300

adminsforum@hubzilla.org

wrote the following post Tue, 20 Jun 2023 17:55:10 +0300

Webfinger error

Hello

My posts are rejected by #Mastodon with the following error :

delivery rejected: 401 {"error":"Webfinger response for malendur@hub.art3mis.de does not loop back to https://hub.art3mis.de/channel/malendur8944"}

Any idea?

show all 9 comments

Tue, 20 Jun 2023 18:19:49 +0300

Nolan

nolan@ein-hub-von-vielen.de

That's strange: I can't see who posted this... (I'm on a 8.4.2 instance)

Tue, 20 Jun 2023 19:47:21 +0300

Malendur

malendur8944@hub.art3mis.de

From another clone:

delivery rejected: 401 {"error":"Webfinger response for malendur@ehrenfeld.social does not loop back to https://ehrenfeld.social/channel/malendur8944"}

Wed, 21 Jun 2023 08:39:13 +0300

Jupiter Rowland

jupiter_rowland@hub.netzgemeinde.eu

Neither can I.

Wed, 21 Jun 2023 17:31:56 +0300

_jayrope

jrp@hub.kliklak.net

https://hub.art3mis.de/channel/malendur8944 should translate to malendur8944@hub.art3mis.de instead.

Thu, 22 Jun 2023 00:25:39 +0300

Pascal (Hz)

pascal@hz.eenoog.org

If I read

https://docs.joinmastodon.org/spec/webfinger/

maybe the 'preferredUsername' thing has something to do with the issue.

When reading the ActivityPub actor of "https://ehrenfeld.social/channel/malendur8944" (*), I see this

=> the 'preferredUsername' is 'malendur' although we are on the channel 'malendur8944' - Mastodon doesn't like this.
I don't see how it can that Hubzilla is responding this, because it sets the 'preferredUsername' value like this:

$ grep preferredUsername Zotlabs/Lib/Activity.php 
            $ret['preferredUsername'] = substr($p['xchan_addr'], 0, strpos($p['xchan_addr'], '@'));
...

(i.e. the part of user@domain before the '@')
so I would expect 'malender8944'.

So I would check in my db for the 'xchan_addr' field of the 'malendur8944' channel record if I were you to doublecheck that.

Sorry I don't know how to solve your issue, but maybe it's a hint in the right direction.

(*) one can do this with a REST API plugin in the browser: make a GET on the channel, and set 'Accept' header = 'application/ld+json;profile="https://www.w3.org/ns/activitystreams"'

Fri, 23 Jun 2023 08:30:11 +0300 last edited: Fri, 23 Jun 2023 08:32:36 +0300

ivan zlax

zlax@ussr.win

By the way, it's most likely a one of accounts of the farm of virtuals run by one person and creating multiple accounts on different fediverse servers:

Details:

Image/photo

I remind that there have already been complaints about one of their channels:

wrote the following post Mon, 15 Mar 2021 20:21:20 +0300

@Xanthor @Malendur @Malendur @Xanthor @MagicRSS
Hello, i have received a complaint about this channel:
https://ussr.win/channel/magicrss
Here the complaint:
https://ussr.win/link/6479208
Please clarify the status of this channel.

This channel seems to be wasting server resources by simply overflowing the database. I can't figure out what you need this channel for. Explain it please.

For now, given the complaint, i'm freezing this channel - until clarification on your part. If no explanation is forthcoming, then this channel will soon be deleted.

Then they stated that these channels are not run by one person:

Image/photo

But they tried to deceive me. All their accounts have been registered on our server for a few days (and usually real people registrations don't happen that often here) and they are all French speaking. I checked the ip addresses they accessed from - they were the same ones sometimes - French addresses. But the most telling thing is the time separating their accounts' messages, usually a few minutes:

Image/photo

On that occasion, a couple of years ago, they deleted their channel that was complained about, but continued to use other channels registered on our server. And now, after their channel was frozen, several other accounts from other networks have suddenly popped up, "for protecting". I specifically replied in French above - and they all happily exposed their French-speakingness instead of their original English-speakingness. With exactly the same frequency as before - a few minutes between series of messages:

https://ussr.win/link/7232807

So i made the assumption - that it's all Malendur too, all of them - virtuals of the same person. I checked all these accounts - they are all spreading political agitation in fediverse, liking and reposting each other:

https://i.postimg.cc/Bbd8PGvV/accounts.jpg

Here is a list of these francophone accounts, which i suppose are run by one person (or one organisation):
1. @Malendur @Malendur @Malendur @Malendur
2. @Xanthor @Xanthor @Xanthor @Xanthor @Xanthor @xanthor@socialhome.network
3. @MagicRSS
For the following accounts, i've made archive copies, in case you decide to hide evidence of explicit connections as reposts of each other's political agitation:
4. @emaxmax https://archive.ph/SZejo
5. @ayla https://archive.ph/Jix8N
6. @mitra https://archive.ph/BosVe
7. @bob https://archive.ph/2nbpD
8. @Eldarendil https://archive.ph/hhaDH
9. @Nolan (and probably bunch of the same name clones on other hubs) https://archive.ph/W9Sma

I estimate the probability that all these accounts are run by one person (or organisation) to spread political propaganda in fediverse: more than 95%.
I estimate the probability that all these accounts are run by different people, from some special francophone close-knit group, willing to selflessly virtually support each other: less than 5%.

In my opinion this is a typical spammer who earns as an SEO SMM agent in the fediverse, fulfilling the orders of various French customers. I will therefore publish the IP address from which they accessed the channel on our hub:

86.194.80.129 - Country: France; Region: Rhône; City: Lyon; ISP: Orange
(in case other administrators whose resources they use to make money through virtual fraud - decide to check from which addresses they have accessed them)

I won't censor their accounts on our server (i won't delete them, but i will delete their saved files and images - to save space), but i will freeze their accounts by adding this comment to them and archiving them. Given their irresponsibility, ingratitude over the years of using our server for their SEO SMM earnings, and repeated attempts to mislead me - i am now unlikely to unfreeze their accounts.

Fri, 23 Jun 2023 15:17:01 +0300

hubzillar

hubzillar@tiksi.net

Reminds of the mastodon 'fediblock' tag. For hubzilla, it would be nice if a list of unwanted actors was stored on a wiki, so people could good detail reports such as this, for future reference.

Sat, 24 Jun 2023 13:54:07 +0300

Interfed

interfed@im.allmendenetz.de

Can a moderator remove the spam from ivan zlax wich is off topic, and a violation of GDPR?
Thanks

Tue, 27 Jun 2023 16:12:15 +0300

emaxmax

emaxmax@hub.netzgemeinde.eu

I can reproduce it, when I post with a clone:

delivery rejected: 401 {"error":"Webfinger response for emaxmax@hub.trollskog.de does not loop back to https://hub.trollskog.de/channel/emaxmax7473"}