anime graf mays 🛰️🪐

https://nerv.st/users/graf

timeline terrorist
alt of [@graf@poa.st](https://poa.st/users/graf )

Public Key

npub1vgugf8vvyv6qwg7m9mfwwqctnz8wa7l4s50egyxa33l22hxlu5asn7mad2

NIP-05 Address

graf_at_nerv.st@momostr.pink

Profile Code

nprofile1qqsxywyynkxzxdq8y0dja5h8qv9e3rhwl06c28u5zrwccl49tn072wcprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntxfm3gc

Publishing to

relay.momostr.pink

Author Public Key

npub1vgugf8vvyv6qwg7m9mfwwqctnz8wa7l4s50egyxa33l22hxlu5asn7mad2

Show more details

Last Notes

2026-09-23 01:56:36 UTC

pleroma configuration dumped from the database, compiled and runs under its own steam on the new hardware. responds to requests as expected. hope by tomorrow evening Poast should be running 🎉 🙌🏻

2026-09-22 12:13:27 UTC

- reply

neither does Jonny but I worry about him too

2026-09-22 12:09:17 UTC

- reply

I'm worried about that dicey guy genuinely

2026-09-22 12:05:00 UTC

- reply

sorry man I forgot to undefed you here. has been done

2026-09-22 11:53:29 UTC

- reply

Gleason text me during the downtime not to offer advice or support but to get me to ditch fediverse and make poast a nostr site. told him I'm all in on fediverse and he doubled down trying to shame me "this wouldn't have been possible on nostr" with a screenshot of my deliberate nulling of our domains. I sent screenshots to some friends. not doing it for any dollar amount

2026-09-22 10:32:51 UTC

- reply

you made me pause a new song one of my favourite artists just popped to listen to you tell me about a mug I didn't buy you and then about chicks that aren't even in the room with us why?

2026-09-22 09:49:12 UTC

- reply

Jonny, there was women in this thread. I untagged them so they don't get 100 notifications when they log in again. Buy a whiteboard. You have some intelligence that a lot of others here don't, share it

2026-09-22 09:15:24 UTC

- reply

Yeah, that video just says "Video Unavailable" for me unless I log in. Wild

2026-09-22 09:12:54 UTC

- reply

No. Based on my observations with Poast, it's only been youtu.be links. This probably won't work but it's Canada's best music export "The Tragically Hip"
https://youtu.be/d18UWu4dRv4

2026-09-22 08:58:42 UTC

- reply

This isn't a bug, oembed cards are generated when the data is provided. A year and a bit ago youtube chose to require multiple different methods in order for a user to be verified as legitimate and not a "bot" such as javascript, requiring a user token etc. They actively block datacenter IP address ranges. Sometimes when they break it, youtu.be links will show a thumbnail and description but it's once in every few months.
In order to resolve that club would have to have a pool of residential proxies rotating regularly or somebody would have to create an account and provide tokens and a shim would have to be written specifically for youtube links in order for them to embed in any capacity, unfortunately
edit: replied to the wrong reply, woops

2026-09-22 00:50:15 UTC

server is running under its own power on gentoo. wont be up tonight but the major step has been completed

2026-09-19 07:03:16 UTC

- reply

The server they compromised had automated patching through ubuntu pro and was running the same version as the one I just spotted on another server I happened to be working on. this is 22 LTS

2026-09-19 06:59:56 UTC

- reply

```
graf@:~$ sudo apt install --only-upgrade openssh-server
Password:
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
openssh-server is already the newest version (1:8.9p1-3ubuntu0.17).
0 upgraded, 0 newly installed, 0 to remove and 77 not upgraded.
```
```
graf@ryzen-elf ~ $ nc xxxxx
SSH-2.0-OpenSSH_9.9
```

2026-09-19 06:40:36 UTC

- reply

ubantoo is still shipping 8.9 openssh-server in LTS btw

2026-09-19 06:39:53 UTC

- reply

ACK

2026-09-19 02:25:50 UTC

- reply

she was like 5/10 but she is a self proclaimed "leftist witch" she even has a poast account now. she didnt tell me til the second weekend I drove back to the US that she had some court ordered out?patient treatment for some drug abuse so I stopped on my way to her house to rent a hotel room I had to retreat to before I showed up and I ended up needing it lmfao

2026-09-19 02:22:42 UTC

- reply

Oh no, you saved yourself from seeing me being SFW raped for hours by some girl. I was so uncomfortable and even Rick was like WTF

2026-09-19 02:17:36 UTC

- reply

I'll make sure I buy you a couple beers next time I'm in your area to make up for it then. Thank you friend

2026-09-19 01:55:52 UTC

also if any of you want your monthly donations cancelled send me a message on here and I will remove them manually as it's not fair to you guys to expect donations when we can't currently provide a service. Will need the username from poast and/or the email on your account and any refund requests I'll process while we wait for remote hands

2026-09-18 23:59:34 UTC

- reply

💯

2026-09-18 23:46:52 UTC

- reply

Get the Detroit style ones. we smoked them once and they were amazing

2026-09-18 21:14:24 UTC

hardware is racked but our router was never configured for new IP ranges so it's blocking the hardware. no idea how long they will take to rectify it so it will definitely be delayed but I have committed my weekend to this so hopefully it's soon

2026-09-17 08:38:56 UTC

- reply

please, please don't tell me you use hetzner. if you want in germany use servdiscount.com

2026-09-17 05:08:03 UTC

- reply

Will update you guys when I start installing Gentoo
https://media.nerv.st/75/bf/4b/75bf4b529cf4d2250626f3c0d8257b50f654b547e021d990caa405e568cc9753.png

2026-09-17 04:19:14 UTC

had a very long couple of days between meetings, trying to organize shit and irl bullshit. still waiting for our chassis hardware to be swapped so it might be past friday, probably will be because I want to have it pentested before it goes online again but I will try to update you guys or @milk @grey @yockeypuck or @adequate_birb@decayable.ink are authorized to speak on my behalf if I am not on here

2026-09-14 16:05:34 UTC

- reply

I would be mortified if I became "famous" the way she did. her family must have been if they had any morals

2026-09-14 16:01:34 UTC

- reply

>trying to figure out how to clip shitcoins
????
they just message someone famous, get them to endorse it, it pumps and they dump. happens every day, probably multiple times

2026-09-14 15:58:59 UTC

- reply

if he does and you send it to me ill double it and send it back

2026-09-14 13:50:28 UTC

- reply

the database is intact, they did not realize there was on disk backups so we have a backup from 2 hours prior to them dropping tables

2026-09-14 02:00:01 UTC

attempted media recovery after forensics. waiting for remote hands to swap our hardware out with the new hardware and configure our router then I will begin rebuilding tomorrow. depending how fast they swap it, I'll throw up a page with an ETA for poast return. all user accounts are intact but media will be missing

2026-09-07 13:19:34 UTC

if you guys are in a position to contribute to legal funds please do via give.poast.org or message me or one of the admins backups at @yockeypuck @milk or @grey for crypto

2026-09-07 11:23:25 UTC

front page of hackernews again, no mention that I'm the one speerheading https://news.ycombinator.com/item?id=49588988

2026-09-06 20:59:57 UTC

- reply

database is fully restored and intact to 2 hours prior to the attack so anyone who was deactivated during this time will already be reinstated but we are dropping the user tokens and writing a site-wide password reset into pleroma. Will submit a patch or PR upstream

2026-09-06 20:43:10 UTC

waiting for the rest of our forensic mirroring on the main hardware then we will unrack the loaner and put in our new hardware and start assembling. ETA is still at least a week out but progress is being made

2026-09-06 20:29:34 UTC

As promised here's a list of public instances, more are joining and will be added as they volunteer https://codeberg.org/mv12star/shitter/wiki/Instances

2026-09-06 18:18:46 UTC

told the xcancel admin to bring his instance back up so if you guys don't want to use my fediverse login requirement for bitter, it will probably be up today

2026-09-03 22:45:42 UTC

- reply

when you give me 500 dollars

2026-09-03 20:14:48 UTC

>walk in my house
>hear a chirp
>norstrealist didn't notice or hear it
brothers

2026-09-03 03:21:11 UTC

- reply

two different off-site media backups is usually enough and no offense but living in Canada I don't want a backup in my house

2026-09-03 03:16:49 UTC

- reply

I am saying interserver has shared large disk storage hosting. they got into that even. that has some login name I don't even remember

2026-09-03 03:15:59 UTC

- reply

it was. on a completely different host. shared. OpenSSH 8.9p same as the rest that were exploited

2026-09-03 03:11:08 UTC

- reply

superblock is intact so some data can be recovered some can't. working on auth logs now

2026-09-03 02:31:13 UTC

got ahold of my .bash_history from one of the disks they tried to destroy, after they reset ipmi and redirected nginx they ran these commands. without a doubt this is about the nitter
```
ssh -i /home/pleroma/.ssh/id_rsa poast@bitter.st
ssh -i /home/pleroma/.ssh/id_rsa* poast@bitter.st
ls /home/pleroma/.sssh
ls /home/pleroma/.ssh
ls /home/pleroma/
cd
ssh -i /var/lib/pleroma/.ssh/id_rsa* poast@bitter.st
ssh -i /var/lib/pleroma/.ssh/id_rsa poast@bitter.st
ssh -i /var/lib/pleroma/.ssh/id_rsa graf@bitter.st
```

2026-09-02 23:04:46 UTC

- reply

nothing to crash out about. Calm and collected. Disappointed in our ISP for doing something without verifying with me first but I escalated it to the owner who was in mid flight at the time so it's on me too. We'll be just fine

2026-09-02 23:02:06 UTC

- reply

I'm genuinely upset but only because I let people who trust me down. Everything important is intact it'll just take us a bit to assemble the pieces

2026-09-02 18:32:11 UTC

In regards to nitter, the EFF has decided to petition their panel of volunteer lawyers to assist in the nitter C&D. Have been in contact with them most of this morning, will be good to get legal support for the other instances and their maintainers and challenge xitter

2026-09-02 16:57:28 UTC

I could have sworn I updated the OpenSSH on all our major infra when the CVE came out. And I know I did. I posted about it. I was some people's first knowledge of it. I just remembered our motherboard died last summer and we are on loaner hardware and I didn't even think about updating it. I fucked up. I let you guys down and I'm sorry

2026-09-02 16:13:04 UTC

- reply

there's a lot of things it could be. But it's tied to the news about the nitter

2026-09-02 16:09:00 UTC

- reply

the database wasn't touched so, it didn't stop anything really. Media will be missing but tbh I don't think anybody cares about it

2026-09-02 15:59:08 UTC

- reply

it's funny. That is actually a genuinely flattering photo and when people use it to try to shit on me it's funny. Imagine what the person using it to try to bother must be like

2026-09-02 15:49:21 UTC

- reply

I was watching Justin Trudeau run from a suburban from a 40th floor hotel in a Toronto alley when I wiped your block list. You know I'm me

2026-09-02 15:46:02 UTC

If you guys see people tagging me telling me poast is down can you tell them byte-for-byte mirrors are being made of the disks and then tell them why because I'm getting tired of explaining

2026-09-02 12:10:34 UTC

- reply

well they effectively attempted to make the drives have 0 data on them but they didnt reach the superblock so we may be able to recover some evidence. we are doing a remote backup of the drives in that server now, then I'm going to have them overnight to me so I can physically attempt recovery but it's not looking good.
They DFE our backup servers running the same openssh version but the database was never touched and is intact (gentoo ftw) so give me a week or maybe 10 days somewhere around there, we are going to unrack that server as its a loaner and replace it with the new one we got last year then I will rebuild configs and stuff

2026-09-02 09:43:51 UTC

- reply

also running the same openssh version
ex: Sep 2 05:58:37 backup sshd[907424]: Accepted publickey for poast from 212.143.80.182 port 50281 ssh2: ED25519 SHA256:+wplbmr5KQnl3Zk1opUvVLZSsH36zrIrm5HHoyFktgw

2026-09-02 09:41:44 UTC

- reply

because they DFE everything on our database backup server and there was about 130GB of egress data today it is possible they copied a backup of our database, so be warned. when we bring it back up everybodys logins will be dropped and you will be forced to change your passwords

2026-09-02 09:33:46 UTC

>DFE everything on one backup server
>leave behind your pubkey
>check auth.log on a backup server
>its all israeli ips authenticating with that pubkey
not even a hint or tiniest bit of joking on that one

2026-09-02 08:14:34 UTC

Looks like they might have tried to wipe or zero out the root NVMe as the partition table is damaged, may be able to recover it otherwise I will just take this time to put us on the new hardware we bought but havent moved to yet
https://media.nerv.st/fd/f5/da/fdf5da3017c49baa7dc36548f17021c64a8431a39a116ecc33f693da9afe082e.webp

2026-09-02 02:22:20 UTC

yes we are aware and are working on this breach but from a cursory glance it looks like a race condition was exploited in the distro shipped version of openssh

2026-06-05 11:59:07 UTC

can somebody thats on an instance that has like more than 2 active users say nigger for me thank you

2025-08-10 19:04:54 UTC

@npub1swc…y2dn specific media sharing is causing extensions like ublock to block users from loading media. Can we force pleroma to reject using URLs like /ad/ and some others?

2025-07-14 06:01:21 UTC

- reply

It's been failing for 24 hours, I was trying to troubleshoot what the issue was with 0 logs. The ISP owner even called ASRock who confirmed board is bricked from ACPI/SMU handoff. Can't do shit about it. Because we have a chassis that has 6 active NVMe and the ISP doesn't have a chassis that will support that much NVMe either I have to order something for morning delivery or we have to frankenstein something

2025-07-13 23:07:48 UTC

Hardware for Poast I think is suffering from microcode issues causing it to just flatline. Involved the owner who is now in the datacenter. If he can't resolve it I'll fly out in the morning

2025-06-13 08:28:04 UTC

- reply

i changed the user agent to WhatsApp/2 which is what gleason used to bypass everything and it doesnt work. at all

2025-06-13 08:27:27 UTC

- reply

i thought it was youtube blocking us but i looked into it more, i even used an ssh tunnel to my desktop and they work fine. there's something wrong with the oembeds with youtube specifically

2025-06-13 08:22:13 UTC

@npub1swc…y2dn do youtube embeds work for you?

2024-07-09 06:39:08 UTC

oh shit petes already on NERV
https://nerv.st/media/90b10ab9607079b4a1d6ee1d13c578606dbdda7b22b644951bbc42c865cb21ea.png