Wrote a little article about some odd lurker bots I noticed on Matrix:
Has been a while, but decided to finally talk about it. Maybe @matrix want to look into this. Given that my research didn't bring me any further (but I have to admit, I also didn't try really hard), I decided to just talk about it publicly.
Feel free to come up with ideas, ask questions, etc!
@matrix To me this only makes sense, when they would originate from matrix.org. But this is a lot broader and seems to be mainly an issue due to quite relaxed homeserver owners. Nothing you or me can do about, besides talking about the problem to create awareness for it.
Also they are no spammers. They just join and lurk. Potential spammers? Maybe. But not yet.
Therefore I don't consider it a security topic that would require an embargo as it's no vulnerability.
mastodon.matrix.org is one server in the network