πŸ’€ KemoNine πŸ’€ is a user on mastodon.social. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.
πŸ’€ KemoNine πŸ’€ @kemonine

Pro Tip # Eleventy Billion

Instance Admins and Moderators *CAN* see your IP address and other bits of information related to your account.

If you're at risk, be mindful of your instance choice. The admin/moderation team *CAN* see your IP.

See attached screencap for how much data the admin and mod teams have access to.

Β· Web Β· 80 Β· 58

@kemonine what you do is good and you should feel good.

@kemonine as server operators, we have much more than that if we want it. Mastodon is distributed, but you still need to trust your host!

@kemonine a VPN and a protonmail or even a second gmail account can help, too.

@jerry @kemonine or a email that's not your actual email like mastodon@infosec.co.uk and it forwards to your actual email

@kemonine That's why admins should enable tor for their instance(s) ;D

@kemonine One can use VPN or Tor, I don't think there is an instance that blocks access from Tor.

@salixlucida Unless they put CloudFlare in front of the instance there is nothing in the standard configs/docs that would preclude Tor or VPN access.

@kemonine How long of an IP address log does it keep?

@kemonine @Gargron Looking at the userdata Mastadon can see, I'm curious why reports are linked to a user, and not anonymous. Is it a limitation of one of the fed protocols?

@shaknais The reports are the things that the user has posted that were reported by others.

However, I believe admins and mods can see who made the report.

@kemonine Is it also fair to assume the instance admin(s) could have access to the entire instance database?

@nebby yes, anyone with direct access to the server will have access to the full database...

However, if you're just a moderator or front end only admin (using a hosting provider say) then you have less insights/visibility day to day.