wow, that is so cool. A few weeka ago I talked about this with a server owner and he consulted a prodigy developer and told him what I said above. Amazing they got round to it so quickly. Thanks for the details.

that is not carbons though, carbons is working properly. Apparently they talked about this issue in the latest XMPP group meetup so something may be in the works.

My guess is they get @'s from the federated timelines. If so it takes a follow or mention from the vulnerable attacked instance for the spamming bot to add it to the mentions they do. I don’t think they just decided to go against this community.