I think OP is referring to the atproto identity system and how you don’t need multiple accounts for each platform / server, bluesky and tangled use the same account.

Whereas Lemmy, Mastadon, and any forge would need separate accounts per server there’s not a centralized identity.

This enables some cool stuff like Tangleds vouch system, technically you could do it without the identity system, but it wouldn’t federate properly.

Hey 👋, I’m the dev! The goal is not to be read only! In fact our comments are already federating (this one).

The community federation just needs a bit more work across both the bridge and wrapping up some configuration work, but frankly our user count is <10 right now. There’s not really much native activity, it’s mostly some bot accounts I have set up, so you’re not missing much atm

I’m the dev here if anyone has any questions, I was waiting till it was in a more finalized state to announce it. Also full transparency since this community is a little more sensitive on it, this project has been agentically built over the course of the last 1-2 years, but I am a SWE in my day job.

I’m sure most people here would be more curious about the ActivityPub -> atproto bridge, I call this Tidepool code is here: https://tangled.org/bretton.dev/tidepool

I’m planning full Lemmy / Piefed / Pylova federation, the goal is not only to be read only here! Ex my comment is from Coves! Communities themselves aren’t being federated yet though.

OP I’d love to know what was spamming you, I can help tackle that we don’t have many users and signups are disabled, but I do have some automated bot posts running but those shouldn’t be federating yet.

UPDATE - Spammer banned on my side 🫡

I was also impacted, you need to remove the payload that got dumped:

Payload: /tmp/.pxb/{curl,wget}, /tmp/.spid

Two processes named khungtaskd / cron

They also stole your admin token so go to the Plex UI and log out of all devices for whichever account has ownership of the instance.

Then you can reclaim ownership and it resets the admin token.

You should likely be fine, I didn’t have any crypto miners on mine, it was just in a docker instance and didn’t have access outside of it. I would be much more worried if it was a direct install on a main PC.

Also install watch tower