Probably DNS?

Yeah, the unencrypted nature of the comms in particular is problematic. Hoping this will be remediated at some point (no idea how!)

Can confirm. Source: cyber security analyst in fintech

That’s a really good point

Hook, line, and sinker!

I haven’t played around with it much, so this is a pretty uninformed suggestion, but BitWarden have a secrets manager, currently in beta. You can create projects, then grant human or service accounts access to secrets. Looks promising, but I have to say I’m a bit of a BW fanboy so I concede some bias.

The use of captchas and email address requirements should cut down on the bot accounts at least slightly (the former more than the latter)

Agreed, but at this point solid account migration alone would be great!

Yo, let me know if you need help modding the general community as well as any others.

While it’s all small it’s not too onerous, and we can add more mods as necessary. Also not keen for PowerMods™ who have too much influence on heaps of communities, but also want to support and get this space up and running.