http://e26whn2524322mkxb3cbyk27ev2ihhq2biz35hty7gzgsyrwrygq27yd.onion/posts/blog/security/digging-into-the-behaviour-of-a-self-authenticating-mastodon-scraper-bot.html
Conclusion As soon as I saw that the bot seemed to be providing a token, I knew it was going to be interesting to look at. The bot's author, for their part, took steps to try and increase accountability for the bot's behaviour, providing an audit trail to link requests back.