Lemmy.world can't catch a break.
this post was submitted on 15 Jul 2023
188 points (98.0% liked)
Lemmy
12514 readers
43 users here now
Everything about Lemmy; bugs, gripes, praises, and advocacy.
For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.
founded 4 years ago
MODERATORS
They are the biggest, so the target is larger or at least more well known.
I now exist on two lemmies. Behold the power of the fediverse!
laughs in unison
This is getting out of hand! Now there are two of them!
I now exist on two lemmies.
They're instances, or servers. Lemmy is the platform.
Lemmy tell you, in this instance, I'm not being literal.
Just clarifying. It's a mistake I see a lot around here.
I hate assholes that do this. Why? I mean really why?
Some men just want to watch the world burn. Namely assholes.
Children. They’re children. Let’s not call these childish little bastards “men”!
Apologies, it can also be women. I'm just constrained by the quote.
The only DDoS that I can half-way tolerate is ones that go against corporations/governments that do evil shit. And even then, those attacks had better not effect people's health and welfare needs. Yes, assholes abound.
Part of the issues in the past have been caused by one singular user who, during the first couple of weeks of growth, registered absurd amounts of communities to try and become an immediate power moderator. He was banned, got really angry, and have been creating spam accounts, tried to use the CSS attack during the emoji issue, and you know what, I wouldn't be surprised if he's the one trying to DDoS the site.
They're back, but performance is a bit slow.
Hopefully this crap is contributing to Lemmy overall being stronger. If the developers can plug the holes in the overall architecture so systemic vulnerabilities are minimal, and people make accounts on multiple instances and just switch when one is down, it might take the "fun" out of taking an instance down.
DDOS is a pretty brute-force attack, so it isn't typically relying on a vulnerability per se. Pretty much the only way to mitigate it is to have large enough infrastructure that you can detect and filter out its gobs of spammy traffic, which no Lemmy instances (at least at the moment) can really practically have. They could potentially use a service like CloudFlare, which does have that infrastructure in place, but that can be expensive. I'd imagine CloudFlare (or a competitor) is probably the best solution they can go with, at least in the short-term.
Yeah, for this one I was meaning the alternate account part. But this one is just the latest in a string, most of which were vulnerabilities or flaws in the architecture. I could have been more clear though.
With all the problems lemmy.world has been having, I've been using the opportunity to test out kbin as well.
Hopefully the Lemmy devs will be able to sort out all the problems.
Easy target since it's so big. I still think it's madness to have so many users on one instance. But I guess people need to learn...
Again??
Edit: I know the last wasn't DDOS, but still.
I now exist on two lemmies. Behold the power of the fediverse!
This is getting out of hand! Now there are two of them!
view more: next ›