Lemmy @lemmy.ml Burns @lemm.ee 12 mo. ago

Lemmy.world is down because of a DDOS attack

lemmy-world.statuspage.io Lemmy World Status

Welcome to Lemmy World's home for real-time and historical data on system performance.

58 comments

Lemmy.world can't catch a break.
- They are the biggest, so the target is larger or at least more well known.
I now exist on two lemmies. Behold the power of the fediverse!
- laughs in unison
- This is getting out of hand! Now there are two of them!
- That's the power of virtual mitosis, baby
- I now exist on two lemmies.
  
  They're instances, or servers. Lemmy is the platform.
  
  Lemmy tell you, in this instance, I'm not being literal.
I hate assholes that do this. Why? I mean really why?
- Part of the issues in the past have been caused by one singular user who, during the first couple of weeks of growth, registered absurd amounts of communities to try and become an immediate power moderator. He was banned, got really angry, and have been creating spam accounts, tried to use the CSS attack during the emoji issue, and you know what, I wouldn't be surprised if he's the one trying to DDoS the site.
  
  The Most Pathetic Person
  
  Was it someone with Turtle something in their handle? I can’t remember his/her whole name but they freaked out a few weeks ago when they got banned on Reddit after being a power mod that enjoyed being a jerk and they showed up here in Lemmy for a day or two.
  
  Least terminally online and very sane person
- Some men just want to watch the world burn. Namely assholes.
  
  The only DDoS that I can half-way tolerate is ones that go against corporations/governments that do evil shit. And even then, those attacks had better not effect people's health and welfare needs. Yes, assholes abound.
  
  Children. They’re children. Let’s not call these childish little bastards “men”!
Hopefully this crap is contributing to Lemmy overall being stronger. If the developers can plug the holes in the overall architecture so systemic vulnerabilities are minimal, and people make accounts on multiple instances and just switch when one is down, it might take the "fun" out of taking an instance down.
- DDOS is a pretty brute-force attack, so it isn't typically relying on a vulnerability per se. Pretty much the only way to mitigate it is to have large enough infrastructure that you can detect and filter out its gobs of spammy traffic, which no Lemmy instances (at least at the moment) can really practically have. They could potentially use a service like CloudFlare, which does have that infrastructure in place, but that can be expensive. I'd imagine CloudFlare (or a competitor) is probably the best solution they can go with, at least in the short-term.
  
  Yeah, for this one I was meaning the alternate account part. But this one is just the latest in a string, most of which were vulnerabilities or flaws in the architecture. I could have been more clear though.
They're back, but performance is a bit slow.
With all the problems lemmy.world has been having, I've been using the opportunity to test out kbin as well.

Hopefully the Lemmy devs will be able to sort out all the problems.
- Easy target since it's so big. I still think it's madness to have so many users on one instance. But I guess people need to learn...
lemmy.ml has been unreachable or "Error" page with lemmy-ui off an on for past 90 minutes.
Again??

Edit: I know the last wasn't DDOS, but still.
What would be the probability of u/spez being behind this attack, in an attempt to sabotage lemmy?
- Minimal. It frankly just doesn't actually advance his goals very significantly. Nor is he a particularly clever man that thinks of unusual strategies.
  
  I think his focus is on squeezing his current userbase more than any kind of long term caring about the size of it. Wouldn't be surprised if he plans to quit his job in the next 5 years and collect a fat severance anyway. He'd rather people not leave, but DDoSing a small chunk of people somewhere else doesn't really help much.
  
  This is a random attack, so ask yourself who benefits? For one thing, it's fun. It also pisses some people off. It also irritates a fairly politically active population.
  
  Who wants all those things? Trolls, of course. Why are they, specifically, trolling? Varies individual to individual, but mainly it's about causing pain to others.
- Probably some bored kids.
  
  We don't know that for sure: It could be bored adults who never grew up.
- Absolutely zero.
  
  From the man himself lmao
- Some of the larger subreddits probably have more traffic than all of lemmy. I don't think he's spending his time trying to figure out how to sabotage lemmy.
- The Walgreens drugstore got robbed. Was their competitor, CVS, behind it?
  
  Probably, I don't trust those bastards.
- What would be the probability of u/spez being behind this attack, in an attempt to sabotage lemmy?
  
  Lets be honest... he is too busy single-handedly destroy reddit to worry about messing with Lemmy. I think lemmy is the least of his issues right now.
- Well I’m blaming him regardless of his involvement
  
  This, to me, seems the healthiest approach.
- IRC has had a history of people trying to take down servers from time to time.
  
  I'd guess a random person who got banned from a lemmy.world community or the like.
- FYI, this is an attempt at humour, clearly "/s" is needed on lemmy as much as it was on reddit 😅
- @yggdar
  
  Well just don’t discount the possibility that somebody is doing it just for the lolz.
  
  When it comes to this sort of thing there doesn’t need to be any rational motivation or intention to sabotage.
  
  @Burns

You've viewed 58 comments.