1373
Tesseract dev injects malicious code into browser to illegally DDOS the dbzer0 instance (thelemmy.club)
submitted 2 months ago by to c/fediverse@lemmy.world
483 comments fedilink hide all child comments
 

As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.

you are viewing a single comment's thread
view the rest of the comments
[–] 30 points 2 months ago (13 children)

Expert dev. Doesn't even know the attribute for setting the language in the script tag is type, not lang. Not to mention that you are encouraged to omit the attribute altogether if the script tag contains JavaScript...

Petty, and a bad dev. Big yikes.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 13 child comments
    •
  • [–] 20 points 2 months ago (4 children)

    The random strikes me as curious too. I don't see the point in doing (100 - 1 + 1), you could express a random number between 1 and 100 in a simpler manner. Then he gets another random number and reuses that three times, for whatever reason.

    Then again, none of his other decisions make much sense to me so why would this?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 20 points 2 months ago* (1 child)

    Yeah the - 1 + 1 was weird to me too, serves no purpose.

    I can see how choosing a new random number for each fetch would prevent the server from caching the response, I suppose.

    I can't imagine this code was written in any other fashion than completely rage-induced, with shaking fingers and high blood pressure. 😂 What a putz.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 9 points 2 months ago

    I can't imagine this code was written in any other fashion than completely rage-induced, with shaking fingers and high blood pressure. 😂 What a putz.

    lmfao

    I've drunk coded before (gotta hit the Ballmer Peak) but I don't know if I've ever rage coded before.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 12 points 2 months ago

    I guess it's just a pattern to easily get a number between a and b, going (b - a + 1). Or maybe this is just vibecoded lol

    Seeing (100 - 1 + 1) definitely bothers my brain lmao

    Looking closer, the whole calculation bothers me now. Why do floor() + 1 instead of just using ceil ... arghhhh

  • permalink
  • fedilink
  • source
  • parent
  • [–] 12 points 2 months ago* (last edited 2 months ago) (3 children)

    To be fair, it's not as if it supports languages other than fucking Javascript anyway, so it mostly doesn't matter.

    Edit: I don't want to split hairs about modules or json or whatever; I just want to be salty about how we could've had Scheme or Python in the browser.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 10 points 2 months ago

    The type attribute is not only to specify the language. It's like one case out of several. It definitely matters in those contexts where you want to do the other things you can do with the type attribute.

  • permalink
  • fedilink
  • source
  • parent