1325
submitted 1 day ago by Quokka@quokk.au to c/fediverse@lemmy.world

As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.

you are viewing a single comment's thread
view the rest of the comments
[-] VindictiveJudge@lemmy.world 31 points 1 day ago

It was also obfuscated in the source code by downloading the block list when the app was opened and then lied to the user about blocked instances, showing a message saying they weren't compatible with the app rather than admitting the app had blocked them.

[-] Buddahriffic@lemmy.world 23 points 1 day ago

Which also is what led to it being found, since db0, being a good dev, saw his whole instance was "incompatible" and dug into it to resolve it and figured out what was really going on.

this post was submitted on 27 Jul 2026
1325 points (99.2% liked)

Fediverse

43154 readers
1024 users here now

A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, Mbin, etc).

If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!

Rules

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)

founded 3 years ago
MODERATORS