As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.
Okay. I see where the disconnect is. We’re both saying the same thing. In my earlier comment I said “as long as the Dev is open about it and it’s configurable by the admin”. What the tesseract dev did was wrong, what I was saying though is that a dev creating and managing a list is fine as long as those other conditions are met.
