- cross-posted to:
- div0@lemmy.dbzer0.com
- cross-posted to:
- div0@lemmy.dbzer0.com
As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.
You must log in or register to comment.
This is an important post and I appreciate the insight into the happenings on the Fediverse, but the comment chains are going off the rails and I’ve issued a number of bans from this post alone.
Locking.
Genuinely think this post should be pinned for prosperity and a warning to others. Lemmy does not appreciate censorship.
Can someone please ELI5?
anyone reported them to their ISP yet?
What a scumbag
Fascists literally cannot help themselves.
It’d be hilarious if this dude went to prison over this, because it seems like he finally crossed from “annoying and unethical but legal” to straight up illegal.
I don’t think I’ve ever witnessed someone going so hard off the rails. It’s been an entertaining few days really.
It’s what happens when someone with underdeveloped empathy gets caught doing something they know is wrong, resulting in emotional overload.
It’s textbook toddler tantrum.
With stunted empathy, people seeking an explanation and apology are met with increasingly greater resistance.
And like textbook, they claim to be the victim. I wouldn’t be surprised if they are lying about receiving death threats.
What’s crazy is they could have simply:
- Apologised
- Explained the intent to reduce toxicity
- Agreed there was a lack of transparency
- Refactored their existing “enable toxicity mode” feature into a clearer, toggleable blocklist feature
But no. They were caught while they were secretly trying to play internet dictator and refused to empathise with others that were hurt and shocked to find out a tool they were using was receiving undisclosed payloads to use to censor communities and individuals.
I strongly implore everyone to leave this developer alone. Jokingly asking to be added to the list etc empowers them to continue to play the victim. They do not deserve attention.
What’s crazy is they could have simply:
- Apologised
- Explained the intent to reduce toxicity
- Agreed there was a lack of transparency
- Refactored their existing “enable toxicity mode” feature into a clearer, toggleable blocklist feature
Yes, I think there is genuinely an audience for what he was doing (or something akin to it), and it would genuinely have been a useful onboarding tool for getting a certain type of person to consider dipping their toes in the Fediverse.
But first of all it absolutely has to be separated from the safety/anti-spam filters. Bundling it with those is very malicious.
Second it must be opt-in.
Third, it must clearly say somewhere that “this anti-toxic setting is a curated block list based on my personal preferences”. There should then have been an option to use a personal blocklist instead of the developer default.
And fourth, I guess ideally this type of filter should maybe have been maintained by a somewhat more… well-balanced individual.
Anyone who thinks “yeah lgbt stuff should be hidden because we want to attract people who don’t want to see LGBT stuff” is someone I don’t want anywhere near the fediverse.
Yes, agreed. Wholesome Yuri being banned might be the most outrageous decision of them all on the banlist, for me.
Tbh for me it was more outrageous how it interferes with moderation. There are admins from big instances who weren’t blocked themself and mods from big active communities on that list. If they write warning comments, users of this frontend will simply not see them
And tho user and comment regex is a mess, partially containing very random things. Lot’s of possible wrong matches. This whole thing is from no viewpoint a good idea
Also from the other end, because of how the filter works, mods using couldn’t see messages the user put, so they’d have been free to do whatever, until caught by either a bot, or moderators not using the frontend.
One of the reasons it was found to begin with was because the db-zer0 instance was on it, and the admin, who was using tesseract, suddenly couldn’t load any posts from the instance at all. As Tesseract presents it as a compatibility issue, they were trying to track down the fault at the time.
Very good point, that’s horrible. And blocking “your own” instance is pretty dumb. I wonder if db0 would also not been able to read own posts if the instance wasn’t blocked.
Idk, “🥺👉👈” was pretty wild
Full agreement. Part of the problem is that the blocklist was kinda bonkers in who was included
Refactored their existing “enable toxicity mode” feature into a clearer, toggleable blocklist feature
No! The whole point of the fediverse is not to have centralised blocklists. Having blocklists baked in to the code, especially ones that get updated in a centralised manner with no accountability and without telling users they’re on it is absolutely antithetical to the platform and one of the main reasons why people are leaving reddit and coming here. If you want to curate the experience of a user in that manner, what you do is open an instance and advertise it as such. That way people can, at least on lemmy, know where they’re banned from without having to dive into the code or pull API endpoints manually. In fact how a lemmy instance federates and how it curates this experience is one of the distinguishing features among the instances. You have instances like lemmy.zip that federate all that will have them, instances like hexbear that are very quick to defederate in order to keep a safe-space and instances like blahaj that are somewhere between.
A front-end (or any piece of code that is made for being deployed on multiple instances) should be agnostic to all of this. It’s up to the admins of the instances and not the devs to curate and this is one of the main reasons why I don’t trust the piefed dev. Sure you can disable almost everything, but that still means that an admin has to do work in order to get to a neutral place from where they can then curate.
Not every admin has the time or skill to curate. As long as the dev is open about it and there are configurable features to disable it, I don’t see what the issue is. Ultimately it creates no difference for a user if the admin creates it or the Dev does as long as it’s communicated.
The advantage of the fediverse is “don’t like it, go to another instance or build your own”, not to tell devs what they can and can’t do. Hell I never even interacted with Tesseract since I use a different client and an open instance.
The issue is that it’s one person shadowbanning people without their knowledge for any arbitrary reason across instances. Like even if it’s opt-out, that’s still problematic since it makes the default experience whatever that one person thinks it should be. Why should one guy get to decide across the entire fediverse whether your posts are opt-in? That is antithetical to the very concept of the fediverse.
Except one guy isn’t. You have to choose to install the software. It’s not included by default. I’m running a local client (Voyager) and never dealt with any of that because the admins of my instance don’t use it either.
And every user that uses that software for whatever reason, superior features, easier on the eyes, more popular it’s what everyone recommended will get their curation from that one dev.
Which is why it’s ultimately the decision of the admin. Don’t like what the admin of your instance is doing. Go make your own. That’s the beauty of the fediverse. It’s choice all the way down. It’s not like Reddit where you’d be stuck.
I am sorry, but I disagree with the “centralised blocklists” in a:
Decentralized social networking platforms…
SourceYou should be able to block and unblock freely whoever and whatever you want.
The “centralized” may be suggestions (i.e., toggleable), and only, where instances with opt-in keep them implicit/optional, and instances with opt-out explicitly warn about them during a registration.It’s up to the admins of the instances and not the devs to curate and this is one of the main reasons why I don’t trust the piefed dev.
Can you elaborate on that? Asking for curiosity, not to challenge you.
PieFed has a default list of domains/instances that are blocked when you do a fresh install for a brand new instance. A critical difference between PieFed and the Tesseract blocks is that any of the blocks in PieFed are completely visible to, and under the control of the admins of the instance. So, ultimately, it is just an out-of-the-box default, but the instance admins always have ultimate control over moderation/federation choices. This Tesseract stuff is taking those powers away from the admins.
The two main lists that are implemented by default are a defederation list and huge huge listof blocked domains which includes wikileaks for instance, there are other lists (I don’t know if the “trusted instance” list comes prepopulated) and almost all can be emptied or added to. But that means that an admin that sets up the software has to go through a whole rigmarole to get the instance to neutral before being able to do what they think is best. And hope they didn’t miss anything.
In the case of the blocked domains it’s particularly grating since it has like 4000 entries that you either have to delete one-by-one or have to do a manual db transaction to empty the list and that is by design. Plus all you get as a warning that such a list exists is one line during the setup that says
Added 'No-QAnon' blocklist, see https://github.com/rimu/no-qanonbut it’s definitely not just QAnon links.Thanks for the info!
FYI, next version of PieFed has an “Unban All” button for clearing all domain bans to try to make this easier.
Screenshot from my instance:
Oh that’s good to hear. It sucks that people have to constantly fight the dev to keep his opinions out of the code though, must be tiring for all involved surely…
Honestly, I can see a “curated” list of user/instance bans as a feature, similar to unlock. But let people chose them.
Yeah, either that or at least if everyone on the blocklist was like nazis or something it seems like he would’ve had at least half a leg to stand on. But the fact that the most random and benign users showed up on it and he was still trying to justify it as “making the experience better for the fediverse” showed that he was just some asshole completely convinced of his own righteousness.
TIL that I’m benign… Ouch.
If he had just implemented the list as a default that anyone could edit, he would have gotten pretty much what he wanted. I mean, some people would have edited the list, some would have deleted the list, but most people are lazy or uninformed and would have simply accepted the default.
I really hope the tesseract fork implements this feature.
Nothing would prove him more wrong than actually implement what he wanted in a sensible, non-dickish way.
I wouldn’t be surprised if they are lying about receiving death threats.
100%. I’m willing to bet he didn’t even receive any threats. The guy was a short-lived lolcow.
Refactored their existing “enable toxicity mode” feature into a clearer, toggleable blocklist feature
Not sure this would help in itself, even though more flexible blocking would ironically be nice. The value in such a list lies in how it’s curated, and the guy is still certifiable and about 3yo mentally, tops.
Text book narcissistic collapse
I don’t really go on a blocking spree much. How would a front end’s block list implementation be different than the instance’s choice of software’s block list implementation?
I hardly browse All and Local. I am on a piefed based instance, and leave “Enable Automatic Follow of Feed Communities.” and “Enable Automatic Leave of Feed Communities.” on. So kind of my subscribed feed is semi automatic as long as I follow a broad topic.
I agree, I’m almost sad it’s (presumably) over now.
Then again, he already “left” once before (and came back), so who’s to say? We might be clowning on him on and off the rest of the year if he keeps it up.
I saw a vaguely similar situation a long time ago where someone was a positive, contributing member of the community and then they fell from grace somehow and basically no one was thankful enough so they were banned and they just kept evading the bans and posting smut in the forums for weeks.
The way this guy has really thrown his weight into this but still obviously feels like the victim is really reminiscent, I wouldn’t be surprised if there’s some more to come.
That’s weirdly sort of how I got my job.
Apparently my predecessor was a nice guy with low boundaries that (at the time) lacked managerial support. When he painted himself into a corner on his commitments, didn’t get the accolades or raises he thought he should get, he got bitter, started to act out, stopped doing work he should have done, and finally, when management started pressing him to clean up some messes he had created over a year+ of neglecting his responsibilities, he left an unsigned resignation letter on his desk and didn’t come to work for a few days.
He called to discuss the terms of his return, expecting a raise, and they just told him they accepted his resignation.LOL. Sounds like an idiot. Even if the guy was really needed, you can’t have someone like that on your team.
Just another reminder, no one cares about you in the slave factory. Prioritize yourself over work and don’t build up loyalty to a rich asshole.
Thats not really the right lesson to learn here.
Just have real, non-combative conversations with your colleagues and supervisors. Don’t communicate with stupid games and manipulation.
You are talking about the aftereffects whereas mine was about the cause. Mental health is important.
Yeah, best case scenario they work out some kind of deal just to keep the machine turning for a little longer… but he can bet his ass that the second he steps out of that room they’ll be putting up job listings for his replacement.
The manager they brought in to bring him in line has been one of the best, kindest, and most human managers I’ve ever met. (But she doesn’t fuck around.)
She’s also an absolute shark at knowing the system, and without going into specifics, has done very well for everyone on my team that has been even modestly competent.
I honestly feel bad for the guy. He was too far in the hole of anger and resentment to realize that he’d been handed a whole new opportunity before he squandered it.
Shortly after I was hired, several other people were hired in to help with the flow of work, and my team went from being sort of an embarrassment to one that, quite frankly, is awesome. (And we still have a good work-life balance.)Hell yeah! Happy for you
Neverending crashout.
Hes probably writing a manifesto right now.
It’s okay, they are a measured and non-violent individual that just wants Lemmy to be friendly for the “normies.”
They’re a good guy™︎!
The idea that they are the standard-bearer for normal people.
so true
I have received a constant stream of harassing messages, death threats, and threats of doxxing over DM, Matrix, Github, and Codeberg. All of it instigated and eggged on by another instance’s top admin.
you’re the good guys wooooooo!
go fediverse!!
Right, because all of us personally sent harrassing messages, death threats, etc.
See I don’t doubt that he received harrassment, hell I can even believe he got death threats. And that really sucks, I’m sorry he experienced that.
Isn’t it convenient how there are no receipts of them though? Or any trace of the supposed dude egging people on to do it? It’s a diversion tactic that’s honestly becoming quite old.
Half your comments are complaining about commies like it’s the cold war
Honestly it was pretty common on classic Reddit. Usually a modder. Often times a script kiddie/chrome extension.
It feels nice to see it here and it really takes me back.
Not for those of us on the dbzer0 instance 😭
The Empress thing was pretty up there hahaha
We need a hobbydrama community lol
Oh I’ve got one for you, the Kaldeian crashout.
Nice! I needed something to read at work tomorrow.
I think this is the first time the whole fediverse agrees to who the asshole is.
Thanks, dec of Tesseract, you actually left a positive impact on the fediverse. Please don’t come back.
Dear Lord, please grant me this level of pettiness and the presence of mind to wield that pettiness only against those who deserve it. Amen.
Tesseract is officially malware. What a petulant child Patrick is.
he is probably still reading these discussions lol
“im not owned! im not owned!!”, i continue to insist as i slowly shrink and transform into a corn cob
lol, why a corncob?
I believe this is a meme, an old tweet from dril, a user popular for surreal and absurdist humor.
I think for dril the post was in turn a funny theory on what happened to people sent to the twilight zone’s cornfield.
I don’t know, it was like that when I stole it
It’s mostly wasted space.
People like him have multiple accounts.
No doubt he’s reading these
…Hi dork 👋
You rang?
…Wait, not me?
Yeah, he’s definitely still around because he recently replied to a comment of mine using one of his alt accounts, and did so in order to confirm that said account was one of his alts. How strange.
Hi dork! (with love)
I asked him to be put on the list and after a bit of back and forth I was finally added
Which means he can’t see my posts from any of his alts! 🎉🎉🥳🥳
I bet he browsed with toxic mode enabled. Or maybe a special mode that just flagged the word blocks so he could promote them to user blocks.
Assuming his alts are all using his front end, or his personal instance, I guess.
i love how he burned all his alts defending himself
which alts?
i wasn’t keeping too close track
because he’s an emotionally fragile, egotistical narcisist. Wouldn’t be surprised if his parents are pieces of shit, too
jesus christ he just needs to take the l
In case somebody wanted confirmation. Maybe don’t visit the page with Javascript enabled.
And that full text, also to avoid extra visits:
You crazies won and proved me wrong. The fediverse isn’t worth saving after all.
Over the course of the last several days, I have received a constant stream of harassing messages, death threats, and threats of doxxing over DM, Matrix, Github, and Codeberg. All of it instigated and eggged on by another instance’s top admin. This is unacceptable for all of the reasons in the world, and while I won’t give you the personal satisfaction of having won, you’ve definitely proven me wrong about the fediverse being something that even can be saved from itself.
Even people around here I’d interacted with positively for years and had grown to respect because they seemed level headed and above the immature and sociopathic bullshit that dominates this platform showed their true selves. That completely shattered any and all illusions I had that this place has a hidden core of users that I should try to make more visible amongst all the rage, rage baiting, propaganda, harassment, rumor mongering, trolls, conspiracies, purity testing, witch hunts, and violent rhetoric.
Like many of the rational people before me who called this place home, I’m done with this place.
I tried to carve out a space where those people and other rougher edges were not drowning out niche communities and hobbies and where people who choose to use the platform to harass others were also out of sight, out of mind. Apparently only three people who aren’t me actually want a place that’s not just a circle-jerk of rage and hate. Thus sayeth the mob.
Then you have entire instances whose admins call for the death of others, harass other users, and lead harassment, brigading, and DARVO campaigns against those who dare call out their bullshit or decide to disassociate themselves and their work from them.
Lemmy.World was so close to doing the right thing after instance-that-will-not-be named’s admins were calling for the death of LW’s admins while spreading rumours and labeling others in such a way that painted them as targets for murder. All of that, mind you, with absoultey no evidence other than specuation and their own cooked-up conspiracies about modlog actions or taking and twisting things wildly out of context to fit their made-up narratives so they had someone to say they ‘caught’ and should be killed.
.world was on the precipice of doing the right thing and disaccociating themselves from that psychotic shit show, but silently dropped the issue and carried on as usual after wringing their hands for maybe two weeks.
“We have to worry about the optics or the politics of it.” they probably said.
Bullshit.
I’m one person and have held my fucking ground, mostly with dignity and grace, in the heat of my own shitstorm of trying to disaccociate from the extremist elements of the fediverse. If I can stand up for what’s right and deal with the blowback, so can you.
Fuck lemmy world’s admin team for condoning that behavior and letting the human skidmark db0 DARVO his way out of the situation while brigading with his army of malcontents whom he wields like a cult leader. He knows exactly what he is doing, and you all continue to allow him to get away with it.
Nah, fuck this whole place. I’ve let too many things fall by the wayside IRL because of dealing with all this fediverse bullshit and trying to give it the slightest bit of polish both visually and atmospherically. Mythbusters may have proven that you can, in fact, polish a turd, but at the end of the day, it’s still a shiny ball of shit.
For the few people left who didn’t turn out to be psychotic, I’ll think of you from time to time when recalling something you’ve posted or commented that genuinely made me laugh, made me think, or otherwise put a smile on my face or in my heart.
Everyone else, though, enjoy your toxic, xenophobic, knee-jerk-to-violence, purity-testing, and harassing-anyone-who-doesn’t-fall-in-line cess pit. One day you, too, will do or say something that doesn’t toe the line and you’ll be right where I am.
P.S. Rimu, you owe me a beer. No one is talking about the Piefed vote quotas anymore, so you’re welcome.
The disconnect from reality is insane. They completely ignore why people got mad and make up imaginary reasons for why they got the hate while painting themselves like some hero trying to stand for us but getting betrayed in return. It’s both hilarious and sad. I hope that they will have time for self reflection once they get off the threadiverse and become a better person but I don’t have much expectations given how deep they are into the delusion.
That is just the thing. They do see themselves as some sort of savior for the rest of us.
I have received a constant stream of harassing messages, death threats, and threats of doxxing over DM, Matrix, Github, and Codeberg. All of it instigated and eggged on by another instance’s top admin.
I’m getting pretty sick of this kind of claim. Like, do I believe he’s been harassed? Yeah, that seems likely. Death threats? That’s definitely possible. What I take issue with is the way it’s brought up.
He frames that it’s a campaign run by a particular individual targeting him, but there are no receipts. He’s using it as a shield against critique, shutting down any discussion around this by pointing at something and screaming about how he’s a big victim here.
All of that, mind you, with absoultey no evidence other than specuation and their own cooked-up conspiracies about modlog actions or taking and twisting things wildly out of context to fit their made-up narratives so they had someone to say they ‘caught’ and should be killed.
“We have to worry about the optics or the politics of it.” they probably said.
I lol’ed
Yes, I was following the orders of db0 and ada when I did it o7
Perchance, comrade.
Perchance o7
This just honestly sounds like he really does need to step away. Like this clearly seems to be giving him some kind of mental breakdown. It kind of seems like it stated with good intend and quickly spiralled into a god complex.
This mixed with other things I’ve read about him, I just wonder if he needs a little mental help. Or maybe he just needs to disconnect from the internet for awhile and live in reality. Either way, I don’t wish to shit talk. I just hope he gets what he needs in terms of help and support in the real world. Mental health is no joke.
I am shocked and appalled that the Admiral himself would use such toxic language. Perchance he needs to review the bad words on his list with those used in his rant.
/s
that even can be saved from itself
Huh, didn’t know the fediverse needed that. Oh wait, it doesn’t.
Wow. I consider myself a pretty frequent user of Lemmy, and I have no idea what they’re talking about here. Any of it. And if it doesn’t concern me, then it sure as fuck doesn’t concern any “normies”. Normies aren’t doing deep dives into Lemmy politics. They don’t know, and they don’t care—just like I don’t. It’s a classic case of taking a personal vendetta and pretending it’s some grand crusade for decency and normality.
This is the worst case of needing to touch grass I’ve ever seen. Maybe before posting something like that, go take a walk first? Get some fresh air.
What are the vote quotes they are referring to?
Just before this whole thing, the piefed dev pushed an update that capped how many up/downvotes piefed users can do per day. They set the cap to effectively punish like 3 users who posted all day everyday.
One of those users had a “I will leave unless you reconsider.” moment and they didn’t give half a shit. And they didn’t even make the list. None of their communities did.
So just a couple devs thrashing around causing as much collateral damage as possible.
Also punishes those who vote frequently, as I often do. I thought Voyager was having issues until I read the Piefed changelog. Unless my instance admin removes the limit I’m likely going back to lemmy.ca because I shouldn’t have to ration my upvotes. I like being able to boost engagement while also making it easier for me to see which comments I have or haven’t read yet.
Yeah the whole concept was dogshit from the beginning. It solved no problem except as an exercise of control.
Thank you. I do prefer Piefed but without all the restrictions he is imposing.
Is there perhaps a fork of it without these restrictions?
PieFed zip has removed at least the vote quota (or rather, they made it irrevelant)
Hoping piefed.ca does the same.
Right but there are other restrictions too such as hiding posts from certain websites I believe.
I cannot attest to any of it other than it exists:
https://codeberg.org/quokkau/PyLova
Forked during this or the last dramatic debacle with the dev.
I hadn’t heard about it until today either. The Streisand Effect is strong today.
Jesus the most petty of little bitches.
Expert dev. Doesn’t even know the attribute for setting the language in the script tag is
type, notlang. Not to mention that you are encouraged to omit the attribute altogether if the script tag contains JavaScript…Petty, and a bad dev. Big yikes.
The random strikes me as curious too. I don’t see the point in doing
(100 - 1 + 1), you could express a random number between 1 and 100 in a simpler manner. Then he gets another random number and reuses that three times, for whatever reason.Then again, none of his other decisions make much sense to me so why would this?
There are a lot of these sorts of things. Look at the RegEx used in the block list. The author will likely be surprised that RegEx supports * and +.
Yeah the
- 1 + 1was weird to me too, serves no purpose.I can see how choosing a new random number for each fetch would prevent the server from caching the response, I suppose.
I can’t imagine this code was written in any other fashion than completely rage-induced, with shaking fingers and high blood pressure. 😂 What a putz.
I can’t imagine this code was written in any other fashion than completely rage-induced, with shaking fingers and high blood pressure. 😂 What a putz.
lmfao
I’ve drunk coded before (gotta hit the Ballmer Peak) but I don’t know if I’ve ever rage coded before.
I guess it’s just a pattern to easily get a number between
aandb, going(b - a + 1). Or maybe this is just vibecoded lolSeeing
(100 - 1 + 1)definitely bothers my brain lmaoLooking closer, the whole calculation bothers me now. Why do
floor() + 1instead of just usingceil… arghhhh
To be fair, it’s not as if it supports languages other than fucking Javascript anyway, so it mostly doesn’t matter.
Edit: I don’t want to split hairs about modules or json or whatever; I just want to be salty about how we could’ve had Scheme or Python in the browser.
The
typeattribute is not only to specify the language. It’s like one case out of several. It definitely matters in those contexts where you want to do the other things you can do with thetypeattribute.Actually some sites do. Instagram uses
type=application/jsonto store preloaded data.We could have had VM languages also like C# and Java and had web that was actually fast.
Well the
scripttag has a deprecated attribute calledlanguage, so in older code and media you will see<script language="javascript">a bunch. The weird thing is they instead used thelangattribute which just doesn’t exist.Uh huh. Exactly.
There used to be a
languageattribute, but I don’t think I’ve ever seenlangbefore.The lang attribute exists for other elements, but not on the script tag. 👍
And that’s how you go from loser troll to criminal. 👋
