As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.

  • NotANumber@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    5
    ·
    34 minutes ago

    Can someone explain what the hell this whole situation is? I didn’t really even know what tesseract even was before this happened.

  • mlg@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    31 minutes ago

    I’m 2 days late to checking the banlist and even though I didn’t make the exact user match, I did make the regex match lol.

  • HCSOThrowaway@lemmy.world
    link
    fedilink
    English
    arrow-up
    79
    ·
    4 hours ago

    It’d be hilarious if this dude went to prison over this, because it seems like he finally crossed from “annoying and unethical but legal” to straight up illegal.

  • zr0@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    71
    ·
    5 hours ago

    I think this is the first time the whole fediverse agrees to who the asshole is.

    Thanks, dec of Tesseract, you actually left a positive impact on the fediverse. Please don’t come back.

  • nullify3112@lemmy.world
    link
    fedilink
    English
    arrow-up
    23
    ·
    5 hours ago

    Can someone ELI5? I’m way out of the loop and almost too afraid to ask at this point.

    Is tessaract an instance? My understanding through memes is that they hardcoded a blocklist of users and instances and it became a badge of honor to have your name on it.

  • pcouy@lemmy.pierre-couy.fr
    link
    fedilink
    English
    arrow-up
    65
    ·
    7 hours ago

    “Apparently only three people who aren’t me actually want a place that’s not just a circle-jerk of rage and hate.”

    I think this is the best part of their message

    • ZombiFrancis@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 hour ago

      So that’s the piefed dev… and I’ll assume the two others consist of the most overtly zionist admins in the FHF corporate team? (Wait, I’m sorry “corpasluts”.)

      I mean just what is FHF going to do without their CFO? Or will they keep him onboard as a reliable financial manager who just hates the fediverse?

      Oh it’s been a fun the last couple of weeks on here, I can tell you that. The vindication feels great.

        • Coelacanth@feddit.nu
          link
          fedilink
          English
          arrow-up
          1
          ·
          17 minutes ago

          I mean, I don’t think they’ve done something this bad just yet but they also do hardcode a lot of things into the software, and some of the webpage blocks are apparently very tedious to take out if you want a politically neutral Piefed instance. They are very openly opposed to the leftists around here. Here is some recent stuff too.

          There was also stuff like the implementation of flairs on Piefed deliberately declining to use ActivityPub endpoints, which made it an exclusive feature to entice users to switch instead of something Lemmy could create compatibility with, which felt kind of EEE-ey to me. Now that was years ago and I haven’t kept up on development, they may have changed it around since then. I think flairs are coming in Lemmy 1.0, or something sort of like it.

          And recently there was the whole vote rationing fiasco, which stemmed from some sort of fundamental misunderstanding of how voting works on a place like this by Rimu, was idiotic from the start and ultimately drove PugJesus (and incredibly valuable and active poster in tons of niche communities) permanently off the platform after they didn’t back down.

          Piefed has some great features but my opinion of it hasn’t been great as of late.

    • AbidanYre@lemmy.world
      link
      fedilink
      English
      arrow-up
      42
      ·
      edit-2
      5 hours ago

      My favorite part of this was in the “elephant in the room” post.

      One of his faq questions was something about if the list is a perma-ban. His answer was somewhat incoherent but basically if you stop being toxic you can get off it. But nothing about how. So either he’s actively monitoring thousands of accounts that he’s also secretly hiding from everyone else, or we were supposed to, I don’t know petition him with our last 50 comments to prove we had changed and ask nicely to not be on a list we weren’t supposed to know existed in the first place.

      • pcouy@lemmy.pierre-couy.fr
        link
        fedilink
        English
        arrow-up
        5
        ·
        2 hours ago

        I did not follow this drama, and I don’t know about this list everyone is mentioning. Is this something that hides specific users posts and comments from the Tesseract UI ?

        • BluescreenOfDeath@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          ·
          2 hours ago

          Basically, yes.

          Tesseract was downloading at runtime an obfuscated blocklist of users and instances. One that the dev didn’t tell anyone about, and didn’t give an option to disable/modify.

          db0 was trying to update Tesseract and was unaware that the whole dbzer0 instance was blocked in this way. And because the Tesseract dev is a spherical bastard, rather than saying “this is blocked”, it said there was an API mismatch, which sent db0 down a troubleshooting rabbit hole that ended with him blowing the whistle on the whole thing.

          And you can see how mature and wise the developer is for how he responded.

        • AbidanYre@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 hour ago

          I only learned out about it when someone posted an stl badge of honor to the 3d printing community and during my “what is this even about” investigation found that I was on it.

          But, yeah. BSOD summed it up pretty well.

      • pcouy@lemmy.pierre-couy.fr
        link
        fedilink
        English
        arrow-up
        7
        ·
        2 hours ago

        It also made my browser freeze for a moment when I first found and loaded his page before I blocked all JS from his domain. Not stealthy at all… Many nerd (like most of us lemmy users are) will instantly open devtools when a random page that’s supposed to be just text freezes the browser for a second.

        Like, c’mon man, setInterval with even 10 ms of delay would have made the attack both stealthier by not insta-freezing the brower on load, and more efficient by getting way more than 2000 request out of each reader…

        Also, their website seems to be down now :)

  • jestho@lemmy.zip
    link
    fedilink
    English
    arrow-up
    26
    arrow-down
    1
    ·
    7 hours ago

    I still don’t know what Tesseract is, but I take it’s not something I’d want to use.

    • Bluescluestoothpaste@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      8
      ·
      3 hours ago

      Took me like fifteen minutes of googling to realize it was a fucking lemmy viewing app, like whoopdefuckingdo, literally that shit could disappear tomorrow and it would take everyone two minutes to install another app and forget tesserola ever existed.

    • captainlezbian@lemmy.world
      link
      fedilink
      English
      arrow-up
      29
      ·
      edit-2
      6 hours ago

      It’s a regular solid consisting of equal length vertices at 90 degree angles across 4 dimensions

      Also a lemmy front-end that got too big for its britches

      • mushroommunk@lemmy.today
        link
        fedilink
        English
        arrow-up
        7
        ·
        5 hours ago

        Like they said, I’ve not got much uses for a Tesseract.

        It’s also a Marvel universe mcguffin that let’s you hop through time and space.

        Now a hypersphere…