Lemmy World outages

3 years ago by lwadmin to c/lemmyworld

Hello there!

It has been a while since our last update, but it's about time to address the elephant in the room: downtimes. Lemmy.World has been having multiple downtimes a day for quite a while now. And we want to take the time to address some of the concerns and misconceptions that have been spread in chatrooms, memes and various comments in Lemmy communities.

So let's go over some of these misconceptions together.

"Lemmy.World is too big and that is bad for the fediverse".

While one thing is true, we are the biggest Lemmy instance, we are far from the biggest in the Fediverse. If you want actual numbers you can have a look here: https://fedidb.org/network

The entire Lemmy fediverse is still in its infancy and even though we don't like to compare ourselves to Reddit it gives you something comparable. The entire amount of Lemmy users on all instances combined is currently 444,876 which is still nothing compared to a medium sized subreddit. There are some points that can be made that it is better to spread the load of users and communities across other instances, but let us make it clear that this is not a technical problem.

And even in a decentralised system, there will always be bigger and smaller blocks within; such would be the nature of any platform looking to be shaped by its members. 

"Lemmy.World should close down registrations"

Lemmy.World is being linked in a number of Reddit subreddits and in Lemmy apps. Imagine if new users land here and they have no way to sign up. We have to assume that most new users have no information on how the Fediverse works and making them read a full page of what's what would scare a lot of those people off. They probably wouldn't even take the time to read why registrations would be closed, move on and not join the Fediverse at all. What we want to do, however, is inform the users before they sign up, without closing registrations. The option is already built into Lemmy but only available on Lemmy.ml - so a ticket was created with the development team to make these available to other instance Admins. Here is the post on Lemmy Github.

Which brings us to the third point:

"Lemmy.World can not handle the load, that's why the server is down all the time"

This is simply not true. There are no financial issues to upgrade the hardware, should that be required; but that is not the solution to this problem.

The problem is that for a couple of hours every day we are under a DDOS attack. It's a never-ending game of whack-a-mole where we close one attack vector and they'll start using another one. Without going too much into detail and expose too much, there are some very 'expensive' sql queries in Lemmy - actions or features that take up seconds instead of milliseconds to execute. And by by executing them by the thousand a minute you can overload the database server.

So who is attacking us? One thing that is clear is that those responsible of these attacks know the ins and outs of Lemmy. They know which database requests are the most taxing and they are always quick to find another as soon as we close one off. That's one of the only things we know for sure about our attackers. Being the biggest instance and having defederated with a couple of instances has made us a target.  

"Why do they need another sysop who works for free"

Everyone involved with LW works as a volunteer. The money that is donated goes to operational costs only - so hardware and infrastructure. And while we understand that working as a volunteer is not for everyone, nobody is forcing anyone to do anything. As a volunteer you decide how much of your free time you are willing to spend on this project, a service that is also being provided for free.

We will leave this thread pinned locally for a while and we will try to reply to genuine questions or concerns as soon as we can.

kadu 1031 points 3 years ago

What I find most ridiculous about people claiming lemmy.world is too big and therefore bad for the Fediverse is simply... Have you people wondered why it got so big?

During the crucial first weeks of the Reddit migration, the single time period with the most chance of bringing new users, pretty much all larger Lemmy instances closed their registrations - they couldn't handle the influx. Other big ones decided to immediately defederate everybody, they were afraid of having to moderate content. And a few did remain open and federated, but they were also extremely niche and focused on their own political side of the spectrum.

Lemmy.world however remained open, remained with active admins that helped the first moderators, and kept upgrading the server at a very fast rate - you might forget it now, but Lemmy was massively slow and frustrating and then a new Lemmy.world update would drop and it would feel like a different website.

So yeah, "bad for the Fediverse" for being the only instance that kept up with the demand at the most necessary time.

Thanks Lemmy.world team.

path: 0 2244187, hotness: undefined, score: 1031, children: 41
sadbehr 212 points 3 years ago

Damn I never thought about that. Lemmy.world has been a rock. And a transparent one at that, I love it.

path: 0 2244187 2245119, hotness: undefined, score: 212, children: 5
mcesh 65 points 3 years ago

So, a diamond 💎

path: 0 2244187 2245119 2260238, hotness: undefined, score: 65, children: 3
Blaster_M 11 points 3 years ago

🫴💎

path: 0 2244187 2245119 2260238 2279094, hotness: undefined, score: 11, children: 0
Mongoose21 1 point 3 years ago

“We’re rich!”^65,535

path: 0 2244187 2245119 2260238 2417131, hotness: undefined, score: 1, children: 1
Blaster_M 1 point 3 years ago

"We're rich!" 🧔🏼‍♂️📱👉💰👈📱🧔 "We're rich!"

"We're rich!" 🧔🏿‍♀️📱☝️ 👆📱🧔🏽‍♂️ "We're rich!"

path: 0 2244187 2245119 2260238 2417131 2557622, hotness: undefined, score: 1, children: 0
samus12345 40 points 3 years ago

Something about living long enough and becoming the villain...

EDIT: Phew, my age is showing trying to use a meme phrase! This didn't convey what I intended. I meant to say that .world has been unfairly vilified by some. Will be more judicious in using this phrase in the future!

path: 0 2244187 2245119 2245780, hotness: undefined, score: 40, children: 0
capt_wolf 83 points 3 years ago

I'm convinced now that people saying something is "Bad for the fediverse" is just their ignorance and xenophobia showing.

Look at the shitposting or lemmy memes going around and you'll see a lot of people are actually afraid of users coming from reddit and spoiling the experience here.

I'm sure others don't want us growing because, consciously or unconsciously, they won't have as much traction or get as much attention. More people means you have less of a voice.

We can't argue about federation on the net, avoiding corporate control, or whatever while sticking our hand out and stopping people from joining. It just doesn't work that way.

People complaining about the size of a social media platform are missing the point of a social media platform...

path: 0 2244187 2245945, hotness: undefined, score: 83, children: 3
Countmacula 49 points 3 years ago

It upsets me that people can't understand this. Lemmy was getting hit like crazy. Even through all that, it was better than reddit. I adore lemmy and the .world admins. I seriously can't wait to see it grow.

path: 0 2244187 2248031, hotness: undefined, score: 49, children: 0
samus12345 40 points 3 years ago

And besides closing registrations, many others required that you request it, then wait for approval. Of course most went with the path of least resistance - I know I did (using an alt account now because of the DDOS attacks).

path: 0 2244187 2244958, hotness: undefined, score: 40, children: 11
sfgifz 74 points 3 years ago

Aahh please write an essay about why you'd like to join our server and why you chose your username. Who tf wants to go through a casting couch for an app you'll use while taking a dump?

path: 0 2244187 2244958 2246150, hotness: undefined, score: 74, children: 10
samus12345 22 points 3 years ago

Yeah, really. I get why some instances want to be selective, but it was a bit jarring to me just how many were when I was looking for a way to try Lemmy out.

path: 0 2244187 2244958 2246150 2246296, hotness: undefined, score: 22, children: 0
canis_majoris 13 points 3 years ago

It literally takes ten seconds and it's an easy way to filter out bots.

lemmy.ca had semi-closed invites and I just wrote that I was migrating away from reddit and wanted to join a local instance as a Canadian. It was like two sentences and I got approved in under an hour.

path: 0 2244187 2244958 2246150 2246763, hotness: undefined, score: 13, children: 3
sfgifz 13 points 3 years ago

Sure, you're not wrong. But a ton of genuine users are simply checking out what this Lemmy thing is at this stage, and asking them to elaborate why they want to be here, even if in a few lines, is going to turn them away. Instances should be allowed to enforce this if they want, I just think there should be a way for users to quickly find a less restrictive instance. This is what turned me away from Lemmy in my early attempt to use it - I just wanted to check it out on whim and was told there's a manual approval.

I don't even agree that this is a good way to keep out bad bots. We already have farms where you just hire someone in a country with cheap labor to just create accounts all day.

path: 0 2244187 2244958 2246150 2246763 2258960, hotness: undefined, score: 13, children: 0
GreyEyedGhost 9 points 3 years ago

My experience exactly.

path: 0 2244187 2244958 2246150 2246763 2247289, hotness: undefined, score: 9, children: 1
anon6789 13 points 3 years ago

Everyone complaining about the Beehaw registration is what got me to check it out.

It was certainly not an "essay," just pretty much a paragraph saying I'm not a bot or troll and in a few minutes I was approved. This was maybe 2 weeks after the Reddit protest, so it may have been worse initially, but my signup was painless.

I have a few accounts to see how the first few months will go with defederations go, but most instances I go to look much the same at this point. I like the feel of Beehaw best and I'd say it's my primary right now, but the defederation and signup does seem to have slowed growth.

World is my second most used, and I still check out new instances, but between those 2 the majority of my needs are covered right now. I think it's cool you can get different "flavors" of Lemmy, so everyone doesn't have to like all the instances, but most of them seen to play well together.

I just don't understand the need to rip on the ones doing things differently when that is one of the features of the Fediverse. I don't even like seeing people trash EH or LG because it's free advertising to new people they exist. I don't want to see feeds listed with their names, and the complaining is just an attraction to people who actually want that garbage.

path: 0 2244187 2244958 2246150 2250595, hotness: undefined, score: 13, children: 0
qaz 6 points 3 years ago

Especially if you have no clue what it’s about and just want to check it out

path: 0 2244187 2244958 2246150 2249401, hotness: undefined, score: 6, children: 0
Rootiest 4 points 3 years ago

Weird, I just wrote something like:

I left reddit for Lemmy and am experimenting with different instances. I felt I agreed with the philosophy here and wanted to create an account

path: 0 2244187 2244958 2246150 2258367, hotness: undefined, score: 4, children: 0
EssentialCoffee 2 points 3 years ago

Honestly, my instance had that, and was also going through downtime growing pains from the influx of users, so I had to submit multiple times.

'I'm from Reddit trying to find a new home' and 'I like coffee' are not what I'd call an essay or a casting couch personally, but to each their own.

path: 0 2244187 2244958 2246150 2271390, hotness: undefined, score: 2, children: 0
jarfil -1 points 3 years ago

If you call a couple sentences "an essay"... what are you even doing writing "essays" in random comments while taking a dump?

path: 0 2244187 2244958 2246150 2328436, hotness: undefined, score: -1, children: 0
BrisaLuna 25 points 3 years ago

Now you put it that way, thank you lemmy world. I probably wouldn't migrate out of R itself if I didn't see your site and made it look familiar. Transition had been easy for me and now, I barely go back there unless via libreddit.

path: 0 2244187 2245899, hotness: undefined, score: 25, children: 4
dragontamer 12 points 3 years ago path: 0 2244187 2245899 2247109, hotness: undefined, score: 12, children: 3
BrisaLuna 13 points 3 years ago

Yep, even now. I had a really hard time (mentally) doing the transfer before, until I stumbled upon old LW. Still on this format, tbh, it's just more compact for me. I'm thinking that other lazier / lurkier users might get encouraged to make the jump if the place is familiar to what they will leave behind. Of course, there is still a learning curve, but since everything looked a little bit like the old R, it was intuitive enough for me.

I'm forced to shift to the usual formatting when I have to switch to sh.itjust.works because of the downtime, but when i go back to lemmy.world, it's always on the old format mode.

And I am a bit talkative here, as I read that lurking doesn't really help the fediverse. Wish I can contribute in a more intellectual content-making kind of way, but as I don't have expertise (only interest), my only contribution is to add activity.

path: 0 2244187 2245899 2247109 2248115, hotness: undefined, score: 13, children: 2
gears 6 points 3 years ago

old.lemmy.world is just running mlmym, btw. There is another one running at mlmym.org, where you can use any instance. Or you can run the software yourself if desired.

path: 0 2244187 2245899 2247109 2248115 2250979, hotness: undefined, score: 6, children: 1
PaulDevonUK 23 points 3 years ago

292 instances listed for the first 9 days this month! That's over 33 per day.

You guys are in the middle of a huge battle. I wish I could assist but it's outside my experience.

path: 0 2244187 2247743, hotness: undefined, score: 23, children: 0
KrisND 15 points 3 years ago

Could not be stated any better.

path: 0 2244187 2251344, hotness: undefined, score: 15, children: 0
TheAndrewBrown 5 points 3 years ago

I definitely think the lemmy.world admins have done everything right so far. I’m not sure if there are actually people saying it’s bad for the fediverse but the sentiment I see is that consolidating onto one instance causes you to lose some of the benefits of decentralization. At this point, there are plenty of general instances with open registrations that aren’t experiencing these attacks so it’s best for at least some people on lemmy.world to try to migrate to another instance. For one thing, that persons experience will be better since they won’t see as much downtime anymore, but more importantly it makes lemmy.world less of a target since these attacks are meant to affect as many people as they can. It’ll probably always be one of the biggest instances but the person might decide it’s not worth their time anymore if enough people move to other instances that they’re affecting a small percentage of the whole Lemmy population.

path: 0 2244187 2248193, hotness: undefined, score: 5, children: 1
marmo7ade 3 points 3 years ago
path: 0 2244187 2246711, hotness: undefined, score: 3, children: 6
SocialMediaRefugee 2 points 3 years ago

This is one of those "crisis of opportunity" moments. We're witnessing the start of something new.

path: 0 2244187 2377293, hotness: undefined, score: 2, children: 0
Biodroid 1 point a year ago

I'm here 2025 may 9 loving the Fediverse. Reddit.com is still there.... but so are we.

I wish I could be more but I am a lurker My apologise

path: 0 2244187 16949067, hotness: undefined, score: 1, children: 0
eek2121 365 points 3 years ago

Have you guys contacted law enforcement? It may surprise you. A startup I worked for had the same issue and contacted the FBI. They were able to quickly (within hours) find the person doing it despite him using VPNs and other tools for OpSec.

path: 0 2241622, hotness: undefined, score: 365, children: 82
Lemmylefty 87 points 3 years ago

I’d imagine that there are a lot of users and communities on here that want law enforcement as far away from the Fediverse as possible…

path: 0 2241622 2241905, hotness: undefined, score: 87, children: 52
Pips 223 points 3 years ago

And yet, and this will shock and amaze you, they're probably here already. Lemmy isn't a secret.

path: 0 2241622 2241905 2242663, hotness: undefined, score: 223, children: 5
HR_Pufnstuf 14 points 3 years ago

Found the fed… ;)

path: 0 2241622 2241905 2242663 2245147, hotness: undefined, score: 14, children: 0
Lemmylefty 6 points 3 years ago

No doubt, but there’s a difference between a van trundling down the street and a welcome mat and a tray of tea cooling in the living room.

path: 0 2241622 2241905 2242663 2243074, hotness: undefined, score: 6, children: 3
Pips 22 points 3 years ago

I get you. There's good and bad in law enforcement, especially when it comes to tech and social media. On the one hand, there's pretty serious crime happening online that needs to be stopped. On the other, wild invasions of privacy. There's no easy answer at this point and governments obviously won't police themselves.

path: 0 2241622 2241905 2242663 2243074 2243426, hotness: undefined, score: 22, children: 2
JJROKCZ 29 points 3 years ago

I assure you that the FBI knew of lemmy and had watchers here before we hit 5 digit user numbers

path: 0 2241622 2241905 2245491, hotness: undefined, score: 29, children: 3
GuyDudeman -5 points 3 years ago

Knowing someone in the FBI and how they talk about how antiquated it is, I have to vehemently disagree with you there.

path: 0 2241622 2241905 2245491 2246733, hotness: undefined, score: -5, children: 2
Enigma 8 points 3 years ago

I’m just curious, antiquated in what aspect?

path: 0 2241622 2241905 2245491 2246733 2248089, hotness: undefined, score: 8, children: 1
YoBuckStopsHere 17 points 3 years ago

I hate to break the illusion but cybersecurity experts already know about every Fediverse instance and it gets scanned regularly. Just like they do discord, FB, twitter, etc.

path: 0 2241622 2241905 2246803, hotness: undefined, score: 17, children: 0
passably9 11 points 3 years ago
path: 0 2241622 2241905 2242013, hotness: undefined, score: 11, children: 0
lom 8 points 3 years ago

Lemmy isn't a private space. It's less private than Reddit in many regards.

I don't see why when illegal things are happening the government's offered services shouldn't be made use of

path: 0 2241622 2241905 2277426, hotness: undefined, score: 8, children: 0
SocialMediaRefugee 3 points 3 years ago

We'll just have to nicely ask the ddos'ers to stop it then

path: 0 2241622 2241905 2377313, hotness: undefined, score: 3, children: 0
Pratai 3 points 3 years ago
path: 0 2241622 2241905 2248902, hotness: undefined, score: 3, children: 0
MindSkipperBro12 1 point 3 years ago

The Feds are everywhere son

path: 0 2241622 2241905 2251086, hotness: undefined, score: 1, children: 1
thedrivingcrooner 10 points 3 years ago

Well.. this is the fediverse after all.

path: 0 2241622 2241905 2251086 2266839, hotness: undefined, score: 10, children: 0
gabe -38 points 3 years ago

The risk that would create for vulnerable communities on here would deeply irresponsible.

path: 0 2241622 2241905 2242172, hotness: undefined, score: -38, children: 34
glorious_albus 69 points 3 years ago

Right. Because FBI doesn't already monitor any suspicious activity.

path: 0 2241622 2241905 2242172 2242460, hotness: undefined, score: 69, children: 15
turtlepower 32 points 3 years ago
path: 0 2241622 2241905 2242172 2242460 2242888, hotness: undefined, score: 32, children: 0
gabe -18 points 3 years ago

They fuck with left leaning groups and try to intentionally destabilize them 🤷‍♂️

path: 0 2241622 2241905 2242172 2242460 2243785, hotness: undefined, score: -18, children: 13
DogMuffins 5 points 3 years ago

I don't understand.

path: 0 2241622 2241905 2242172 2242540, hotness: undefined, score: 5, children: 5
gabe -15 points 3 years ago

As I said above, The FBI is known to infiltrate left leaning political organizations to fuck with them.

path: 0 2241622 2241905 2242172 2242540 2243775, hotness: undefined, score: -15, children: 4
CoffeeGrounds 0 points 3 years ago

Oh no! Won't anyone think of the criminals!?

path: 0 2241622 2241905 2242172 2244285, hotness: undefined, score: 0, children: 3
SpaceNoodle -4 points 3 years ago

First, they came for ...

path: 0 2241622 2241905 2242172 2244285 2244705, hotness: undefined, score: -4, children: 2
anolemmi -25 points 3 years ago

Sounds like you and lefty are concerned with protecting illegal activity here? Fuck that. I’m not okay with Lemmy being a hub for society’s most trash individuals.

path: 0 2241622 2241905 2242172 2243461, hotness: undefined, score: -25, children: 7
MutilationWave 22 points 3 years ago

I believe it's a mistake to conflate law-abiding with morally correct. In fact, in some cases the morally correct thing to do is disobey the law.

path: 0 2241622 2241905 2242172 2243461 2243815, hotness: undefined, score: 22, children: 3
Lemmylefty 14 points 3 years ago

This isn’t 8chan, and I have no wish to see it emulate it. Revenge porn, CSAM, stalking and harassment: that absolutely should be kicked off and reported.

But if you can’t imagine a scenario where a left leaning, privacy focused userbase might look at willingly going to law enforcement without the above issues and balk, you need to review your history.

path: 0 2241622 2241905 2242172 2243461 2244548, hotness: undefined, score: 14, children: 0
gabe 9 points 3 years ago

That's not what we were implying remotely. The FBI is known to infiltrate left leaning political organizations to fuck with them. Obviously if someones hosting violence or CP or shit like that that'd awful and they need to be arrested, but I was specifying specifically about the FBIs history with fucking up political groups and forums

path: 0 2241622 2241905 2242172 2243461 2243769, hotness: undefined, score: 9, children: 1
SuddenDownpour 66 points 3 years ago

Have you guys contacted law enforcement?

Given that the goal of this instance is to serve as a reference of the Fediverse, it is expected that it will continue to grow, and in turn, attract more attention, which due to a game of numbers also involves more trolls and enemies. Thus, the fact that the instance is being DDOS'ed right now shouldn't be seen as a conjunctural problem, but rather a challenge that is here to stay and sometimes be a problem.

While I think it's a good idea for lemmy.world to do it this time, relying on a police force to routinely come to our call and do something means periods during which the instance will be out while we wait for them for work. The instance, and Lemmy in general, should have more robust defenses so that calling for external help is only required at exceptional times.

path: 0 2241622 2243175, hotness: undefined, score: 66, children: 0
someguy3 25 points 3 years ago

Did it result in charges for the person doing it?

For this, I want to see the motivation for DDOSing Lemmy lol.

path: 0 2241622 2242175, hotness: undefined, score: 25, children: 27
gabe 61 points 3 years ago

There was a user who made hundreds of communities and got pissy when they were banned, there's heavy speculation that it's them.

path: 0 2241622 2242175 2242308, hotness: undefined, score: 61, children: 22
meldroc 40 points 3 years ago

That, or it could be right-wing neo-nazi chuds from the detonating-craniums instance that are butthurt that nobody wants to federate with them.

path: 0 2241622 2242175 2242308 2242882, hotness: undefined, score: 40, children: 3
gabe 4 points 3 years ago

Maybe a mix of both?

path: 0 2241622 2242175 2242308 2242882 2244481, hotness: undefined, score: 4, children: 0
Fried_out_Kombi 2 points 3 years ago

Or hexbear, the tankie equivalent of those chuds. Terminally online, and a lot of them have been on the fediverse for a while, ever since r/chapotraphouse got the banhammer on reddit. They got real mad when lemmy.world defederated from them the other day.

path: 0 2241622 2242175 2242308 2242882 2277206, hotness: undefined, score: 2, children: 1
jungekatz 32 points 3 years ago

Could be reddit , hiring people to kill the competition 😅 (jk)

path: 0 2241622 2242175 2242308 2242598, hotness: undefined, score: 32, children: 8
turtlepower 29 points 3 years ago
path: 0 2241622 2242175 2242308 2242598 2242907, hotness: undefined, score: 29, children: 0
MudSkipperKisser 2 points 3 years ago

This was honestly my first thought. Highly unlikely I’m sure but they’re not winning any awards for good decisions lately

path: 0 2241622 2242175 2242308 2242598 2261810, hotness: undefined, score: 2, children: 0
Blamemeta -8 points 3 years ago

Happened to voat everytine Pao did something. Part of why it failed.

path: 0 2241622 2242175 2242308 2242598 2243289, hotness: undefined, score: -8, children: 5
ComptitiveSubset 2 points 3 years ago

Could be the instance with the raving tankies that was defederated.

path: 0 2241622 2242175 2242308 2244398, hotness: undefined, score: 2, children: 1
VolatileExhaustPipe 0 points 3 years ago
path: 0 2241622 2242175 2242308 2244398 2246525, hotness: undefined, score: 0, children: 0
DogMuffins -3 points 3 years ago

Someone creating heaps of communities just to be a mod and then getting pissy about it doesn't sound like someone with the skills to run a DDOS attack.

path: 0 2241622 2242175 2242308 2242608, hotness: undefined, score: -3, children: 6
gabe 31 points 3 years ago

They had nearly a thousand communities after joining, like an inhuman amount that wouldn't have been possible without scripting.

path: 0 2241622 2242175 2242308 2242608 2242610, hotness: undefined, score: 31, children: 0
Draconic_NEO 25 points 3 years ago

DDoS isn't a high skill attack by any means, they could have also hired somebody else to do it for them (there are some really big losers out there who will waste money on something like that).

path: 0 2241622 2242175 2242308 2242608 2243152, hotness: undefined, score: 25, children: 0
WeirdGoesPro 17 points 3 years ago

Never underestimate the pettiness of the u/gallowboobs of the world.

path: 0 2241622 2242175 2242308 2242608 2243072, hotness: undefined, score: 17, children: 2
scytale 10 points 3 years ago

They could pay for someone to do it. They also most likely created all those communities with a script, so they're not your average user.

path: 0 2241622 2242175 2242308 2242608 2243117, hotness: undefined, score: 10, children: 0
Pips 16 points 3 years ago

You don't need motive to convict. Just the correct mental state (mens rea) and the commission of the relevant elements (actus reus). Motive helps, but it's not necessary.

But a DDOS attack would probably fall under the CFAA, possibly some other criminal statutes depending on the facts.

path: 0 2241622 2242175 2242752, hotness: undefined, score: 16, children: 2
someguy3 8 points 3 years ago

I know, I just want to know what the motive is.

path: 0 2241622 2242175 2242752 2243292, hotness: undefined, score: 8, children: 1
girlfreddy 4 points 3 years ago

"Vengence is mine!" sayeth the gallowboob.

path: 0 2241622 2242175 2242752 2243292 2243885, hotness: undefined, score: 4, children: 0
eek2121 4 points 3 years ago

Yes criminal charges were brought against them. I don’t know what happened beyond that, however. It got pretty quiet once evidence was collected and the attack stopped.

path: 0 2241622 2242175 2249336, hotness: undefined, score: 4, children: 0
Lemmylefty 245 points 3 years ago

In all seriousness, we all appreciate your work. These are the growing pains that are to be expected, and your hard work and transparency (and writing it up at a level that even I can understand) is welcome.

path: 0 2242110, hotness: undefined, score: 245, children: 0
SloppyPuppy 202 points 3 years ago

Im a data engineer with 20+ years of experience in sql and various databases, I do performance tuning on daily basis. How can I help? Please message me if you think you can use me. Id be very happy to help where I can!

path: 0 2245032, hotness: undefined, score: 202, children: 15
ComptitiveSubset 157 points 3 years ago

Besides the actual developers of lemmy, none has done more for the lemmiverse than the maintainers of lemmy.word. When the Reddit shitstorm started and other leading servers shut down user registration, you guys held the ship steady and didn’t flinch from the sudden flood of new users. Discovering new bottle-necks in lemmy code, helping to resolve them and deploying hot fixes. All in super fast reaction time. About “lemmy.world shouldn’t be largest server” crap - it’s good for lemmy that one server is the easy entry point to lemmy. This is where the “mainstream” communities could/should be and new users will have an easier landing. Having dedicated servers with their own communities (like start trek, piracy, etc) is great but it’s not mandatory for all communities.

path: 0 2244332, hotness: undefined, score: 157, children: 12
Weylandyuta 156 points 3 years ago

Thanks for the hard work y'all. I wonder what point of badgering a free social server is?

path: 0 2241372, hotness: undefined, score: 156, children: 32
OverfedRaccoon 148 points 3 years ago

There's always someone that gets joy from ruining things for others.

path: 0 2241372 2241463, hotness: undefined, score: 148, children: 17
expatriado 32 points 3 years ago

~10 ago i got all my coments and posts downvoted 25-50 points each, even one comment that was on a deleted thread. that didn't stop me for continue participating, but it shouldn'tbe that easy for someone to do that

path: 0 2241372 2241463 2241975, hotness: undefined, score: 32, children: 15
antik 29 points 3 years ago

I don't see it in your history? If you want contact me via PM - send me the posts and comments and I'll have a look.

path: 0 2241372 2241463 2241975 2242365, hotness: undefined, score: 29, children: 10
expatriado 20 points 3 years ago

All my comments and posts dated July 31 and before got downvoted in matter of minutes, the quantity each got varied but it was proportional to the upvotes it already had, up to -32 (not 50), my total comments points became -540 and post -70 . I don't care getting all my comments and posts downvoted like that, so I never complained, but I thought I would let you know since it is related to the topic of the this thread.

path: 0 2241372 2241463 2241975 2242365 2242949, hotness: undefined, score: 20, children: 8
Gullible 5 points 3 years ago path: 0 2241372 2241463 2241975 2242365 2248919, hotness: undefined, score: 5, children: 0
Lemmylefty 11 points 3 years ago

There’s someone who downvotes every post and comment on cat pictures. It’s like clockwork. It’s kind of funny.

path: 0 2241372 2241463 2241975 2245164, hotness: undefined, score: 11, children: 3
antik 30 points 3 years ago

Everyone, check your dog's smartphone!

path: 0 2241372 2241463 2241975 2245164 2245277, hotness: undefined, score: 30, children: 1
YoBuckStopsHere 5 points 3 years ago

The dog bot

path: 0 2241372 2241463 2241975 2245164 2247637, hotness: undefined, score: 5, children: 0
fugepe -3 points 3 years ago

I know that fucking person

spoiler

its me

path: 0 2241372 2241463 2244267, hotness: undefined, score: -3, children: 0
aaaa 76 points 3 years ago

My first guess: it's someone who complained on GitHub about unoptimized queries and didn't get the response they wanted. Of course I would expect them to be attacking lemmy.ml in that case

My conspiracy theory: it's someone paid by a marketing firm on Reddit's payroll, while probably not under direction from Reddit, they're working to further Reddit's goals

Most likely: it's some kiddie who got banned from .world and wants to show everyone how mad he is

path: 0 2241372 2241561, hotness: undefined, score: 76, children: 2
thedrivingcrooner 3 points 3 years ago

What if it's all three lol

path: 0 2241372 2241561 2266930, hotness: undefined, score: 3, children: 1
loklan 1 point 3 years ago

Probably, this is the standalone complex clusterfuck the internet has become.

path: 0 2241372 2241561 2266930 2288410, hotness: undefined, score: 1, children: 0
tinkeringidiot 20 points 3 years ago

Feeling like an internet tough guy.

path: 0 2241372 2241540, hotness: undefined, score: 20, children: 1
girlfreddy 1 point 3 years ago

I hear it's the only way they can get hard.

path: 0 2241372 2241540 2243924, hotness: undefined, score: 1, children: 0
Vub 15 points 3 years ago

I don’t know the details but wasn’t one of the instances that Lemmy World defederated recently one that contained lots of toxic shit (racism, trolling and other not cool content)? So it’s not unlikely someone from there decided to just destroy things for others. Maybe even an operator since the person(s) obviously has knowledge of how Lemmy works.

path: 0 2241372 2242015, hotness: undefined, score: 15, children: 3
xthedeerlordx 15 points 3 years ago
path: 0 2241372 2242015 2242518, hotness: undefined, score: 15, children: 1
mashbooq 7 points 3 years ago

Definitely Hexbear; they have their own fork of Lemmy's code, so they have the technical expertise, and they hate anyone who doesn't subscribe to their color of fascism.

path: 0 2241372 2242015 2242518 2242985, hotness: undefined, score: 7, children: 0
assassin_aragorn 4 points 3 years ago

Yeah that's my guess too. The timing lines up perfectly

path: 0 2241372 2242015 2243309, hotness: undefined, score: 4, children: 0
mo_ztt 8 points 3 years ago

This is just going by random speculation as to who might have been defederated from and decided to attack a high-profile target in response... but if my speculation is accurate, they also seem fine with all kinds of real-world violence against their enemies. The purpose is to "punish", and the innocence of the target isn't a factor.

path: 0 2241372 2243016, hotness: undefined, score: 8, children: 0
HelloHotel 5 points 3 years ago

Some group calling themselves communist but acting like narcicists. hexbear i think. Harradsing a general instance because we felt they were incompatable. I randomly had someone on hexbear attempt to derail the conversation

path: 0 2241372 2242726, hotness: undefined, score: 5, children: 1
A_A 1 point 3 years ago

Yes, most likely. Cheers 😄 !
::: spoiler typo ... Harradsing - - - >>> Harassing :::

path: 0 2241372 2242726 2243878, hotness: undefined, score: 1, children: 0
Ensign_Crab 4 points 3 years ago

If I had to guess, I'd say that I doubt the people who defaced lemmy.world gave up once control was wrested back.

If the material they defaced the site with is any indication, it's bigots and fascists.

path: 0 2241372 2251539, hotness: undefined, score: 4, children: 0
Royal_Bitch_Pudding 2 points 3 years ago
path: 0 2241372 2241650, hotness: undefined, score: 2, children: 0
Machinist 139 points 3 years ago

Y'all are motherfucking gangsters. Appreciate the work you're putting in. I don't do your kind of code or I'd pitch in. Much love. ♥️

path: 0 2250123, hotness: undefined, score: 139, children: 0
gameboyhomeboy 127 points 3 years ago

Imagine having the free time to engineer attacks on a site. Fucking loser.

path: 0 2244221, hotness: undefined, score: 127, children: 10
Thrawne 101 points 3 years ago

I couldnt care less. You provide a great forum at no charge to me. I thank yoy for your contribution to discourse, communication with the community, and look forward to the growth of lemmy.world

path: 0 2268440, hotness: undefined, score: 101, children: 3
gndagreborn 91 points 3 years ago

Thanks for being so transparent with us. Lemmy really does feel like home now to me. I wish the maintainers all the best as they continue to fight the forces of evil.

path: 0 2259694, hotness: undefined, score: 91, children: 0
Octavio 88 points 3 years ago
path: 0 2275916, hotness: undefined, score: 88, children: 2
ekZepp 87 points 3 years ago

path: 0 2256831, hotness: undefined, score: 87, children: 0
sma3in 77 points 3 years ago

usually my reaction when a website I visit daily goes down is to probably visit that website less or think the backend team behind it is lazy. but when lemmy.world goes down or is under attack, I sympathize and just open it when it's back up. y'all prove that you're hardworking by providing clear communication and explanation on what's happening everytime. shout out lemmy team, you deserve the world!!

path: 0 2251784, hotness: undefined, score: 77, children: 0
Bak 77 points 3 years ago

Thank you for your work 🫡

path: 0 2249120, hotness: undefined, score: 77, children: 0
AtHeartEngineer 73 points 3 years ago
path: 0 2241535, hotness: undefined, score: 73, children: 5
raspberry_confetti 53 points 3 years ago

Definitely need to pay themselves. Doing this for free is not sustainable over long periods.

path: 0 2241535 2242137, hotness: undefined, score: 53, children: 2
Nurgle 12 points 3 years ago

I’m more than okay with the old Jimmy Wales treatment once or twice a year.

path: 0 2241535 2242137 2242683, hotness: undefined, score: 12, children: 1
TheGreenGolem 1 point 3 years ago

They should take the Kennedy package at their local dive bar every Friday.

path: 0 2241535 2242137 2242683 2246929, hotness: undefined, score: 1, children: 0
p0ppe 6 points 3 years ago

I would be happy to support a special fundraiser to get the admins some beers.

path: 0 2241535 2247516, hotness: undefined, score: 6, children: 0
VolatileExhaustPipe -1 points 3 years ago
path: 0 2241535 2246590, hotness: undefined, score: -1, children: 0
Ton 72 points 3 years ago

Great stuff, thank you for all the good work.

btw, as a tip: please resize https://lemmy.world/... in an image editor. It's on the homepage, and it's a frikking 4.5 megabyte image file.

path: 0 2264051, hotness: undefined, score: 72, children: 3
Ryan213 72 points 3 years ago

Have you guys tried NOT getting attacked? Might work.

Seriously, thanks for all your effort!

path: 0 2251371, hotness: undefined, score: 72, children: 0
Katana314 71 points 3 years ago

Have you heard of something called The Cloud? It sounds possible this will solve all of our issues!

(/s in case it's not terribly obvious.)

path: 0 2250977, hotness: undefined, score: 71, children: 8
Dark_Arc 70 points 3 years ago

Thanks for the update and the hard work behind the scenes to keep things online!

path: 0 2241458, hotness: undefined, score: 70, children: 0
BonesOfTheMoon 67 points 3 years ago

What else can we do to help Lemmy.world besides donate?

path: 0 2249601, hotness: undefined, score: 67, children: 9
Anonymousllama 65 points 3 years ago

Cheers for the good work guys

path: 0 2251898, hotness: undefined, score: 65, children: 0
stealthnerd 62 points 3 years ago

If you think it might help I've got a bit of a hack I've used in the past to cache a sql database in a compressed ramdisk using zram and bcache. Imagine stuffing a 50G DB into 20G of memory.

It won't fix the inefficient SQL queries but it would make it so frequently accessed tables get cached in a ram disk cutting query time significantly.

This might be enough to reduce the impact of these attacks until queries can be optimized.

This assumes your database isn't running on something like RDS though.

path: 0 2258192, hotness: undefined, score: 62, children: 4
BrianTheeBiscuiteer 57 points 3 years ago

I'm sure they don't want to reveal to much but I'm curious if the attackers were authenticated. If not it seems reasonable to rate limit anonymous users.

path: 0 2254615, hotness: undefined, score: 57, children: 2
Guster 57 points 3 years ago

Love this transparency post and info, much appreciated

path: 0 2254165, hotness: undefined, score: 57, children: 1
solrize 57 points 3 years ago

I have to wonder why expensive SQL queries in Lemmy operations even exist. As Lemmy scales, won't those queries get executed more often just as part of normal operation? That would say to me that the Lemmy software needs optimization. Otherwise there will be scaling issues even if the attacks stop.

path: 0 2247831, hotness: undefined, score: 57, children: 22
darthsid 57 points 3 years ago

Ah so the Lemmy World server isn’t a Raspberry Pie? Nice.

path: 0 2260848, hotness: undefined, score: 57, children: 4
alaxitoo 53 points 3 years ago

I found that LMAO/Angled (guy who was angry about being banned for community name squatting) has a YouTube that does techy stuff, he's always in the back of my mind as someone who could be contributing to the DDoS, total speculation though but the threat of "ruining your site" and then coming back to spam the trending communities with spam makes me suspicious lol

path: 0 2253209, hotness: undefined, score: 53, children: 5
AnotherPerson 52 points 3 years ago

Thanks for all you guys do! While the lack of reliability can be frustrating your efforts do not go unnoticed. Thanks again.

path: 0 2241472, hotness: undefined, score: 52, children: 0
atretador 49 points 3 years ago

Cmon half the users here are tech nerds, get to work you lazy bastards, I'll be there as soon as I close this sprint--

path: 0 2255409, hotness: undefined, score: 49, children: 3
raspberry_confetti 46 points 3 years ago

They are inadvertently helping Lemmy become more robust

path: 0 2242106, hotness: undefined, score: 46, children: 2
devious 8 points 3 years ago

Yes! Same goes for those saying "Lemmy.world is too big". Having a large instance is good real world case for addressing scaling issues that might impact more and more instances as the overall Fediverse grows.

In the future a small Lemmy instance may be the size of today's Lemmy.world.

path: 0 2242106 2250826, hotness: undefined, score: 8, children: 0
Redtitwhore 1 point 3 years ago

I was just thinking it could be someone with that goal in mind. Better to fix this stuff now.

path: 0 2242106 2287237, hotness: undefined, score: 1, children: 0
nieceandtows 44 points 3 years ago

Hopefully all the attacks you guys endure end up helping lemmy patch those attack vectors and make lemmy an overall safer and more robust place.

path: 0 2241686, hotness: undefined, score: 44, children: 0
CanadianNomad 43 points 3 years ago
path: 0 2273054, hotness: undefined, score: 43, children: 4
bennysp 42 points 3 years ago

Thank you for the update. Good work.

path: 0 2257557, hotness: undefined, score: 42, children: 0
Rambler 42 points 3 years ago

A fantastic job is being done by you folks - obviously in the face of adversity. Given the amount of users on the instance is at a critical point, would it not be possible to 'move' accounts off it onto other less populated instances ?

Keep up the great work folks - I sympathise for ya.

path: 0 2265861, hotness: undefined, score: 42, children: 2
Jimmycakes 42 points 3 years ago

Take your time bros I don't need this shit 24/7 the downtime is fine and expected

path: 0 2275887, hotness: undefined, score: 42, children: 0
WhoRoger 40 points 3 years ago

I was wondering why the CloudFlare protection doesn't work, this makes sense. Does CF have any point then? Lots of people don't like it.

It's weird someone would spend so much time to target LW. Ah well.

path: 0 2256121, hotness: undefined, score: 40, children: 5
feedum_sneedson 40 points 3 years ago

I guess it's that guy who said he was going to break the site. Remember that guy? Something about not being allowed to open loads of communities or something.

path: 0 2243168, hotness: undefined, score: 40, children: 1
DrQuint 3 points 3 years ago

Lemmy getting "one guy"-d is such a story, and I do believe it. Petty assholes doing shit has hapenned a couple times, hell, just this week, Valve had to basically nuke half their Dota 2 Arcade because one guy started filing GDPR complaints after he *checks notes* didn't get a stupid discord icon. It's always like this. The "one guy" always has the dumbest, pathetic motivation.

path: 0 2243168 2258485, hotness: undefined, score: 3, children: 0
Smoogs 38 points 3 years ago

I’m imagining spez is sending his flying monkeys and they’ve been trying to shut it all down. Doesn’t matter that you’re smaller than Reddit, Egos like spez’s can’t take even a minor rumble. Just look at how he has to ‘win’ against all his own users. Should tell you all you need to know on his motives.

path: 0 2261475, hotness: undefined, score: 38, children: 3
Sumeron 37 points 3 years ago

Thanks for the transparency and the update! Downtime to me is useful, it prevents me from using Lemmy too much.

path: 0 2272575, hotness: undefined, score: 37, children: 0
ThePowerOfGeek 37 points 3 years ago

Thank you for everything you do. You guys are doing a fantastic job, and a lot of us sincerely appreciate all your efforts!

path: 0 2257531, hotness: undefined, score: 37, children: 0
cyborganickname 35 points 3 years ago

Thank you for your time & efforts in maintaining this platform. I (and many others I'm sure) have great respect for the work you do in trying to combat this menace. The community is completely behind you and appreciates the value of this resource.

path: 0 2297914, hotness: undefined, score: 35, children: 0
Desistance 35 points 3 years ago

Glad you guys resisted the call to close signups. I think that's what they want in the end, to harm lemmy.world by killing it's growth.

path: 0 2244662, hotness: undefined, score: 35, children: 0
Surp 34 points 3 years ago

I wonder if reddit, the company, are the ones ddosing.

path: 0 2253880, hotness: undefined, score: 34, children: 12
xfts 33 points 3 years ago

You guys are trying your best, and that's what matters. Thank you LW Team.

path: 0 2253020, hotness: undefined, score: 33, children: 0
Mercury1337 33 points 3 years ago

Thank you for your hard work

path: 0 2262727, hotness: undefined, score: 33, children: 0
Anti_Weeb_Penguin 32 points 3 years ago

Come on ddosers, we can always solve our differences with dialogue

path: 0 2247553, hotness: undefined, score: 32, children: 8
PeleSpirit 32 points 3 years ago
path: 0 2243988, hotness: undefined, score: 32, children: 0
merthyr1831 32 points 3 years ago

You're managing this well. Good work folks.

path: 0 2263552, hotness: undefined, score: 32, children: 0
subspaceinterferents 32 points 3 years ago

Very grateful for your focus and dedication. Bummer about the DDOS bullshit. Your efforts mean a lot to the communities.

path: 0 2277742, hotness: undefined, score: 32, children: 0
108beadz 30 points 3 years ago

Another heartfelt thanks—both for the hard work, and for the transparency.

path: 0 2241640, hotness: undefined, score: 30, children: 0
infyrin 28 points 3 years ago
path: 0 2333558, hotness: undefined, score: 28, children: 1
httperror418 27 points 3 years ago

In a way, the ddos attacks are helping highlight the slow parts of the system causing a reason to optimise them? It's kind of a double edged sword

path: 0 2247686, hotness: undefined, score: 27, children: 3
cpo 25 points 3 years ago

Well thanks for the update and your hard work. I am currently using lemm.ee as a backup account so that I can at least have my fix.

Hope the bastard(s) who are ddossing the server get some nice tropical diseases.

Lemmy.world also was my first step into the fediverse.

path: 0 2293845, hotness: undefined, score: 25, children: 0
md5crypto 24 points 3 years ago

Endless DDOS attacks. Sigh.

path: 0 2282191, hotness: undefined, score: 24, children: 5
HexesofVexes 24 points 3 years ago

In terms of the "expensive" SQL queries - is this an issue that the lemmy devs are working on? I.e. is this a problem that might solve itself in time?

path: 0 2251954, hotness: undefined, score: 24, children: 6
root 24 points 3 years ago

Thank you guys for the write up and for helping to keep things running.

path: 0 2241659, hotness: undefined, score: 24, children: 0
Ab_intra 23 points 3 years ago

It's really annoying that it's down but I've found another instance to use when I'm not able to use this one. I hope you're able to stop these losers at some point. It's very frustrating what's happening but at the same time Lemmy is young and I think and hope it will be optimised so that it won't be a issue in the future.

Stay strong fellow lemmies, we're going to get trough this. For those of you that is very annoyed now: make a new account at some other instance. I've already got 3 accounts across 3 different instances already. Check what instance to join here: https://join-lemmy.org/instances

path: 0 2249917, hotness: undefined, score: 23, children: 5
Valdair 23 points 3 years ago

The downtime is causing an issue with posting content from other instances - I've seen this a handful of times from kbin. I post something to a lemmy.world community, and kbin thinks it's there, but lemmy.world doesn't see it. But, the delete request seems to need to go through lemmy.world, which doesn't agree that the content exists. So my profile is filled with posts people on kbin can see, but no one else can, and I can't delete them. Is there any kind of catch-up mechanic for instances to try to agree on what content should be present if content was altered during downtime? I can see this becoming a lot more confusing as people look at a community from multiple different instances and see different content, not realizing this is unintended behavior.

The biggest misconception I've seen on Reddit and elsewhere is that you need an account on every single instance if you want to interact with content on that instance, and it's not supposed to be true but while this bug continues, it kind of is true.

path: 0 2248613, hotness: undefined, score: 23, children: 1
Spliffman1 23 points 3 years ago
path: 0 2241484, hotness: undefined, score: 23, children: 0
tallwookie 23 points 3 years ago

appreciate the transparency!

path: 0 2258030, hotness: undefined, score: 23, children: 0
treefingers 22 points 3 years ago

How do I as a developer:

  • contribute towards lemmy?
  • contribute toward the success of lemmy.world?

I’m an SRE by trade and would be happy to contribute my time in some way

path: 0 2247501, hotness: undefined, score: 22, children: 3
Prethoryn 21 points 3 years ago

There are quite a few InfoSec people here. While I have never held an official InfoSec job I do have a degree. However, my degree is debatable about whether it actually educates me as intended.

Point being there are a lot of people that have more knowledge than me as well as experience but I want to learn. As someone who is always listening to security podcasts like Hacking Humans or Darknet Diaries, naked hacking, or even InfoSec journalism around popular ongoing issues in the world like Click Here. I always want to learn and get experience.

I currently work in IT for a hospital. Is there any way to help with this kind of thing to learn and build on knowledge to help? To volunteer time to potentially see what is going on?

path: 0 2242225, hotness: undefined, score: 21, children: 3
Xaphanos 15 points 3 years ago

IF you were a bad actor, this is exactly the argument to use to get more inside information to use in the next attack.

Establishing trust is the first problem to be overcome.

path: 0 2242225 2243499, hotness: undefined, score: 15, children: 1
Prethoryn 2 points 3 years ago

So there should be a test as there is no proper way for most to prove they aren't a bad actor. That is the unfortunate bit. I know I am not a bad actor and would genuinely like to help. Insider threat is a real issue and I can understand the lack of trust but how would I prove my trust?

A resume? Work experience? All of those could mean nothing if you intend to harm the system anyways.

I would personally like to devote time to learning this kind of thing to assist.

path: 0 2242225 2243499 2280513, hotness: undefined, score: 2, children: 0
FoxAndKitten 1 point 3 years ago

So what's going on is the adversaries continuously hitting the lemmy.world server. On its own, a DDOS like that would be manageable - they're much more defeatable these days

But they found request paths that run expensive db functions, giving them enough bang for their buck to make an impact, even tucked behind cloudflare.

As for mitigation, cloudflare and a larger server help, but ultimately lemmy needs some refactoring - right now it's very liberal with the database calls. It needs to divide those up and get more granular with API calls, look at what can be optimized on the DB side, maybe do some caching/memoization... Basically, it needs to become a more mature piece of software in a hurry

Going further, there's things like horizontal scaling - there's even thoughts of how we could leverage the nature of the fediverse to share the load through federation.

I'm a dev, I don't know much about administration so I'm not sure how you could help, but there's plenty of work to go around. I think a database expert would be the most useful right now.

There's messing with configs to tune everything for better performance - that's out of my expertise, but I'm under the impression that there's some significant gains to be had there

If it's in your wheelhouse, you could look at different technologies that might give better performance - the current stack seems like it was chosen mostly with ease of development in mind, if you could make a strong argument for changing some of it out it might get traction.

As far as cyber security in general, if you want to get started - step 1 is basically locking things down, and then setting up monitoring tools and getting experience with them. Basically reading logs taken to the next level. I'm pretty sure they have that handled here, but this problem will never go away

path: 0 2242225 2411182, hotness: undefined, score: 1, children: 0
cyberpunk007 20 points 3 years ago

When will /u/spez just accept that he lost?

path: 0 2260804, hotness: undefined, score: 20, children: 2
joklhops 19 points 3 years ago

keep fighting the good fight <3

path: 0 2288804, hotness: undefined, score: 19, children: 0
GnothiSeauton 19 points 3 years ago

Would it be possible to have the error page when you are being attacked/there is an outage point to some other lemmy instances to go to?

I think that could be a big help if there is an issue when a new user tries to check out .world for the first time. They will at least have a link to click on to check out what lemmy is like on another instance and maybe sign up there too.

path: 0 2241702, hotness: undefined, score: 19, children: 0
Rottcodd 19 points 3 years ago

Ironic that they're effectively proving that you were right to not trust them...

path: 0 2243467, hotness: undefined, score: 19, children: 0
ieightpi 17 points 3 years ago

Ive been waiting for this response from you guys. You have been a fantastic admin team so far. I still don't agree with some of the de-federating, but overall you guys truly show you care about this instance and the lemmy fediverse as a whole.

I know I wont be wavering because of butt hurt idiots in other instances. I will hold my ground and stick to Lemmy.World.

Keep it up and i hope that in due time, you guys can keep the DDOS attacks under control.

path: 0 2245130, hotness: undefined, score: 17, children: 2
desmosthenes 17 points 3 years ago

keep up the good work team; you're the linchpin to this renaissance

path: 0 2344648, hotness: undefined, score: 17, children: 0
quinten 17 points 3 years ago

Great explanation! And thanks for the many many hours you guys put in.

path: 0 2241795, hotness: undefined, score: 17, children: 0
asdfasdfasdf 16 points 3 years ago

Is Lemmy not throttling requests to APIs based on how computationally expensive they are? Or is it that many IP addresses are hitting those APIs and are within the throttling limits?

path: 0 2242318, hotness: undefined, score: 16, children: 2
candybrie 22 points 3 years ago

The first D in DDOS means distributed, as in the requests are distributed across many different machines and IPs; so the second option.

path: 0 2242318 2243093, hotness: undefined, score: 22, children: 1
asdfasdfasdf 9 points 3 years ago

I understand what DDOS is. It could be both options.

What I am curious about in the second case is why they aren't throttling unauthenticated requests in a single bucket.

path: 0 2242318 2243093 2243907, hotness: undefined, score: 9, children: 0
sverit 16 points 3 years ago path: 0 2272386, hotness: undefined, score: 16, children: 3
AndreyAsimow 16 points 3 years ago

Great work guys! Keep going!

path: 0 2254597, hotness: undefined, score: 16, children: 0
erza 15 points 3 years ago

keep up the good work

path: 0 2272936, hotness: undefined, score: 15, children: 0
fkn 14 points 3 years ago

Question, can we configure the nginx to return cached responses for all non-logged in queries for predetermined periods of time? (1min for example?)

path: 0 2248142, hotness: undefined, score: 14, children: 3
hamid 14 points 3 years ago

Sounds like you are the victims of a hackathon more so than a single person upset about drama. defcon is tomorrow, maybe some group/feds/soon-to-be-fed will have a demonstration and talks about ActivityPub

path: 0 2251502, hotness: undefined, score: 14, children: 1
AlmightySnoo 13 points 3 years ago

People should stick with the instance otherwise you're just encouraging those tankies and nazis to use DDOS attacks again to bring down instances that defederate with them, don't let them know that they're successful. This opportunistic concern trolling around lemmy.world's downtime needs to stop. As the admins said, sooner or later "small" instances would have 100k users and would start having these issues all at once if it weren't for lemmy.world experiencing them first hand. Some DB optimizations were pushed to Lemmy thanks to lemmy.world.

path: 0 2246082, hotness: undefined, score: 13, children: 8
Piers 13 points 3 years ago

The conversation gets a bit scrambled/broken up by disruptive/toxic people but this is a comment chain on lemmy.ml two weeks ago about SQL issues and challenges in getting the Lemmy Dev team to address them that might be worth reading:

https://lemmy.ml/comment/2100093

path: 0 2298339, hotness: undefined, score: 13, children: 1
fprawn 12 points 3 years ago

These malicious volunteers are helping to identify problem queries so they can be fixed. In the long term, it makes lemmy stronger.

Would be nice if they could just post an issue report, though.

path: 0 2241817, hotness: undefined, score: 12, children: 0
Lugh 12 points 3 years ago

I wonder what motivated any DOS attacks.

path: 0 2281141, hotness: undefined, score: 12, children: 5
DelvianSeek 11 points 3 years ago

Once again, thank you for the transparency and for keeping us (the users) informed, as well as for all the work you do to keep lemmy.world going.

path: 0 2242023, hotness: undefined, score: 11, children: 0
nix 11 points 3 years ago

I think it would be good to not close registration and if once a month or something there could be a post by admins about migrating to smaller instances (this is made easy with the LASIM tool) so new users can easily sign up with no hurdle but we also prevent too much centralization.

path: 0 2243843, hotness: undefined, score: 11, children: 4
paradiso 2 points 3 years ago
path: 0 2243843 2248199, hotness: undefined, score: 2, children: 0
PassingDuchy 1 point 3 years ago

Is there a way to do this on mobile?

path: 0 2243843 2244874, hotness: undefined, score: 1, children: 2
nix 2 points 3 years ago

Not that i know of

path: 0 2243843 2244874 2247026, hotness: undefined, score: 2, children: 1
PassingDuchy 1 point 3 years ago

Darn maybe soon, thank you!

path: 0 2243843 2244874 2247026 2247552, hotness: undefined, score: 1, children: 0
AhimsaBjorn 11 points 3 years ago

For my part, I wish to offer a sincere thanks to the Lemmy.world admins for their efforts up to now and as they continue to deal with the targeted DDOS attacks. You are Lemmy heroes who are helping to create this promising future. Sometimes it's a fight against those who are struggling with their internal daemons and taking it out on others. Bright days are ahead for the Fediverse. Keep marching forward!

path: 0 2243066, hotness: undefined, score: 11, children: 0
axellenium 10 points 3 years ago

Thank you for your dedication! 🤓

path: 0 2242559, hotness: undefined, score: 10, children: 0
bluestribute 10 points 3 years ago

The fun thing about the Fediverse is that when this goes down the other instances stay up, so whoever is doing the attacks isn't really doing much except promoting people to create accounts on multiple instances. Which makes the numbers look really big.

path: 0 2247934, hotness: undefined, score: 10, children: 2
Flanders_Poppy 10 points 3 years ago

Thank you for your dedication and hard work.

path: 0 2246085, hotness: undefined, score: 10, children: 0
zikk_transport2 10 points 3 years ago

Would it be possible to ratelimit connections/requests? Some sort of AI-based blocking? What are current technologies to battle such DDOS attacks?

path: 0 2251548, hotness: undefined, score: 10, children: 4
GlintingKingfisher 9 points 3 years ago

Thank you to the admins for all of your hard work maintaining Lemmy.World through the downtime. A lot of us are already so comfortable here that we rush to the Discord server to check in when it's down.

Point being, the members of Lemmy.World are really grateful to the admins, the mods, and fellow Lemmings who have been posting interesting content and participating in deep discussions!

path: 0 2246871, hotness: undefined, score: 9, children: 0
computabloke 9 points 3 years ago

This has been pinned a few days now. Site health was pretty dire with several long outages.

But subjectively in the last 48 hours things seem to be great. Noticeably responsive and login and activities haven't missed a beat.

StatusPage.io still looks very red though... Is the worst now mitigated?

Thanks to the stirling admins (and friends) for their work on this. Vive la Lemmy.World!

path: 0 2388180, hotness: undefined, score: 9, children: 2
enshu 9 points 3 years ago

Thank you for all the works you do!

path: 0 2263044, hotness: undefined, score: 9, children: 0
z500 9 points 3 years ago

Nam flashbacks to DALNet getting DDOSed to death for no reason

path: 0 2251912, hotness: undefined, score: 9, children: 0
FlyingSquid 9 points 3 years ago

I just want to know why someone or someones are taking so much time and effort to DDOS lemmy.world. Is it a grudge? What is driving it?

path: 0 2242616, hotness: undefined, score: 9, children: 3
Buelldozer 14 points 3 years ago

No way to know for sure but someone(s) is either big mad at being de-federated or they are uptight at LW becoming the biggest Lemmy instance. I'd guess that the first one is the most likely.

path: 0 2242616 2242802, hotness: undefined, score: 14, children: 2
VentraSqwal 6 points 3 years ago

I bet it's the person mentioned before who had been making thousands of junk communities and got banned. We already know they do troll stuff and have the technical aptitude for scripting.

path: 0 2242616 2242802 2243895, hotness: undefined, score: 6, children: 0
OskarAxolotl 1 point 3 years ago

Wouldn't be surprised if there wasn't any real reason behind it. Especially script kiddies attack any service they can cause harm to just because it makes them feel powerful.

path: 0 2242616 2242802 2368128, hotness: undefined, score: 1, children: 0
Imkeen 9 points 3 years ago

Appreciate it

path: 0 2272511, hotness: undefined, score: 9, children: 0
CanadianCorhen 8 points 3 years ago

I would love to see this grow to the point where a full time sysadmin could be hired! Would need a lot of subscribers though

path: 0 2250229, hotness: undefined, score: 8, children: 3
thisbenzingring 8 points 3 years ago

I think I initially signed up on your instance and then figured it out, signed up for a more local instance but then figured I made a mistake and ended up where I am.

Thank you again for being available to let me through the door. Once I figured out that there's lots of doors, it was much better.

Lemmy.world will always be a special place and you and anyone who volunteers for work hare is fuckin awesome. Thanks again ♥️

path: 0 2247649, hotness: undefined, score: 8, children: 0
comcreator 8 points 3 years ago

To my understanding Datadog is not FOSS. Would you guys consider using a FOSS alternative for motoring the status of lemmy.world such as Uptime Kuma? That way your who stack is closer to being FOSS.

https://uptime.kuma.pet/

path: 0 2243496, hotness: undefined, score: 8, children: 4
ramble81 14 points 3 years ago

The ship of "Lemmy must be entirely FOSS" has sailed. You can either invest time or money and even then there are some tradeoffs of things that can't be swapped out. Datadog and Cloudflare are two of those such things.

Lemmy (including lemmy.world) are at a critical junction to continue to grow or lose momentum. These DDOSs are one such thing that caused it and everyone going "FOSS, FOSS, FOSS!" are another. If they have time in the future there may be a possibility, but when playing the growth game sometimes you have to go with the best tool available even if it doesn't meet your ideals.

Sync for Reddit is another such tool. I've seen so much hate for it because it's not pure FOSS, pay no mind to the sheer number of people that have downloaded it, are using it and have helped drive traffic to Lemmy and the Fediverse in general.

Nothing is stopping you from using a fully FOSS front end with your own server, that's the beauty of the Fediverse, you can choose what you want and still interact with others, but don't get on their case when they select something you don't like.

path: 0 2243496 2245132, hotness: undefined, score: 14, children: 0
Obsession 9 points 3 years ago

Uptime Kuma is in no way comparable to what Datadog offers. The best FOSS alternative would be the whole Prometheus/Granada/Thanos/Loki/etc stack, and that would require at least a whole volunteer just to set up and administer.

There's nothing wrong with DD, they're a staple in the cloud industry and are absolutely trustworthy.

path: 0 2243496 2244572, hotness: undefined, score: 9, children: 0
haulyard 7 points 3 years ago

DataDog is far more comprehensive than Uptime Kuma. It would be more useful to compare the specific capability inside DataDog, considering they have so many services. In this case RUM or Synthetics from DataDog would be a comparable offering. For the SQL stuff, maybe DBM? I don’t have any preference either way, just wanted to bring light to the depth of DataDogs offering since I live that life at the office.

Edit to add that DataDog isn’t FOSS, but has some components they’ve acquired over the years that are. Vector is a good example. They’re offering a paid version called Observability Pipelines, but it rides on top of Vector and they’ve (so far) committed to keeping it FOSS.

path: 0 2243496 2244760, hotness: undefined, score: 7, children: 1
MrPoopyButthole 1 point 3 years ago

Yeah, uptime kuma is not mature and it's run by a single maintainer. If you look at its github issues it doesn't generate confidence.

path: 0 2243496 2244760 2260114, hotness: undefined, score: 1, children: 0
Jeanschyso 8 points 3 years ago

Thank you so much for explaining the reason for the downtimes. I just thought it was some temporary issue caused by unforseen popularity. Knowing it was malicious does make me more understanding of how difficult this must be. I will continue to be patient. I am sadly not good enough with anything other than basic powershell scripts and learning proprietary software configurations.. 10 years of software support does that to a guy. I'll still check if there is anything I can do to help. I do want this project to succeed.

path: 0 2245004, hotness: undefined, score: 8, children: 0
Jodio_Joestar 8 points 3 years ago

All support to Y'all, Keep Going!

path: 0 2297233, hotness: undefined, score: 8, children: 0
mrvictory1 8 points 3 years ago

When I learned about the whole fediverse thing, I want to join but was hesitant due to many instances. But I realized that lemmy.world is the largest Lemmy instance with a HUGE margin so I just signed up. Thank you for keeping this place alive and kicking!

path: 0 2246200, hotness: undefined, score: 8, children: 0
SpeedLimit55 7 points 3 years ago

Thanks for the update and keep up the good work! It seems like reddit went down a few times a week regularly for years. I have to think that some state sponsored actors are responsible for some of this. I’m sure that some topics being discussed here are not in line with the values of many regimes.

path: 0 2242842, hotness: undefined, score: 7, children: 3
GregorGizeh 5 points 3 years ago

While I agree that certain state sponsored actors and private interest groups are most definitely involved in discourse manipulation on reddit, Lemmy simply isn’t big enough for this yet.

If we go by the numbers stated in the original post, the whole of Lemmy has less than 500k users at this point, whom are overwhelmingly <40 years old tech affine early adopter nerds from the United States and Western Europe.

Too insignificant to spend resources on, and also largely sceptical of corporate interests and authoritarian governments (except the tankies of course); so by default critical of the two top potential manipulators.

path: 0 2242842 2243380, hotness: undefined, score: 5, children: 2
VolatileExhaustPipe 2 points 3 years ago

The Feds had people on 100 user big BBSes.
If you followed the studies about so called "extremism" (which often ignores the extremism of the center) then lemmy played a role in that, so it is more unlikely than likely that Feds wouldn't be on several lemmy servers.

path: 0 2242842 2243380 2246638, hotness: undefined, score: 2, children: 1
Buelldozer 4 points 3 years ago

The Feds had people on 100 user big BBSes.

Yup, personally seen it. Happened on usenet from the beginning and they were all over regular web forums at least as early as 1999. They also monitored GeoCities / AngelFire sites as well.

The idea that multiple federal agencies from multiple countries aren't paying attention to Lemmy because it's "small" with only 500,000 users is simply wishful thinking. I promise that they are here.

path: 0 2242842 2243380 2246638 2248025, hotness: undefined, score: 4, children: 0
derrg 6 points 3 years ago

Thanks for the update and the work you do! Lemmy.world introduced me to the Fediverse and it’s been awesome watching the site grow.

path: 0 2246008, hotness: undefined, score: 6, children: 0
Hoxton 6 points 3 years ago

Thanks for all your amazing work! I know just enough about SQL to know I know next nothing, but could someone intelligent explain how databases are publicly accessible for anyone to be able to make queries?

path: 0 2251316, hotness: undefined, score: 6, children: 8
wolfcatreader 6 points 3 years ago

🙏 🙌

path: 0 2290952, hotness: undefined, score: 6, children: 0
MrSilkworm 6 points 3 years ago

keep doing what you're doing. If it makes any difference, I'm with you guys and I appreciate what you do to keep this place running

path: 0 2247245, hotness: undefined, score: 6, children: 0
andrewth09 6 points 3 years ago

The Great Lemmy Wars

path: 0 2353121, hotness: undefined, score: 6, children: 0
Fez 6 points 3 years ago

Thanks for your service 🫡

path: 0 2241804, hotness: undefined, score: 6, children: 0
fox2263 6 points 3 years ago

Are you guys using a load balancer at all? How about a tool like CrowdSec?

I use that and the nginx Bad Bot Blocker to stop malicious shits on the sites I operate (medium-large e-commerce) to great success. We used to get scraped heavily by competitors but now they get the middle finger.

I presume you have fail2ban too?

path: 0 2333624, hotness: undefined, score: 6, children: 8
kamikazow 6 points 3 years ago

@lwadmin Lemmy developers have features hardcoded for their own instance? WTF?

path: 0 2241824, hotness: undefined, score: 6, children: 3
ipha 19 points 3 years ago

They're likely running beta or unmerged patches rather than 'exclusive' features.

path: 0 2241824 2241931, hotness: undefined, score: 19, children: 2
antik 27 points 3 years ago

It's a check if the hostname is 'lemmy.ml' and if yes then it will display a box with information about federation and link to Join-Lemmy.org on the signup page - so yes it is hardcoded for their instance. I'm not shaming the devs here I'm sure they would at one point make this an option for all instances since half the work is done. And it's something we at LW could use but I'm sure it's not interesting to everyone running an instance.

path: 0 2241824 2241931 2242133, hotness: undefined, score: 27, children: 0
Buelldozer 10 points 3 years ago

Lemmy.ml says they are running BE 0.18.4 which is the same as lemmy.world which mostly eliminates it as a beta version. It really can't be an unmerged patch either since its in the Lemmy source code.

I doubt it's nefarious though, probably just a leftover from when lemmy.ml was the primary lemmy instance.

path: 0 2241824 2241931 2242280, hotness: undefined, score: 10, children: 0
Resol 6 points 3 years ago

Guess it's time to create an alt account on a different instance

path: 0 2246294, hotness: undefined, score: 6, children: 0
Ackward 6 points 3 years ago

It's difficult to fix and not without changes in the code. Most solutions involve fixing those heavy SQL. Tuning them, caching them in redis or memcached or refactor the whole process from scratch.

Thinking on the DDoS part, implement short circuits so reaching those queries must follow a session pattern. It doesn't stop it but you force those script kiddies to make real connections. If they are anonymous then all the heavy queries should be cached due to lack of custom vars. If not, it's a matter of identifying users and banning them automatically.

path: 0 2243838, hotness: undefined, score: 6, children: 3
meldroc 3 points 3 years ago

I just noticed that Lemmy.world's getting upgraded to 0.18.4 - will this patch up some of these SQL problems?

path: 0 2243838 2244390, hotness: undefined, score: 3, children: 2
antik 12 points 3 years ago

No but I've heard lemm.ee admin @sunaurus@lemm.ee and @phiresky@lemmy.world have been on the case today. Those guys are gems and have helped Lemmy World survive quite a few storms already. We would have had even more problems if it wasn't for them backin up @ruud@lemmy.world.

path: 0 2243838 2244390 2246654, hotness: undefined, score: 12, children: 0
misterbassman 5 points 3 years ago

Sadly not, it's mostly focused on comment ordering.

path: 0 2243838 2244390 2244738, hotness: undefined, score: 5, children: 0
Buelldozer 6 points 3 years ago

It's a shame you are having to go through this but it was bound to happen to an instance sooner or later. It's better that it happen to a large instance with the time, talent, and money to work through the challenges because this kind of consistent attack would bury any smaller instance pretty quickly.

With that said is there anything that users can do to help?

path: 0 2242873, hotness: undefined, score: 6, children: 0
Aurix 5 points 3 years ago

Thank you for addressing the registration issue. Informing new users to consider alternatives due to the size relieves the issue I had. And it is a valid counterpoint.

path: 0 2247112, hotness: undefined, score: 5, children: 0
orangeNgreen 5 points 3 years ago

Is there any update on the instances that were unintentionally defederated from lemmy.world? I know that one of the fanaticus.social admins was trying to get that sorted out.

path: 0 2394983, hotness: undefined, score: 5, children: 0
MedicPigBabySaver 5 points 3 years ago

Thanks for the hard work!

path: 0 2244981, hotness: undefined, score: 5, children: 0
jungekatz 5 points 3 years ago

Ah this is much needed response ! I switched servers but lemmy.world is still my go to server , it was down so much that I had to try alternative ones ! Good it know its not a load issue !

path: 0 2242569, hotness: undefined, score: 5, children: 0
Xargon 5 points 3 years ago

I wonder if it's possible to migrate our accounts and communities to other instances. I think that should implemented globally.

path: 0 2243782, hotness: undefined, score: 5, children: 1
Madbrad200 7 points 3 years ago

It's being worked on. In the meantime, you can use LASIM to migrate your subscriptions/settings to another instance. You can also mod your accounts on other instances.

path: 0 2243782 2244720, hotness: undefined, score: 7, children: 0
AbouBenAdhem 4 points 3 years ago

There are some points that can be made that it is better to spread the load of users and communities across other instances

Out of curiosity, what’s the relative overhead of those two services (hosting user accounts vs hosting communities)? If the aim were to distribute the overhead over multiple instances (as a general goal, not just a solution to the DDS attacks), is it more important to distribute users or communities?

path: 0 2243671, hotness: undefined, score: 4, children: 0
assassin_aragorn 4 points 3 years ago

Thanks for keeping us in the loop!

path: 0 2243313, hotness: undefined, score: 4, children: 0
PrincessLeiasCat 4 points 3 years ago

Thanks for the update! Sorry this is happening, but appreciate the detail and transparency. I hope things get resolved as best they can.

path: 0 2242692, hotness: undefined, score: 4, children: 0
sezey 3 points 3 years ago

Thank you for the information. We appreciate your work very much.

path: 0 2242982, hotness: undefined, score: 3, children: 0
YoBuckStopsHere 3 points 3 years ago

As always, great job! It's great having an admin team so dedicated to creating a welcoming community.

path: 0 2246494, hotness: undefined, score: 3, children: 0
mordred 3 points 3 years ago

Thanks for the update, if there's ways we can help please mention them. Be it about know-how, be it financial, be it about our behaviour when interacting with the server, be it about general knowledge we could provide.

path: 0 2243003, hotness: undefined, score: 3, children: 0
solstice 3 points 3 years ago

What about that "show context" button in our inboxes? It's super annoying getting replies and not being able to see what the context was, all I get is that 'bad gateway' error or whatever.

path: 0 2336134, hotness: undefined, score: 3, children: 2
SocialMediaRefugee 2 points 3 years ago

Hope you are logging the DDOS ips. The first step in tracing those responsible.

path: 0 2377179, hotness: undefined, score: 2, children: 2
Fish 2 points 3 years ago

I have nothing bad to say about Lemmy.world, but I do recommend that people move away from it in order to better decentralize Lemmy. Here is some useful information for people wanting to move instances.

For a list of instances, along with with stats for those instances:

https://fedidb.org/software/lemmy or https://lemmyverse.net/

Also, tools for migrating instances:

https://github.com/CMahaff/lasim (easy) - Latest Version Download (just select your OS type and run the program)

https://github.com/wescode/lemmy_migrate

https://github.com/Ac5000/lemmy_account_sync

path: 0 2245516, hotness: undefined, score: 2, children: 1
cum_hoc 2 points 3 years ago

So if we were to point fingers to anyone, who would it be?

path: 0 2286714, hotness: undefined, score: 2, children: 5
the_kalash 1 point 3 years ago
path: 0 2412640, hotness: undefined, score: 1, children: 0
TheSmartDude 1 point 3 years ago

Will these occur in the near-future?

path: 0 2293997, hotness: undefined, score: 1, children: 0
Syntax 1 point 3 years ago

Have you considered putting Cloudflare in front? I'm sure their team would be happy to help out.

path: 0 2246518, hotness: undefined, score: 1, children: 2
TheMadnessKing 1 point 3 years ago

I'm actually curious as IDK why no CF or DDOS-Guard is used to block massive DDoS? Additionally, I'm not that knowledgeable but having some Cache that serves a bit of stable data for SQL queries might be better than the server being overloaded and having downtime.

path: 0 2247800, hotness: undefined, score: 1, children: 0
EatMyDick2 0 points 3 years ago
path: 0 2314425, hotness: undefined, score: 0, children: 0
Touching_Grass 0 points 3 years ago

It's not the size of your hard drive that counts, it's the speed of your RAM.

M'lady

path: 0 2245740, hotness: undefined, score: 0, children: 1
neonfire 0 points 3 years ago

Any de-federated instance doesn't have the money or resources to start DDOS attacks. You know who does? Large corporations who feel attacked at the very existence of large platforms such as lemmy.world.

Who do we know with those resources, funding, knowledge of software (in general, as well as able to place specific people to learn about certain FOSS projects that have their code available), and the desire to spend such resources?

You know it's Reddit Co, we know it's Reddit Co. They know they're doing it too.

Fuck Spez and his bullshit army. I hope they can sleep well in their suburban McMansions while they sell out their future.

Conspiracy is one thing, this is just obvious.

path: 0 2353681, hotness: undefined, score: 0, children: 12
elbarto777 0 points 3 years ago
path: 0 2352955, hotness: undefined, score: 0, children: 0
DarkWasp -1 points 3 years ago
path: 0 2250831, hotness: undefined, score: -1, children: 3
jkurratt -1 points 3 years ago

Because it seems in this system it’s better to login through server with lower amount of users.

path: 0 2402537, hotness: undefined, score: -1, children: 0
PeachMan -1 points 3 years ago

You just answered your own question? Lmao

path: 0 2349921, hotness: undefined, score: -1, children: 0
HeavenAndHell -2 points 3 years ago
path: 0 2350633, hotness: undefined, score: -2, children: 0
raresbears -2 points 3 years ago
path: 0 2257236, hotness: undefined, score: -2, children: 0
Viking_Hippie -3 points 3 years ago

Answered your own question before you even asked it 🤦

path: 0 2353675, hotness: undefined, score: -3, children: 0
wee_butterfly -5 points 3 years ago

Can I just say I'm kind of annoyed I've had to turn off NSFW. It's pure porn here.

path: 0 2282573, hotness: undefined, score: -5, children: 3
deftdrummer -5 points 3 years ago

Interesting your comparison with "imagine if a new user got to the page and couldn't sign up" - honestly, that's what they're faced with now regardless of closing off sign ups.

You say being able to handle the load is not an issue - I understand that on a technical level, but at the same time, you can't handle the load currently with the level of ddos attacks. That much is fact.

I know it's hard to catch these fuckers and close exploits quickly, but let's be honest here so far the methods have failed on LW's part. These are 2010 levels of downtime.

path: 0 2250494, hotness: undefined, score: -5, children: 0
superbirra -8 points 3 years ago

Lemmy.World

r/foundthemobileuser

path: 0 2251800, hotness: undefined, score: -8, children: 2
mintycactus -9 points 3 years ago
path: 0 2265366, hotness: undefined, score: -9, children: 0
Suoko -10 points 3 years ago

Nobody blaming thr Russian or Chinese hackers causing DDOS attacks? That's like fresh air to me :-D

path: 0 2262492, hotness: undefined, score: -10, children: 2
Thermal_shocked -16 points 3 years ago

If you'd stop banning users over nonsense, probably have less enemies ddossing you.

path: 0 2339685, hotness: undefined, score: -16, children: 2
BanMeAgainIWontStop1 -18 points 3 years ago
path: 0 2266450, hotness: undefined, score: -18, children: 5
miles -24 points 3 years ago

a better solution is to decouple the query from individual api requests by adding a caching layer. we’ll get there eventually

path: 0 2241746, hotness: undefined, score: -24, children: 5
SatansMaggotyCumFart 28 points 3 years ago

You want to give all the script kiddies an easy attack?

path: 0 2241746 2241820, hotness: undefined, score: 28, children: 2
miles -5 points 3 years ago

they already are

path: 0 2241746 2241820 2242112, hotness: undefined, score: -5, children: 1
Draconic_NEO 4 points 3 years ago

Why are you asking us for them then if they're already publicly available? We're not going to help you start an attack against instances.

path: 0 2241746 2241820 2242112 2244800, hotness: undefined, score: 4, children: 0
cerevant 10 points 3 years ago

To what benefit? They are going to the devs and fixing them.

path: 0 2241746 2242282, hotness: undefined, score: 10, children: 0
Draconic_NEO 4 points 3 years ago

Why is there a Lemmy instance that you want to attack? That's the only reason that anybody who's not a developer or an instance operator would want to know that. You're neither of these things so you have no reason to know that information unless you're planning an attack.

path: 0 2241746 2244704, hotness: undefined, score: 4, children: 0
Demigodrick -33 points 3 years ago

Ah no, sorry, while I sympathise with your technical issues, the rest of your post is disingenuous at best.

Lemmy.world being too big is bad for Lemmy as a product/software/"brand" etc - your downtime, being the instance most people link to, is a LOT of people's first impression and when it spends time being down, people associate THAT downtime with Lemmy, and not the hundreds of other instances that don't have downtime.

The issue isn't even about you being the biggest instance, its the absolute imbalance in both users and communities on one instance and you willingly allowing it continue. If you genuinely cared about Lemmy, you would close registrations now.

You have enough "technical" people to build your own instance from the source code with that change for the banner built in (and you could go ahead and submit the PR/Issue anyway), but you haven't - instead placing the blame on the developers. Hell, you only made the PR 5 hours ago after weeks of other admins asking you to close the instance.

You could even make the simple change to the sign up link instead lead to join-lemmy, but for whatever reason you want to continue to be the biggest instance and don't care about the wider lemmy ecosystem and the effect that it has.

path: 0 2242358, hotness: undefined, score: -33, children: 12
Mcdolan 12 points 3 years ago
path: 0 2242358 2243054, hotness: undefined, score: 12, children: 6
Demigodrick -2 points 3 years ago

While I appreciate that, the issues caused by lemmy.world to many other admins can be monumental. If the instance goes down, it causes many people to wonder why federation has stopped working, despite the fact the home server is fine. All that content in one place is not only against the point of federation, its a risk to the existence of lemmy if the owner just decided to walk away tomorrow. While im sure he wont, and im sure many users would try to recreate or move communities elsewhere if he did, a large core percentage of lemmy wouldnt come back, and that is the risk.

As I said, I sympathise with their technical issues, hell this instance has had hours of downtime because of SQL queries, but claiming they aren't too big is not a valid response. Just because imbalanced instances happens elsewhere doesn't mean it isn't an issue here, especially because of the problems with the back end.

Their refusal to acknowledge the complete imbalance, or to do anything about it, is IMO an actual problem for lemmy.

Ps it's OK to disagree with me, but I'd rather people explain why than just downvote. Can't have a proper discussion with a downvote.

path: 0 2242358 2243054 2243297, hotness: undefined, score: -2, children: 5
Atrabiliousaurus 6 points 3 years ago

I made an account on lemmy.world because as I understand it you only see posts from communities on other instances if you or someone else on your instance has subscribed to them. So it seems like if you want the best lemmy experience you should join the largest instance, perhaps if that wasn't the case more people would be willing to move to smaller instances.

path: 0 2242358 2243054 2243297 2243876, hotness: undefined, score: 6, children: 1
Blaze 2 points 3 years ago path: 0 2242358 2243054 2243297 2243876 2252577, hotness: undefined, score: 2, children: 0
canis_majoris 4 points 3 years ago

I don't see how their number of users is a legitimate problem. If it was causing issues due to day-to-day usage causing problematic queries that would be one thing, but it's been made clear that this is not a day-to-day issue with numbers, it's an active attack issue that's exploiting those heavy queries. It's not like the number of users are causing a hug-of-death style DDOS by calling the aforementioned queries.

If the users are a problem, it's only due to people being basically jealous of the user count on .world and picking it as the chief instance to fuck with, like picking the biggest guy in the jail lunchroom to prove you're a badass.

path: 0 2242358 2243054 2243297 2246222, hotness: undefined, score: 4, children: 0
Mcdolan 3 points 3 years ago
path: 0 2242358 2243054 2243297 2245097, hotness: undefined, score: 3, children: 0
deadinside91 2 points 3 years ago

I downvoted your other post because while yes, in an ideal situation people migrating from Reddit would join local instances that fit their individual values the best, I don't agree that forcing people to join other instances than .world is the right or that it will make Lemmy better.

It doesn't matter if the reason is because they read about in a guide, it has most of the communities they liked, or even because it's the biggest instance currently, people's freedom of choice should be respected. How do you think complete newcomers would see Lemmy if even the most recommended instance turns them away? Probably that the whole thing is very exclusive.

The general sentiment around here seems to be that people like how the admins are handling things so far and that they feel inclined to be more active because there is enough users to generate discussions on smaller topics as well, so your claim that this instance is somehow damaging Lemmy's image seems a bit disingenuous to be honest.

path: 0 2242358 2243054 2243297 2266149, hotness: undefined, score: 2, children: 0
Eddie 5 points 3 years ago

Sorry, but I'm not going to listen to anybody who actively and purposely registers a .zip TLD.

path: 0 2242358 2244465, hotness: undefined, score: 5, children: 2
canis_majoris 5 points 3 years ago

What genius decided to even allow .zip TLDs? It's such an easy and open attack vector. We don't need all these stupid gimmick TLDs.

path: 0 2242358 2244465 2246327, hotness: undefined, score: 5, children: 1
scroll_responsibly 1 point 3 years ago

What genius decided to even allow .zip TLDs? It's such an easy and open attack vector.

IIRC, someone at Google did 🤦‍♂️

path: 0 2242358 2244465 2246327 2250963, hotness: undefined, score: 1, children: 0
yobama 5 points 3 years ago

Should they just forward their signup page to your instance lemmy.zip then sir?

path: 0 2242358 2243018, hotness: undefined, score: 5, children: 0
VolatileExhaustPipe -2 points 3 years ago

Thanks for your comment. However that it sits in the high negative numbers (with 3 times the downvotes) shows that this instance is actually a problem. It is quite actively destroying principles of decentralized federated networks. Some very online super posters seem to participate in that.

Again it would be interesting to see who was it that downvoted your post.

path: 0 2242358 2246712, hotness: undefined, score: -2, children: 0
lemmyworld
lemmyworld

@lemmy.world

login for more options
31278
770
44

This Community is intended for posts about the Lemmy.world server by the admins.

Follow us for server news 🐘

Outages 🔥

https://status.lemmy.world

For support with issues at Lemmy.world, go to the Lemmy.world Support community.

Support e-mail

Any support requests are best sent to info@lemmy.world e-mail.

Report contact

Donations 💗

If you would like to make a donation to support the cost of running this platform, please do so at the following donation URLs.

If you can, please use / switch to Ko-Fi, it has the lowest fees for us

Ko-Fi (Donate)

Bunq (Donate)

Open Collective backers and sponsors

Patreon

Join the team

go to feed...