355

Tesseract dev injects malicious code into browser to illegally DDOS the dbzer0 instance (quokk.au)

submitted 4 hours ago by Quokka@quokk.au to c/fediverse@lemmy.world

111 comments fedilink hide all child comments

As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.

you are viewing a single comment's thread
view the rest of the comments

[-] Coelacanth@feddit.nu 14 points 2 hours ago* (last edited 2 hours ago)

What’s crazy is they could have simply:

Apologised

Explained the intent to reduce toxicity

Agreed there was a lack of transparency

Refactored their existing “enable toxicity mode” feature into a clearer, toggleable blocklist feature

Yes, I think there is genuinely an audience for what he was doing (or something akin to it), and it would genuinely have been a useful onboarding tool for getting a certain type of person to consider dipping their toes in the Fediverse.

But first of all it absolutely has to be separated from the safety/anti-spam filters. Bundling it with those is very malicious.

Second it must be opt-in.

Third, it must clearly say somewhere that "this anti-toxic setting is a curated block list based on my personal preferences". There should then have been an option to use a personal blocklist instead of the developer default.

And fourth, I guess ideally this type of filter should maybe have been maintained by a somewhat more... well-balanced individual.

[-] EggInDisguise 4 points 22 minutes ago

Anyone who thinks "yeah lgbt stuff should be hidden because we want to attract people who don't want to see LGBT stuff" is someone I don't want anywhere near the fediverse.