As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.
I could understand hardcoded blacklists if Tesseract was meant as a frontend for a Lemmy instance tailored for a specific purpose, and not intended for general use. But this, to DDOS a website because the developer is a whiny baby who can’t take criticism? This is a new low. This is disgusting, and damaging for the Lemmyverse as whole.
In case somebody wanted confirmation. Maybe don’t visit the page with Javascript enabled.
Expert dev. Doesn’t even know the attribute for setting the language in the script tag is
type, notlang. Not to mention that you are encouraged to omit the attribute altogether if the script tag contains JavaScript…Petty, and a bad dev. Big yikes.
The random strikes me as curious too. I don’t see the point in doing
(100 - 1 + 1), you could express a random number between 1 and 100 in a simpler manner. Then he gets another random number and reuses that three times, for whatever reason.Then again, none of his other decisions make much sense to me so why would this?
I guess it’s just a pattern to easily get a number between
aandb, going(b - a + 1). Or maybe this is just vibecoded lolSeeing
(100 - 1 + 1)definitely bothers my brain lmaoLooking closer, the whole calculation bothers me now. Why do
floor() + 1instead of just usingceil… arghhhh
“Apparently only three people who aren’t me actually want a place that’s not just a circle-jerk of rage and hate.”
I think this is the best part of their message
My favorite part of this was in the “elephant in the room” post.
One of his faq questions was something about if the list is a perma-ban. His answer was somewhat incoherent but basically if you stop being toxic you can get off it. But nothing about how. So either he’s actively monitoring thousands of accounts that he’s also secretly hiding from everyone else, or we were supposed to, I don’t know petition him with our last 50 comments to prove we had changed and ask nicely to not be on a list we weren’t supposed to know existed in the first place.
I did not follow this drama, and I don’t know about this list everyone is mentioning. Is this something that hides specific users posts and comments from the Tesseract UI ?
Basically, yes.
Tesseract was downloading at runtime an obfuscated blocklist of users and instances. One that the dev didn’t tell anyone about, and didn’t give an option to disable/modify.
db0 was trying to update Tesseract and was unaware that the whole dbzer0 instance was blocked in this way. And because the Tesseract dev is a spherical bastard, rather than saying “this is blocked”, it said there was an API mismatch, which sent db0 down a troubleshooting rabbit hole that ended with him blowing the whistle on the whole thing.
And you can see how mature and wise the developer is for how he responded.
Why are they dropping support for Tesseract after Lemmy 1.0?
don’t want to maintain a solution from a bastard that clearly is untrustworthy.
I tried to carve out a space where those people and other rougher edges were not drowning out niche communities and hobbies and where people who choose to use the platform to harass others were also out of sight, out of mind. Apparently only three people who aren’t me actually want a place that’s not just a circle-jerk of rage and hate. Thus sayeth the mob.
100% that dude was running an op. If you want to “carve out” such a space, that would be an instance for the “non-crazies” where all “those people and other rougher edges were not drowning out niche communities and hobbies” were banned or filtered out. You can block and filter however you want on your instance. In fact that is one of the expectation one has of an instance and how one chooses an instance. I chose blahaj because of how the admins, you know, administrate and curate the instance. Writing a front-end and smuggling in a blocklist via other commits (no commit message ever acknowledged the blocklist as it was being built afaik) and having a central point of truth for what and who gets filtered is not how you “carve out” a space, it’s how you try to shape discourse on an entire platform.
That DDOS attempt is him being extremely mad at db0 for thwarting this before his front-end became the de-facto standard for power-users, especially mods and admins.
.world was on the precipice of doing the right thing and disaccociating themselves from that psychotic shit show, but silently dropped the issue and carried on as usual after wringing their hands for maybe two weeks.
Oh yeah they just silently dropped it, they still owe db0 an apology for throwing all this shit at them right immediately after the nazi allegation got debunked.
I’m one person and have held my fucking ground, mostly with dignity and grace, in the heat of my own shitstorm of trying to disaccociate from the extremist elements of the fediverse.
You already had ragequit the fediverse last year remember? This is just lolcow behavior at this point.
P.S. Rimu, you owe me a beer. No one is talking about the Piefed vote quotas anymore, so you’re welcome.
I sometimes do wonder what goes on in the matrix rooms around the fediverse lol. Seems like someone fell out of favor with even the most liberal of the anti-tankies.
As for those 3 people, how much you wanna bet they’re the admin team of startrek.website? They just sided with Patrick and defederated from dbzer0 while also refusing to share any sort of evidence of any harassment or serious wrongdoing on the dbzer0 community’s part. Instead of just one clown, we’ve got a circus forming.
I don’t think I’ve ever witnessed someone going so hard off the rails. It’s been an entertaining few days really.
It’s what happens when someone with underdeveloped empathy gets caught doing something they know is wrong, resulting in emotional overload.
It’s textbook toddler tantrum.
With stunted empathy, people seeking an explanation and apology are met with increasingly greater resistance.
And like textbook, they claim to be the victim. I wouldn’t be surprised if they are lying about receiving death threats.
What’s crazy is they could have simply:
- Apologised
- Explained the intent to reduce toxicity
- Agreed there was a lack of transparency
- Refactored their existing “enable toxicity mode” feature into a clearer, toggleable blocklist feature
But no. They were caught while they were secretly trying to play internet dictator and refused to empathise with others that were hurt and shocked to find out a tool they were using was receiving undisclosed payloads to use to censor communities and individuals.
I strongly implore everyone to leave this developer alone. Jokingly asking to be added to the list etc empowers them to continue to play the victim. They do not deserve attention.
What’s crazy is they could have simply:
- Apologised
- Explained the intent to reduce toxicity
- Agreed there was a lack of transparency
- Refactored their existing “enable toxicity mode” feature into a clearer, toggleable blocklist feature
Yes, I think there is genuinely an audience for what he was doing (or something akin to it), and it would genuinely have been a useful onboarding tool for getting a certain type of person to consider dipping their toes in the Fediverse.
But first of all it absolutely has to be separated from the safety/anti-spam filters. Bundling it with those is very malicious.
Second it must be opt-in.
Third, it must clearly say somewhere that “this anti-toxic setting is a curated block list based on my personal preferences”. There should then have been an option to use a personal blocklist instead of the developer default.
And fourth, I guess ideally this type of filter should maybe have been maintained by a somewhat more… well-balanced individual.
Anyone who thinks “yeah lgbt stuff should be hidden because we want to attract people who don’t want to see LGBT stuff” is someone I don’t want anywhere near the fediverse.
Yes, agreed. Wholesome Yuri being banned might be the most outrageous decision of them all on the banlist, for me.
Idk, “🥺👉👈” was pretty wild