As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.

you are viewing a single comment's thread
view the rest of the comments

[–] mlg@lemmy.world 25 points 1 day ago (5 children)

I'm 2 days late to checking the banlist and even though I didn't make the exact user match, I did make the regex match lol.

[–] takeda@lemmy.dbzer0.com 3 points 16 hours ago

Where is the list? When I was reading the original article the links were to GitHub and at that time he already removed/blocked the repo

[–] JackbyDev@programming.dev 4 points 21 hours ago

I don't know what the difference between foo([0-9]+)? and foo[0-9]* is. Is this just an instance of wonky code or is there actually a reason to prefer the first?

[–] Mniot@programming.dev 15 points 1 day ago (3 children)

Who wrote these regex? They are terrible:

We've got a capture-group for the numbers (the () means we're saving that part for later). Are we planning to do something with the mlg numbers? Why don't we care about the mmmberry numbers?
The capture is one or more numbers, but then it's an optional group. Write ([0-9]*) instead
We match mlg and mlg1 but not mlga because we anchor to the end ($). But not on mmmberry--that one will match "mmmberry5" (but we don't track the number!) but also "mmmberry_is_the_worst" so the enemy of my enemy is also my enemy because they share a prefix

Maybe mlg has sock-puppet accounts mlg1, mlg2, but never MLG?

[–] fake@sh.itjust.works 11 points 1 day ago

I can forgive malware but I draw the line at these regexes.

[–] Avicenna@programming.dev 3 points 20 hours ago* (last edited 19 hours ago)

probably he got them from an older version of LLMs?

[–] Die4Ever@retrolemmy.com 10 points 1 day ago

I wouldn't be shocked if he just pointed an LLM at a dump of posts and comments and asked it to write a list of regexes for stuff he doesn't like

[–] osanna@lemmy.vg 7 points 1 day ago

holy shit, I'm on the list! I wear this badge with honour!

[–] givesomefucks@lemmy.world 6 points 1 day ago

I'm pretty disappointed it's an alphabetical sort and not a chronological one...

There's so many on the list there's not much bragging rights, but I feel like I had a pretty good shot of being one of the first, at least out of accounts still active.

I remember realizing my posts didn't show up there pretty quickly after reddit migration.

Piefeed had me blocked as well, but one of the /TV mods got me whitelisted for at least their community.

It's super weird how much open source devs want to censor shit. Like, even the "opt in" block lists weird me out. Baking them into the code when real trolls can make a new account in two minutes is wild.