• SuddenDownpour@sh.itjust.worksEnglish
    130·
    11 months ago

    Turn the question back, actually. Do the DDOSers even think they’re achieving anything relevant, beyond being a bit annoying? .world is down from time to time, wow, how terrible. It’s not like I can’t log onto any other server and interact with world’s channels and threads from there, only to have my posts and upvotes become globally available as soon as world is back- Oh, wait, that’s exactly how it works.

    • socsa@lemmy.ml
      14·
      11 months ago

      The ironic part is that unless they have access to a botnet or are operating their own colo facility, they are probably paying more to run the attack than the target is.

      • SuddenDownpour@sh.itjust.worksEnglish
        38·
        11 months ago

        Each instance keeps a local copy of the communities they’re federated with. Users of that instance interact with the local copy, and instances communicate with each other to tell what’s going on.

        This means that, if .world crashes at 5PM, and you have an account on lemm.ee, you can go to lemm.ee’s local copy of world->worldnews, find a thread started at 4PM, comment on it, and other lemm.ee users will see and upvote/downvote your comment.

        When .world is back on at 7PM, lemm.ee will tell it: “Hey, Cold_Brew_Enema said [Thanks a lot for the gold kind stranger] and got 6 downvotes”, and .world will update the thread with your comment and downvotes for users of all instances to see.

        This is my understanding of how it works, and I’m not familiar with the actual code, but it seems to be close to reality.

        • Cosmos@lemmy.today
          2·
          11 months ago

          There may be some things that don’t get synced if the instance holding the pending federation messages also goes down or restarts because AFAIK they are stored in memory, not in persistent storage.

        • z3k3@lemmy.pt
          11·
          11 months ago

          I’m not sure it works like that but it makes sense that way.

    • idunnololz@lemmy.world
      51·
      11 months ago

      From the recent update shared, it seems like the ddos is coming from inside the hoose (ie the ddos attacker might be another lemmy instance). In other words the point of the ddos appear to be to cause people to move off of lemmy.world. so in a way it is working. A lot of people are telling people to move off lemmy.world.

  • AndreTelevise@lemm.ee
    49·
    11 months ago

    People, if an instance is crumbling, sign up to another instance! When you are able to use lemmy.world again, use lemmy2opml/lemmy_migrate (or any other tool that works, there’s a list on the Awesome Lemmy Github page) to migrate your followed communities to the new instance.

    • AbsolutelyNotABot@feddit.it
      112·
      11 months ago

      I don’t think the problem is much on the identification side, but on the communities one

      Like, I can’t access any community on .world while the instance is down

      • lutillian@sh.itjust.works
        17·
        11 months ago

        You actually can, you just append @lemmy.world to the community name when accessing from another instance that’s federated with lemmy.world and once lemmy.world comes back up your contributions will be there. Any instance that’s federated with the instance your posting from will be able to participate in the discussion with you for that matter. The only thing you can’t do with a community when the host instance is down is subscribe to it. It would still get added to your subscriptions though if you try, the hosting insurance just won’t know until it comes back up and eats through the outboxes of federated instances to “catch up”.

        Edit When it does come back up it’ll also get any messages that are in federated outboxes as well so your posts will ultimately show up on the host instance, just posted by your alt account

        • kameecoding@lemmy.world
          3·
          11 months ago

          wait so how does this work on a technical level?

          say I am part of a community of /c/weirdstuff that’s on lemmy.world.

          if lemmy world is down how do my comments get to lemmy.world? are they stored on whatever instance I am registered on and then synced to lemmy.world once it’s up?

                • AbsolutelyNotABot@feddit.it
                  11·
                  11 months ago

                  Ok but the question that arise is:" if the community is duplicated on every server that access it, isn’t it a little bit of a waste of computational power and disk space ?"

                  Expecially considering now Lemmy is pretty small, but in the future you could hopefully have a much larger audience

              • 🇵🇸 Free Palestine 🇵🇸@lemmy.ml
                1·
                11 months ago

                Ok but how other people will know I replied to a comment or posted if the community on the original server is down?

                Not sure if other instances can communicate between them to get updated before the original server is up again and everything gets updated.

    • Rocketpoweredgorilla@kbin.social
      63·
      11 months ago

      Pasting my comment from another thread.

      From what I understand a user(Lmao/Angled) was “sub-lemmy camping” (took up thousands of popular sub names and wasn’t doing anything with them) so lemmy world banned him from that instance. He had a hissy fit and “vowed revenge” and has been attempting to do as much damage to .world as he/they could since. I can’t find the original post but https://old.lemmy.world/post/943832 and https://old.lemmy.world/post/1720870 has a bit of detail.

    • designatedhacker@lemm.ee
      5·
      11 months ago

      Up to date post. https://old.lemmy.world/post/2923697

      Doesn’t give much on who and why, more on what/how along with dispelling some myths.

      Whoever is doing it is very quickly walking through a list of expensive queries to use in their DDoS attacks. Lemmy.world is playing whack-a-mole instead of proactively rate limiting/mitigating expensive queries. It may be that all their time is spent diagnosing and fixing with none left for proactive fixes.

      The fact that the attacks are evolving and always hitting expensive queries implies that it’s a moderately skilled person/group familiar with the lemmy codebase.

      You can speculate on motives as well as I can.

      The net effect will be a more robust server and hopefully that code/knowledge is disseminated to other instances.

  • Fish [Indiana]@midwest.socialEnglish
    142·
    11 months ago

    Here is some useful information for people wanting to move instances. For a list of instances, along with with stats for those instances:

    https://fedidb.org/software/lemmy or https://lemmyverse.net/

    Also, tools for migrating instances:

    https://github.com/CMahaff/lasim (easy) - Latest Version Download (just select your OS type and run the program)

    https://github.com/wescode/lemmy_migrate

    https://github.com/Ac5000/lemmy_account_sync

  • 🇨🅾️🇰🅰️N🇪@lemmy.world
    73·
    11 months ago

    I don’t know if it’s ddos attacks or if it’s a “lemmy hug of death” way to many users overloading the servers network, we need a bigger Internet pipe?

    The site usually works for me during off hours early morning usually best.

    • Imgonnatrythis@lemmy.world
      9·
      11 months ago

      I really don’t get the sense that Lemmy is being overwhelmed by users. Things be pretty quite in these here parts. If this kind of volume is bringing down what I thought was one of the main instances, Fediverse seems kind of doomed. I’ve long been worried about scalability. I’ve tried other instances and had issues. Each time I think should I give up or hop instances, make a new account etc. People will flock to the biggest most stable instances, but if they can’t afford fancy hosting, everything starts to crumble