LemmyToday

262 readers

1 users here now

If you experience issues or problems with this instance (lemmy.today), this is the place to discuss them. Or if you just want to ask questions about how something works. Anything related to the instance or lemmy itself.

founded 2 years ago

MODERATORS

mrmanager@lemmy.today

Another ddos attack... again. :) (lemmy.today)

submitted 1 month ago by mrmanager@lemmy.today to c/lemmytoday@lemmy.today

22 comments fedilink hide all child comments

The attackers found another slow db query to exploit, so had to put some temporary measures in place.

Will post more details later!

This time they actually took down the instance for several hours.

you are viewing a single comment's thread
view the rest of the comments

[–] mrmanager@lemmy.today 3 points 1 month ago (1 children)

I think I figured it out. Has to do with my mitigation of the attack yesterday.

Now new comments and posts are federating to other instances again, but the old comments and posts, im not sure they will federate.

Attackers were hammering a certain endpoint to cause the database to be 100% busy in their attack. So i blocked that endpoint, thinking it would not have an effect on federation. Chat gpt also agreed that it wouldnt.

Chat gpt was wrong. :) So I changed from blocking it to caching it, which is at least going to help prevent further attacks to a degree.

Thanks for letting me know!

[–] AmbiguousProps@lemmy.today 2 points 1 month ago* (last edited 1 month ago) (1 children)

Thanks for the fix! I've reposted some of the content and it seems that federation is working on these. Hopefully I don't end up spamming by accident!

Edit: it seems like I could have just edited the posts and forced federation that way. TIL!

[–] mrmanager@lemmy.today 3 points 1 month ago

Ah, thats a good idea actually, just edit them. :)