cross-posted from: https://quokk.au/c/fediverse/p/1066667/tesseract-dev-injects-malicious-code-into-browser-to-illegally-ddos-the-dbzer0-instance
As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.

122 Comments
calliope@retrolemmy.com · 119 pts · 18d
Way to prove you were an asshole literally the entire time.
At first the douchebag tried to play it off like they were doing a good thing by trying to make the fediverse easier to navigate for newcomers.
…by DDOSing an instance? Sure, Jan. What a little coward.
prole@lemmy.blahaj.zone · 11 pts · 17d
It blocked the entirety of Blahaj. That should have immediately informed everyone exactly what it was for
slazer2au@lemmy.world · 93 pts · 18d
Surely that is actually illegal in some places.
ProbablyUnwise@anarchist.nexus · 40 pts · 18d
unless you live on the moon, which legally cannot be "owned" by any country and therefore isn't under the jurisdiction of any country, then this is, in fact, illegal in every place.
slazer2au@lemmy.world · 16 pts · 18d
No doubt there are some nations that don't have rules for this like developing nations.
untorquer@quokk.au · 6 pts · 18d
Well there's no way they could pass legislation at the breakneck speeds of the U.S. Congress.
Like I'm pretty sure e.g. Russia wouldn't enforce law against a DDoS attack when it's targeted at an EU/NA based service, but it's probably still unlawful.
frongt@lemmy.zip · 3 pts · 18d
Antarctica is also not owned by any nation, but generally nations claim certain territory and would enforce their laws there
unwarlikeExtortion@lemmy.ml · 1 pts · 17d
Do they really? Since there isn't any permanent base there (unless we believe in the Nazis in Antarctica conspiracy), any law enforcement is done within international maritime law - meaning no claim necessary.
rhombus@sh.itjust.works · 10 pts · 17d
If he’s US based it’s very illegal. DDOSing can carry a prison sentence of up to 10 years. His hosting provider already took it down, and I’m pretty sure they’re obligated to report criminal activity on their networks, so this guy is probably fucked.
plantfanatic@sh.itjust.works · -89 pts · 18d
So is what everyone was doing to them, would need to press charges against everyone.
Quokka@quokk.au · 67 pts · 18d
Making memes and fun of a shitty block list is not illegal.
Cyber crime, as awesome as it sounds , however is illegal. Not that we would want to bring cops into anything.
hash@slrpnk.net · 7 pts · 18d
Yeah I'm actually hoping they aren't prosecuted. Cybercrime sentences are insane and this is clearly a case where someone needs help, not prison.
eugenevdebs@lemmy.dbzer0.com · 8 pts · 17d
Nah, you don't get away with actions when you take the mental energy to do them instead of just logging off. No one forced him to DDOS, he chose to. Actions have consequences.
Malyca@lemmy.zip · 1 pts · 18d
plantfanatic@sh.itjust.works · -61 pts · 18d
? What do you even know of the story if that’s your take…? They were being doxxed, getting death threats, harassed, etc. all of these are cybercrimes….
Lemmy users never want to be held accountable for their actions, but love calling others out *shrug*
If you think it was just jokes and memes, you need to actually read into the details
What they did isn’t okay, but the response to that from the Lemmy users was equally unacceptable, and their response here is the middle finger.
They know nothing is likely to happen, because who’s gonna press charges? The people that also did illegal shit that started it…? Seriously lmfao.
anotherspinelessdem@lemmy.ml · 47 pts · 18d
Uhhh...Evidence?
plantfanatic@sh.itjust.works · -56 pts · 18d
Uhh… their goodbye post where they lay it out? That’s what this post is based on… and taken from…?
Or are you only seeing the one side of the story you choose to see and ignoring the other? Sounds typical of Lemmy users to be honest, so that’s rhetorical.
Quokka@quokk.au · 55 pts · 18d
I don't think anyone trusts a word they say without legitimate evidence. The user has been shown to act unethical and make things up.
plantfanatic@sh.itjust.works · -52 pts · 18d
And somehow I knew that was gonna be the response *shrug*.
Online people constantly do this, it’s joked about since it’s a real thing that ALWAYS happen. If you think Lemmy users are innocent this singular time, is there some Bridges for you to buy.
Prunebutt@slrpnk.net · 31 pts · 18d
You mean the homepage that tries to ddos a lemmy instance if I access it?
Yeah, no idea why I don't want to access that page. /s
plantfanatic@sh.itjust.works · -32 pts · 18d
There’s posts and screengrabs about it, never said you had to go there.
I never went to the webpage and have found this out.
Susaga@sh.itjust.works · 28 pts · 18d
One side of the story has evidence. I'll listen to that side.
Maeve@kbin.earth · -18 pts · 18d
Never played poker.
plantfanatic@sh.itjust.works · -41 pts · 18d
One side has the general internet on its side. We already know what they do.
What other evidence is needed? Any they provide would just be called fake, but the internet always does this. I don’t believe that Lemmy users would be innocent in this singular incident, that’s just foolish thinking.
There’s nothing that will meet your arbitrary standards here, but don’t go playing dumb, you just make the rest of Lemmy users looks bad with the rest of you.
This is all universal “you” for anyone involved in this drama on either side.
Taleya@aussie.zone · 24 pts · 18d
You mean the one they baited for maximum draw to try and DDOS?
OwOarchist@pawb.social · 13 pts · 17d
The very same 'goodbye post' that contained an illegal DDOS attack? That one?
m4ylame0wecm@lemmy.zip · 31 pts · 18d
The response to the illegal actions then are between the Tesseract dev and law enforcement.
"Was being doxxed" or whatever other claims were made, are not, and never will be, legal justification for starting a cyber attack on anybody.
Maeve@kbin.earth · -12 pts · 18d
Because the law is always on the side of free speech, especially when it contradicts the government.
https://dictionary.justia.com/subversion
plantfanatic@sh.itjust.works · -35 pts · 18d
Someone needs to press charges for law enforcement to do anything or even get involved. And to press charges you need to be “involved” or have been affected.
And that person is gonna get called to court and have their history exposed, courts don’t like people who aggravate others than go and waste courts time with charges.
Lawyers get disbarred for that crap, it’s illegal itself.
You can’t provoke someone in to shooting you than press charges, that’s what this would be like.
IrateAnteater@sh.itjust.works · 16 pts · 18d
That depends entirely on what you mean by "provoke". The only time you can ever shoot someone and not go to jail for it is if you can prove it was self defense, and the threshold to prove self defense can be extremely high, depending on jurisdiction.
And for every other type of offence, doing something illegal in response to someone doing something illegal to you just means you both go to jail. "He did it first!" never even worked in grade school, not sure why you expect it to work as an adult.
TrickDacy@lemmy.world · 7 pts · 18d
Tagged you as "ai simp" a while ago. Seems like you're full of shitty takes. Also... "Than go..." lol
Susaga@sh.itjust.works · 8 pts · 18d
Than Go was the guy who painted sunflowers, right?
OwOarchist@pawb.social · 6 pts · 17d
lol, you're even wrong about this part.
Law enforcement can do things and get involved any time they're aware a crime has occurred. 'Press charges' is a nonsense term with no actual legal meaning. What they might need is for someone to report the crime and make them aware of it. But once they're aware of it, it's their choice whether they want to investigate or prosecute anything.
And anyone can report a crime. You don't have to be involved or affiliated.
Count042@lemmy.ml · 1 pts · 17d
TrickDacy@lemmy.world · 27 pts · 18d
Why do people so often assume total pricks are telling the truth? I doubt anyone here is cheering on death threats/doxxing. I find it hard to believe they actually happened. He provided zero evidence of it.
Taleya@aussie.zone · 4 pts · 17d
I mean considering they've had zero qualms name dropping entire instances, users, communities the fact there's zero pillorying of those sending "death threats" looks suuusss
But if they drops names it's easy to disprove
LibertyLizard@slrpnk.net · 3 pts · 18d
Eh there's always that one guy that does shit like this, unfortunately. I'm not saying it is true but it wouldn't surprise me.
TrickDacy@lemmy.world · 15 pts · 18d
Maybe it did happen, but admiral Patrick did nothing to convince us and given the whole issue surrounds him secretly doing shit, I'm less inclined to believe it.
Coelacanth@feddit.nu · 10 pts · 18d
Trusting the victims and healthy scepticism are always at odds with each other, but in this case AdmiralPatrick has already been caught in bad faith arguments before where others have had receipts and he had nothing.
It wouldn't entirely suprise me if some nutcase actually did send him some death threat, but in this instance I'm not going to just take his word for it.
yuri@pawb.social · 14 pts · 18d
i’ve been having a grand ol’ time skimming the tea threads and i haven’t seen a single instance of death threats or doxxing. not that it’s not happening, but that’s FAR from the general public response here.
Sibshops@lemmy.myserv.one · 12 pts · 18d
The people who "started it" started what exactly? All he gave were vague claims of xenophobia and hate.
Malyca@lemmy.zip · 9 pts · 18d
I don't take the word of proven cyber criminals over their victims, as is the case here. If he provided proof, I would, but he didn't.
PM_me_your_doggo@lemmy.world · 7 pts · 18d
Well, yeah, people who done that should also be investigated. How does this contradicts slazer2au's point?
plantfanatic@sh.itjust.works · -29 pts · 18d
I never said it did? I just said Lemmy users should look at themselves first, they did illegal shit first.
Or are you taking my response to quokka and attributing that to my first response to slayer? Because that’s not the same discussion. So don’t take that out of context.
MentalEdge@sopuli.xyz · 16 pts · 18d
"Lemmy users" is pretty vague.
Unless you are accusing the specific users you're replying to of the crimes you're bringing up, what's the point of responding to them?
I didn't do any of the things you're bringing up. Why would a response asking "lemmy users too look at themselves" be relevant to me?
plantfanatic@sh.itjust.works · -26 pts · 18d
Does the concept of “context” not exist to you?
Specific topics don’t need to specified when it’s contextual conversation.
That’s what this is, you’re of course free to take it wrongly and interpret that way.
KairuByte@lemmy.dbzer0.com · 7 pts · 17d
By definition, you can’t privately doxx someone, and I’ve found no evidence that anyone doxxed him. Sounds like BS.
If true, yeah that’s a crime. He should report it.
This is too vague. I dint doubt he got messages about what a dick he was, secretly forcing his ideals onto others without letting them know. I 100% believe that happened, but I 100% disagree that is harassment. I also 100% believe he would call it harassment out of convenience. He definitely seems like a very fragile individual.
I do need to ask, if I claimed some random thing while ddosing you, would you believe me?
slazer2au@lemmy.world · 43 pts · 18d
That does not excuse deliberately deploying a ddos tool.
Maybe if he left like he wanted to and didn't make 3 blacklists people would not be calling him out on his shit.
Those actually doxing him and no doubt calling for his death are also in the wrong.
damnthefilibuster@lemmy.world · 12 pts · 18d
What’s the tesseract drama?
Susaga@sh.itjust.works · 27 pts · 18d
Tesseract is a lemmy frontend a lot of people use. The dev secretly added a blocklist to the software that hides ANYTHING they don't approve of, which includes: discussing zionism, discussing mod abuse, discussing billionaires, a lot of generic news communities, the Wholesome Yuri community, the dz0 instance, and a LOT more. It also includes over 500 users who didn't do anything worthy of a ban (at least of that scale).
It's nakedly a single person trying to force their own agenda. They got called out, and they took it as well as you could expect. Which is to say, they're crashing out HARD.
WalleyeWarrior@midwest.social · 14 pts · 18d
Don't forget he blacklisted any communities about "identity politics" I.e. LGBTQ+ spaces
Susaga@sh.itjust.works · 14 pts · 18d
And any discussion of pedophiles, or the epstein class. Seriously, you can keep looking through that list and it'll keep getting worse and worse, but I had to click "reply" at SOME point.
frongt@lemmy.zip · 8 pts · 18d
And ACAB, beans, the word perchance, and 👉👈.
Truly, the worst of the worst.
atopi@piefed.blahaj.zone · 1 pts · 17d
Have they ever said "identity politics"?
I only know of them banning lemmy.blahaj.place and saying its because the instance allowed people to talk about hurting other people (i assume its referring to the posts about attacking fascists)
WalleyeWarrior@midwest.social · 2 pts · 17d
It was literally in his manifesto when he was first called out on it.
atopi@piefed.blahaj.zone · 1 pts · 17d
Do you have a link to it or anything? Im curious to read it
damnthefilibuster@lemmy.world · 2 pts · 17d
Huh. Now I’m curious if I’m on the list. 😂
sorghum@sh.itjust.works · 13 pts · 18d
https://lemmy.world/post/49947838
markz@suppo.fi · 10 pts · 18d
What was everyone doing to whom?
amio@lemmy.world · 2 pts · 18d
Tesseract guy, I presume
goferking0@lemmy.sdf.org · 31 pts · 18d
In response to this startrek.website defederated from dbo. Also weird how the framing of the defedederation lines up so well to what ap and Kirk would say.
https://startrek.website/post/42709922
Mubelotix@jlai.lu · 28 pts · 18d
Yeah this is complete bullshit, we french have defederated from debvee.org which is where the bad guy actually was
db0@lemmy.dbzer0.com · 6 pts · 17d
Dubvee.Org was taken down anyway
Flatworm7591@lemmy.dbzer0.com · 4 pts · 17d
You folks are the best!
alapakala@quokk.au · 30 pts · 17d
It's funny that he didn't DDoS the Nazi instances he sprinkled in his blocklist.
Always the critics of fascism that get the short end of dark triads. ╮(︶▽︶)╭
OwOarchist@pawb.social · 17 pts · 17d
I think he might be focused on dbzer0 in particular because they're the ones who first exposed his secret censorship.
Probably not a political choice, but a personal grudge. If a nazi instance had been the first one to expose him, he probably would have targeted them.
MysticMushroom1776@lemmy.dbzer0.com · 13 pts · 17d
It's totally revenge. Db0 is the one who exposed him and from his perspective, ruined his reputation.
It's all his fault of course but he's not going to take responsibility for his own actions. We wouldn't be here in this thread now if he was.
Maeve@kbin.earth · 4 pts · 17d
That's why all this noise about being illegal is noise. Unless he's done something to upset their faction, the only ones getting prosecuted are the ones who retaliated. Maybe he would get prosecuted, off chance. It's wild to me how they think dissenters wouldn't also be prosecuted.
alapakala@quokk.au · 6 pts · 17d
Considering many nations are unmasking their fascist tendencies, he’s got plenty of boots he can kiss for a good dismissal.
As anarchists, we are well aware how laws oppress the have-nots. So he absolutely knew DDoSing db0 was the least possible retaliatory target.
Dave@lemmy.nz · 22 pts · 17d
Do we have fediverse historians writing this stuff down? I feel like we need a knowyourmeme for fediverse drama.
atopi@piefed.blahaj.zone · 21 pts · 17d
How does dbzer0 end up in every controversy on lemmy ever?
Half the time they arent even the controversial ones in the situation
Taleya@aussie.zone · 20 pts · 17d
Because they host ye power tripping bastards, which lists mod abuse
atopi@piefed.blahaj.zone · 1 pts · 17d
Most arent even related to that community
Taleya@aussie.zone · 10 pts · 17d
They are, tangentially.
There's a lot of purity politicking and porridge-only level censorship on lemmy. Db0 tends to allow adults and hyperbole. So you have this combination of wildly overstepping mods / upper tier users used to throwing their weight around "ummmaaa you said a naughty word!!" coming face to face with an entire instance of people they can't control and who don't really care either, with a comm that documents mod abuse and said mods lose their everloving shit at the loss of control.
goferking0@lemmy.sdf.org · 10 pts · 17d
Because most of the time the controversy is there precisely to make db0 look bad.
CosmicTurtle0@lemmy.dbzer0.com · 17 pts · 18d
I am OOTL. Can someone give me a quick version of what's going on here? I saw that tesseract on db0 no longer worked and figured it was because they stopped developing it.
But it sounds like they continued and is now attacking db0?
altkey@lemmy.dbzer0.com · 21 pts · 18d
My explanation from days ago: https://lemmy.dbzer0.com/comment/27246701
Yup, now it's entering new phase.
CosmicTurtle0@lemmy.dbzer0.com · 7 pts · 18d
Thank you!
I am way too fucking lazy to see if I'm in the user list. I'm going to assume I am. 🤣
altkey@lemmy.dbzer0.com · 8 pts · 18d
I wasn't, but our instance was, meaning both of us could've been invisible for all 3 users who still use Tesseract.
Tyrq@lemmy.dbzer0.com · 14 pts · 18d
Remember kids,
When everyone else is the asshole, it might be time to consider the common denominator
calliope@retrolemmy.com · 4 pts · 17d
When everywhere you go it smells like shit, check your shoes.
Tyrq@lemmy.dbzer0.com · 2 pts · 17d
I'll take that one for later use lol
apfelwoiSchoppen@lemmy.world · 10 pts · 18d
The link from which this is cross-posted has been deleted, I think.
frongt@lemmy.zip · 2 pts · 18d
Works for me
apfelwoiSchoppen@lemmy.world · 2 pts · 18d
Doesn't work in my app nor in a fresh browser.
redrumBot@lemmy.ml · 2 pts · 18d
It works for me. This is the same post from your instance https://lemmy.world/post/49947403
apfelwoiSchoppen@lemmy.world · 2 pts · 18d
Thank you. My brain is full of cruft and should have known the instance would have one too!
SCmSTR@lemmy.blahaj.zone · 7 pts · 17d
Very much "fuck you in particular"
sorghum@sh.itjust.works · 19 pts · 17d
You don't know the half of it. When he "quit" the fediverse last year anyone that downvotes his post was banned from dubvee on his way out with this as the ban message
Very much a manchild having another temper tantrum.
Ophrys@lemmy.dbzer0.com · 8 pts · 17d
Oh wait is this the dubvee guy? I was less active before on lemmy but anything that had a dubvee handle was the was just pure liquefied brainworm
SCmSTR@lemmy.blahaj.zone · 3 pts · 17d
starik@lemmy.today · 6 pts · 18d
Join Lemmy for all your Tesseract dev news! Tesseract dev 24/7/365! Can’t get enough Tesseract dev? You’ve come to the right place!
AlteE@programming.dev · 5 pts · 18d
Aren't there alternatives for the front end or why then still everyone uses it?
x00z@lemmy.world · 9 pts · 18d
I use Alexandrite on the desktop and Voyager on my Android phone.
There's a lot of alternatives.
AlteE@programming.dev · 4 pts · 18d
Okay, TIL moment for me. How do I check which front-end I use in browser?
x00z@lemmy.world · 6 pts · 18d
You are on the programming.dev instance and if you go to their website it uses the default Lemmy-UI.
In the instance "sidebar" at programming.dev it says this:
These are actual links but I just copied the text.
If you ever clicked a linkt here and are now using the subdomain to browse, you can probably figure out what UI you use. For example, Alexandrite would be https://a.programming.dev/
If you use https://alexandrite.app/ directly it can login to whatever instance you are on btw.
AlteE@programming.dev · 1 pts · 18d
Thanks for info. Wasn't paying attention to it before.
x00z@lemmy.world · 1 pts · 17d
No problem. Enjoy. Just don't use Tesseract, lol.
LibertyLizard@slrpnk.net · 2 pts · 18d
Probably some number of people who either didn't care or didn't hear the news.
Aatube@lemmy.dbzer0.com · 1 pts · 17d
well, it's a fork of Photon, which was always working
supersquirrel@sopuli.xyz · 2 pts · 18d
What losers
jxk@sh.itjust.works · 1 pts · 18d
Don't worry, it's not 2000, it's only 1996
/s