lemmy.world and .ml down

https://lemmy.name/post/48128

lemmy.world and .ml down - lemmy.name

Heard it was DDoS attacks, which sounds pretty likely. Reaffirms the decision to host my own instance. Hopefully they don’t try to mess Beehaw, y’all are too nice :)

Lemmy.ml became totally unreachable 15 minutes before Lemmy.world went all “Error” page. Distant Early Warning: www.youtube.com/watch?v=wrDj5XvZXX4
Rush - Distant Early Warning

YouTube
Such a good song, and ironically I can’t play the video from Canada.
Can’t watch a Rush video in Canada? I’m pretty sure there’s a law against that.
That video doesn’t work for me :( I hope you’re sorry
Rush-Distant Early Warning (Lyircs)

YouTube
That’s done the trick, thanks!

Even more of a reason to

1 - have an account on multiple instances

2 - support multiple instances. Can’t take everyone down at once!

First account: vlemmy.net - went down 2 days later Second account: lemmy.world - has been DDOSed twice and hacked once the week after making the account Third account: this one.

Which instance do you want me to tank next? Apparently I’m pretty good at it!

Do lemmygrad
Do I have to touch it :(
It’s for the greater good
The greater good!
It seems like you’re expressing something about Lemmygrad that isn’t enthusiastic and unconditional endorsement. Clearly you are a reactionary alt-right racist Nazi, and probably (definitely) a CIA plant.
Call me a CIActi, because I am dry and prickly and dependent on government funds to survive.

Don’t forget anti Chinese racist.

Oh wait, that’s just Lemmy.ml

Not as extreme. But similar experience. Joined beehaw, then they defederated from some of the main instances I subbed.

Joined another one and it had a 2 day outage.

Just built my own and use the other accounts for specific stuff (ie: beehaw is dedicated to subs only in that instance now. )

lemm.ee! The lead admin is top notch, he contributes directly to the lemmy codebase and implements his working mods there before they get accepted. He was also one of the key helpers in the first lemmy.world hack (which incidentally lemm.ee was immune to).
Does he have a way to fund his lemmy instance? I’d love to help support someone like that who contributes to the codebase
Yep! He has two methods I’m aware of currently, his Github and Ko-Fi. I asked him which he preferse, he said Github has slightly lower fees.
Sponsor @sunaurus on GitHub Sponsors

Support sunaurus, infrastructure admin at lemm.ee

GitHub

I don’t think it’s in anyone’s best interests to encourage mass users to any single instance. That “everybody get in this same room” behavior is part of the problem.

Lemmy and the fediverse depend upon users distributing themselves across many reliable instances. More users in a single instance equals more demand on that individual server and more vulnerability based on that single server’s status.

While I agree with that, lemm.ee doesn’t seem to be dominating much. It isn’t even top 3 - the top 4 in my understanding is lemmy.ml, lemmy.world, beehaw.org and sh.itjust.works. So I don’t feel guilty cheerleading for it, at least not right now.

However in terms of user experience, lemm.ee has been by far the most reliable for me. Afaik it was the first to have a truly stable version of v0.18 (he didn’t upgrade right away, but implemented a modified version of a release candidate of v0.18.1).

Lemmy.zip has been pretty boss. The admin is pretty transparent about the server and everyone the so far seem like reasonable folks.
So what really happened to vlemmy.net?
From what I heard, it just kinda poofed.
VLemmy .net's defederation and disappearance - Lemmy.ca

Note: It would be best not to visit the instance for the time being until the issue is resolved. At some point in the last 24-48 hours (approx. July 7-8, 2023) the instance vlemmy.net went down without a clear explanation, and at certain times redirected to a parked domain. This comes after a notice from vlemmy admin pyarra announcing it was forced to de-federate with another instance due to content that is considered CSAM under Irish law (link to legal definition [http://www.irishstatutebook.ie/eli/1998/act/22/section/2/enacted/en/html#sec2]) syncing with vlemmy, hosted in Ireland. The original post link disappeared with the server but here is a link to a cached version from lemmy.world [https://lemmy.world/post/1148656]. There is no official confirmation whether there is any connection between this event and its disappearance. This post on [email protected] [https://feddit.nl/post/458654] has a screenshot of the redirected domain name. An investigation by a user on [email protected] is underway [https://lemmy.world/post/1232070]… their findings were as follows: * [Information from 1AM EST Jul 9th] vlemmy is still “up” and intermittently accessible. It is running “slow as hell” * Stripe, Librepay, and Github accounts are all closed. Closure date unknown * Reddit account still exists and has been messaged * No mentions of the instance in Element.io [http://Element.io] chats but still searching * They have almost certainly NOT lost their domain. Who.is [http://Who.is] historical records show no ownership or nameserver changes. * The user updated the post stating “I’m working through about 40 different potential leads right now” * The user is requesting help from the community finding an image from the kerbalspaceprogram community on vlemmy potentially left in someone’s browser cache. Please be careful in ensuring content on lemmy.ca [http://lemmy.ca] follows the site rules and Canadian law, so as not to get this wonderful server in trouble either!

can’t down everyone at once

Well not until the next catastrophic federation bug gets discovered and abused 💀

Federation will prevail! 🖖
Are we also getting DDoSd? I’m getting constant timeouts and json errors here over the last one hour or so.
Beehaw was also down for me. Ended up opening a new account on Lemmy.ca since Beehaw seems to be taken down so often :(
The weird ones are the every hour on the hour outages. It seems like there’s some scheduled task on Beehaw’s server that’s restarting lemmy
Yeah, it’s kind of annoying. I really like Beehaw but it sucks to get connection errors regularly
I always access from a smaller instance. I didn’t even notice I was looking at older content.
I hope lemmy.world comes back.
Why wouldn’t it?
Two sites went down. I’m hoping for one to come back up. Read between the lines.
Large instances need to get Cloudflare DDoS protection because it will only get worse.
This does wonders at keeping the instance up, but breaks the mobile apps and federation functionality sadly ☹️
Oh Damn. So the community still needs to figure it out…
My instance is using Cloudflare and has no issues with federation or mobile apps (I sent this reply with Connect). Those services should not break under Cloudflare.
Sorry I should have been clearer in my original comment - the DDoS mitigation features of Cloudflare specifically affect the apps and federation, so as long as you aren’t under attack it’s business as usual
Ah fair enough, I think most would be fine with that compromise tbh
But you can still DDoS with federation. I’m not sure how we’d avoid breaking the idea that anyone can make a server and start federating immediately. Federation naturally is an automated task, so can’t get past this protection.
Hello small instance friends :)
Normally I check lemmy.ml when lemmy.world is down. It was fine in the attack that also took down lemmy.blahaj.zone, so I guess I thought it was more secure because it is The Tech Insurance. I’m sad it let me down this time lol
i bet there's a lot of people are regretting deleting their reddit accounts lmfao
Yeesh lmfao'ing in every post, maybe book a visit with a proctologist.

Why?

There are over a thousand lemmy instances. Two of them are being DDOSed. The rest are more or less fine.

That's part of the beauty of the fediverse. You're not locked in to anything. If one instance goes down, you can just access it through another.

I would think that the most notable thing that will come out of today is a spike in new accounts at a bunch of other instances. The fediverse as a whole will just keep chugging along.

You don't even need an account if you just want to browse.
Love that I can hop over to kbin (or vice versa) when this stuff happens.
plot twist: the ddos was organized by beehaw
damnn this is why I can't see it. why would it happen once I'm trying to access them...
Beehaw was having a lot of 502s over the last few days. Not sure if DDoS or something else, though.
ha, i went to check wefwef app when i woke up, updated it like ok that was why. no content after. realizing I'm enjoying the lemmy/kbin stuff now and would be sad without it. i try to browse reddit but I don't want to waste my time there. I enjoy being a part of these cutting edge projects.
A communications disruption can mean only one thing: invasion.
I get this movie reference. We need a baseball bat and a glass of water!
Could this be related to that massive hacking attack from earlier, where a lot of the big instanes were hacked?
I don’t know man, I was just using a Star Wars quote for shits and giggles.
Someone salty against Lemmy or just being a general pain in the ass.
lemmy.ml is back up! editing the posting title