So this was a whole shit show that as of now has cost me 2 days of investigation, clean-up, mitigation, will likely cost me more time & also feels extremely crappy all in all.

I'm just glad I didn't base any *really* important decisions on those manipulated numbers, that would have been REALLY bad.

Now I have to live with knowing that most of the growth I saw the past 2 years was likely faked, which feels quite terrible tbh. Feels like not doing a good job after all.

https://octoprint.org/blog/2024/06/28/stats-manipulation/

OctoPrint's anonymous usage stats were manipulated

OctoPrint's anonymous usage stats were manipulated, here's what we know

OctoPrint.org

@foosel I know from Ad click fraud and Boaty McBoatface that if you give people an inch they’ll take a mile- but sheesh, pumping a plug-in a few places up the stats page is… just why!?

I guess it’s at least a form of flattery that they found your project important enough to manipulate… 😬

But don’t sweat it too much- growth is a poor substitute to consistently putting out an awesome tool that people love and use! ❤️

@foosel I know it’s closing the door after the horse has bolted and volunteering unprompted suggestions. But I am incapable of leaving (literal) shower thoughts unsaid, so: you could remove the ranking from the top ten and shuffle them randomly on the public facing side 🤣

@gadgetoid The top ten list was a requested feature by several plugin devs, and I totally get it, it's exciting to watch the movement on that list, especially if you have some skin in the game (and DON'T manipulate the data/have a fanboy manipulate the data... yes, I'm angry still).

But @do3cc just suggested to add some filtering functionality to be able to filter out commercial plugins, and I think that's a great idea that I'll look into implementing.

@foosel @do3cc now that’s a great idea!

Stats for devs is something I’d have a private log in for, but that would be way more effort and less conceptually “open source.” 🤣 I’m deeply stats pilled from my harrowing time at an affiliate marketing co 🫠

@gadgetoid @do3cc I keep everything that I can static, so there's no login on the plugin repo or anywhere else on octoprint.org apart from the forums ;) The only thing I have going is a small oauth frontend-only forwarded thingy so that people can log in their GitHub account and use it to star plugin repos right from within the repo, but tbh I'm not sure that many even use that.

@foosel @do3cc sensible! Obviously the most effective way to prevent this would be for users not to take liberties and game the stats!

Interesting to know how you’re set up though. And now I’m side-eyeing a Bambu Lab plugin 🤣

@gadgetoid Jim Neill aka jneilliii (the man of the many plugins) AFAIK has one brewing already ;)