so recently my server has unintentionally been inside a DDoS of my own making. any smaller webserver i point my domain at becomes instantly crippled. let me explain the situation...

so i make minecraft mods, right. well, at one point, i made this library mod called CICADA, that has a bunch of shared utilities i use. this is pretty common practice

then once i had that, i realized, hey! why not make a funny thing in this library mod that gives my own minecraft character a cape when anyone sees me! that would be kinda neat.

it couldnt just be simply hardcoded though of course, so i had a genius plan. i would put a simple "api" of sorts up on github pages that would have directories for all the players that i want to have capes. the mod can do a quick http request in the background, and if it doesnt return a 404, load the cape from the png thats returned to display on the player

now you might wonder, this is a perfect idea is it not? how could this possibly have caused any issues? ...yea i think you can roughly guess where this went

for the github pages thing, i used the one domain i had available at the time:
enjarai.dev. now, you may notice that this currently hosts my personal website. which is no longer on github pages.

when i made this migration, i realized something quite concerning. my mods are
popular.

my servers cpu was consistently pinned at 100% over 4 cores, and i was getting...
checks notes thousands of GET requests a second. 24/7. neither me nor my server were very happy about this as you might imagine

for quite a while, i've honestly just kinda... put up with this. there didnt seem to be anything i could do, short of just not using my domain or migrating back to github, neither of which i wanted

its been getting worse and worse though, my disk is filling up with access logs within literal hours after clearing them (so i had to disable those) and im running out of bandwidth quota on my VPS every month. something needs to change

so i shared my problem with a bunch of friends last night, and we brainstormed the hell out of this. after a lot of ideas, including potentially sending malformed PNGs to crash people's games and force them to update the mod (which turned out not to be feasible), i landed on a pretty decent solution i think

everyone using an old version of CICADA will now see this cape. on every single player

i really hope this works, cause if not, im kinda out of ideas

will keep yall posted

@enjarai how come was it not feasible to send crash PNGs?

couldn't you do something like spark.png from https://www.bamsoftware.com/hacks/deflate.html

Biggest image in the smallest space

@enjarai also, if you're feeling silly, you could probably set your mod up to DDOS the servers of some alt-right organization or something. cause this pain to the people deserving of it. would there actually be a problem with that?
@soop @enjarai for one, it’s illegal to DDoS people on purpose
@_r @enjarai the question is whether you can get away with it cuz then it doesn't matter does it :3
@soop @enjarai I don’t think putting oneself at risk for petty bs like this would be worth it either way
@_r @enjarai eh i wouldn't call it "petty". ddosing fascists is always based
@soop @_r@donotsta.re im not really a believer in vigilante justice. i wont be intentionally ddossing anyone