DDos (Distributed Denial of Service) attack against BlueSky a few days ago: The whole network goes down.

DDoS against mastodon.social today: Lots of users on that instance impacted, the rest of the Fediverse keeps on running, my instance doesn't really notice, messages will be queued up until mastodon.social is reachable again.

Both networks claim to be decentralised and federated. You decide :)

And to be very clear about this: DDoS attacks are stupid and cause a lot of work. My sympathy goes to the sysadmins on every side, including those at the upstream network providers who have to deal with this, often at weird times. It is exhausting work and I really don't want you to have to do it, but hey, that's the world we live in, unfortunately. Sys Admin Hug!
As the "not all of BlueSky" folks are occupying the replies, I will simply stop replying. Please continue to discuss, disagree or accept that people like me only have that much time and energy to invest.
@jwildeboer true. This shit is an unnecessary hassle for staff and disrupts daily routine. Ongoing projects have to wait and/or run into deadlines. And for what? Some kid that wants to cosplay as l337 h4xx0r

@jwildeboer

And also, GotoSocial doesn't really notice, nor Pixelfeld, nor Friendica, nor so many others that I can't really list them all.

#TheRevolutionWillNotBeCentralized

@jwildeboer If I look hard I can see it in the sidekiq queue latency metrics.

@jwildeboer I get people wanting to feel good about their decision to be here instead of on Bluesky, but given all the work going into building up independent ATProto infrastructure, I think we'll be better off focusing our energy elsewhere.

https://stefanbohacek.online/@stefan/116126040489956521

@stefan Everybody should invest their time and energy where they feel comfortable. For me that is ActivityPub. My observation is that ATProto/Atmosphere/BlueSky still has a lot of catchup to do to reach the level of decentralisation the Fediverse already has. Is all.

@jwildeboer

"Everybody should invest their time and energy where they feel comfortable. "

I agree!

"still has a lot of catchup"

My point is just that there is enough momentum for things to change drastically even over the next year.

Won't harp on this further, I just don't want people to get caught by surprise.

@jwildeboer @stefan Considering that Fedi has existed since at least 2009 (albeit on a different protocol at the time), a lot more work has gone into it than ATProto. Stefan's argument doesn't hold water. :P

@jwildeboer Eg. because of the growing decentralization, one issue that is coming up over there is people linking to their post from non-Bluesky apps.

And you can't use the "copy the URL into the search" trick we have on here.

So them making progress on decentralization is a double-edged sword, where the fediverse could have an advantage, if we continue working on smoothing some of the user experience challenges related to decentralization.

Just a thought.

@stefan
> if we continue working on

Ultimately this is about the engagement of the "work force", and I'd like to believe that the fedi with it's nearly 20 years of experience is way better positioned and has already proven to be enshitificationresistant.

Even the fact that the main guru has already left blue sky is just another proof, including the detail that he didn't came over here.
:)

@jwildeboer

@stefan @jwildeboer I think technology is the least of their problem. Making the Atmosphere truly decentralized will require a major shift in power dynamics. I don't think you can build it around one dominant provider unless that provider purposely gives their position up. Is Bluesky going to do it with all the VC funding behind them? I don't think so. Not impossible, but also not very likely IMO. We'll be hearing about a lot of new ATProto services, how the ecosystem is flourishing etc, but then Bluesky will go down and so will most of the network because at the end of the day it will still be an ecosystem around one dominant provider.

@sesivany Thanks to their last round of funding, the community has years to figure this all out.

From https://ionosphere.tv/talks/QKNkKMX:

> $800,000 a year to run the POPs ["point of presence, and it's basically like a co-location center"]
>
> [PDSes] cost about $600 a month each [totalling at $792,000/year for 110 of them]

I'd just not worry too much about the Atmosphere and focus on making the fediverse safer and more welcoming.

@jwildeboer

Scaling the Atmosphere

Scaling the Atmosphere by Jim Calabro — ATmosphereConf 2026

@jwildeboer

No issues so far on mastodon.world

@jwildeboer

This is why people should span out across the Fediverse.

We have this decentralized network, but if most people are in the same place you can take most of it out in one move. Clustering on one large site makes it the weakest link.
@Linux @jwildeboer this is interesting to ponder and quite true. Also, may be an argument for multiple accounts on multiple instances.
@jwildeboer @CAPETOK he aquí la explicación de lo que te quejabas en la mañana con respecto a mastodon
@MDT @jwildeboer Muchas gracias hermano.

@jwildeboer Apparently not the entire BlueSky network went down because of this. Someone yesterday pointed out that they still were able to post and do stuff with people on other instances BUT that the main issue is the BlueSky network demands that everyone has a full view on their own instance. As you get replies by them referencing the parent post and not the parent referencing the children...

So I assume BlueSky is more like the Usenet than like Mastodon in the end.

@agowa338 The TL;DR for me is that the current ATProto/Atmosphere architecture still contains centralised elements that stand in the way of full federation. My suspicion is that this is by design.

@jwildeboer
> My suspicion is that this is by design.

You mean on purpose?

Probably.

Maybe just tunnel view, incapability of not being able to think outside the box ...

@agowa338

@jesuisatire ActivityPub/ActivityStreams, the protocol behind the fediverse, is a W3C open standard,. ATProto/Atmosphere is a corporate thing with no defined open process to update/change it. So I consider it to be a proprietary thing. Want to call that tunnel view, unable of thinking outside the box? Fine with me. @agowa338

@jwildeboer
> I consider it to be a proprietary thing.

Of course it is, in any case my knowledge is simply not deep enough on those specifics to point them out. And it doesn't have to be.

Looking at the actors, the "experience" we all "have" with them by reading on the web what those actors did to become what they are today, adding the halloween papers and the FOSS evolution of openAI, choices and decisions are quite simple.

Ultimately the extraordinary part is the capability by mono sapiens to reinvent the wheel nearly every time they wake up instead of realizing that cooperation and learn to take that bitter pill of being only one of the many might be more difficult than creating a brand new project on github.

.. that's why it's so comfy to be a social bonobo like me. :)

@agowa338

@jwildeboer @jesuisatire

It was shit out quite quickly and the main goal probably was deflection of liability or at best to allow integration with other bigtech entities like e.g. Facebook if we assume it was cooking for a while before it went public in twitter....

@agowa338 @jwildeboer

For me it looked like the back door interference with free speech in the arab spring made the twitter guru realize that only decentralization could lead to real free speech that ultimately has the goal of "power to the people".

The problem is that "power to the people" means being able to let loose in the first place, and for some (strange) reason there sleeps a Frodo in all of us (apparently).

So, sitting at the same ALL IN table in the restaurant at the end of the silicon valley one way street just makes you hear and feel the same things and vibes again and again, until they become true.
(for them, in their minds, their beings, their Idiocracyscale of their top ten most important people voted by their #TimeZeitGeistStream)

@jesuisatire @jwildeboer

I think it was more about not wanting to moderate and esp. not wanting to comply with anti-hatespeech requirements and all...

You know your typical US bigtech liability deflection...

@agowa338
> I think it was more about not wanting to moderate and esp. not wanting to comply with anti-hatespeech requirements ..

Ultimately most likely all of the above.

At the same time, my consideration is that most things are not only black and white, and for some reason the saying "the road to hell is plastered with a shit load of good intentions" goes a long way.

It is reasonable to consider that initial ideas and ideals are and remain deeply rooted in people. At the same time, not only every one is corruptible by money and power but also extortionable.
Everyone.
And if you think you are not vulnerable to extortion, well, think again about your feelings, your personal experiences in life, if their are "things" that are precious to you or you fell responsible for ..

@jwildeboer

@[email protected] @agowa338 Yes, the PLC Directory (Identitätsverwaltung) is (still) centralized.
@agowa338 @jwildeboer tbh I haven't noticed the outage and I run my own PDS, wonder which part of the stack got hit
@jwildeboer saw mastodon.social was down, just had to flip to my backup account. 🤷‍♂️ it’s that easy. Gotta love federation.

@jwildeboer there wuz ddos?

😲

hadnt noticed. real decentralization is great 😁

@jwildeboer

👍

There's still a network effect though. Half the accounts I follow or care about are down. But maybe incidents like this will inspire #Mastodon users to migrate off of mastodon.social.

@jwildeboer
> You decide :)

. . looks like a rhetorical question from over here ..

btw
You mean the mastodon.social users just realized that their death star isn't decentralized, leads the setup to an ad absurdum circumstance and will, as always, go down with their uninformed decision making?

Do the Ddoser take credits for exposing reality or do they only accept satoshis?

@jwildeboer I wouldn't even have known if not for this post
@jwildeboer Who the heck would attack mastodon social??

@tech_noir

Probably the same jerks who keep attacking Codeberg and the Internet Archive.

Some people just want to see the Internet burn, I guess.

@jwildeboer

@tech_noir @jwildeboer Many on the fedi actively hate mast.social (ban on sight kind of deal) I wouldn’t be surprised. It could also be a weird way to push people off .social to make mastodon more decentralized.
@jwildeboer exactly! thats the difference between a decentralized protocol and a truly decentralized infrastructure: the size of the blast radius

@jwildeboer

Just the other day I was saying what would happen if mastodon.social went down.

Jeez. I hope I didn't jinx it. Or inspire somebody to test my hypothesis. 😬

Looks like my hypothesis was correct, though: mastosoc goes down but the rest of the federation keeps on tooting.