cross-posted from: https://quokk.au/c/fediverse/p/1066667/tesseract-dev-injects-malicious-code-into-browser-to-illegally-ddos-the-dbzer0-instance
As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.
My explanation from days ago: https://lemmy.dbzer0.com/comment/27246701
Yup, now it’s entering new phase.
Thank you!
I am way too fucking lazy to see if I’m in the user list. I’m going to assume I am. 🤣
I wasn’t, but our instance was, meaning both of us could’ve been invisible for all 3 users who still use Tesseract.