It has been a while since our last update, but it's about time to address the elephant in the room: downtimes. Lemmy.World has been having multiple downtimes a day for quite a while now. And we want to take the time to address some of the concerns and misconceptions that have been spread in chatrooms, memes and various comments in Lemmy communities.
So let's go over some of these misconceptions together.
"Lemmy.World is too big and that is bad for the fediverse".
While one thing is true, we are the biggest Lemmy instance, we are far from the biggest in the Fediverse. If you want actual numbers you can have a look here: https://fedidb.org/network
The entire Lemmy fediverse is still in its infancy and even though we don't like to compare ourselves to Reddit it gives you something comparable. The entire amount of Lemmy users on all instances combined is currently 444,876 which is still nothing compared to a medium sized subreddit. There are some points that can be made that it is better to spread the load of users and communities across other instances, but let us make it clear that this is not a technical problem.
And even in a decentralised system, there will always be bigger and smaller blocks within; such would be the nature of any platform looking to be shaped by its members.
"Lemmy.World should close down registrations"
Lemmy.World is being linked in a number of Reddit subreddits and in Lemmy apps. Imagine if new users land here and they have no way to sign up. We have to assume that most new users have no information on how the Fediverse works and making them read a full page of what's what would scare a lot of those people off. They probably wouldn't even take the time to read why registrations would be closed, move on and not join the Fediverse at all. What we want to do, however, is inform the users before they sign up, without closing registrations. The option is already built into Lemmy but only available on Lemmy.ml - so a ticket was created with the development team to make these available to other instance Admins. Here is the post on Lemmy Github.
Which brings us to the third point:
"Lemmy.World can not handle the load, that's why the server is down all the time"
This is simply not true. There are no financial issues to upgrade the hardware, should that be required; but that is not the solution to this problem.
The problem is that for a couple of hours every day we are under a DDOS attack. It's a never-ending game of whack-a-mole where we close one attack vector and they'll start using another one. Without going too much into detail and expose too much, there are some very 'expensive' sql queries in Lemmy - actions or features that take up seconds instead of milliseconds to execute. And by by executing them by the thousand a minute you can overload the database server.
So who is attacking us?
One thing that is clear is that those responsible of these attacks know the ins and outs of Lemmy. They know which database requests are the most taxing and they are always quick to find another as soon as we close one off. That's one of the only things we know for sure about our attackers. Being the biggest instance and having defederated with a couple of instances has made us a target.
"Why do they need another sysop who works for free"
Everyone involved with LW works as a volunteer. The money that is donated goes to operational costs only - so hardware and infrastructure. And while we understand that working as a volunteer is not for everyone, nobody is forcing anyone to do anything. As a volunteer you decide how much of your free time you are willing to spend on this project, a service that is also being provided for free.
We will leave this thread pinned locally for a while and we will try to reply to genuine questions or concerns as soon as we can.
~10 ago i got all my coments and posts downvoted 25-50 points each, even one comment that was on a deleted thread. that didn't stop me for continue participating, but it shouldn'tbe that easy for someone to do that
All my comments and posts dated July 31 and before got downvoted in matter of minutes, the quantity each got varied but it was proportional to the upvotes it already had, up to -32 (not 50), my total comments points became -540 and post -70 . I don't care getting all my comments and posts downvoted like that, so I never complained, but I thought I would let you know since it is related to the topic of the this thread.
Hey. I checked and well, you were right. There was actually a user following you around with over 40 (!) alts from various instances. I banned all of them
Thank you! I just hope is not too easy automate the creation of 40+ new accounts and have those follow someone around like it happened to me, or to easily manipulate what reaches or drops from top day/hour etc.
@[email protected] just start with an @ and you will see! And if you want to link a community you start with an ! - mind you this doesn't work in all the non-default UI's like Alexandrite or Photon atm.
My dog only has a flip phone. Does that make me an animal abuser? In my defense, she's only 10 months old. In my opinion, a little too young for internet access.
My first guess: it's someone who complained on GitHub about unoptimized queries and didn't get the response they wanted. Of course I would expect them to be attacking lemmy.ml in that case
My conspiracy theory: it's someone paid by a marketing firm on Reddit's payroll, while probably not under direction from Reddit, they're working to further Reddit's goals
Most likely: it's some kiddie who got banned from .world and wants to show everyone how mad he is
I don’t know the details but wasn’t one of the instances that Lemmy World defederated recently one that contained lots of toxic shit (racism, trolling and other not cool content)? So it’s not unlikely someone from there decided to just destroy things for others. Maybe even an operator since the person(s) obviously has knowledge of how Lemmy works.
This is just going by random speculation as to who might have been defederated from and decided to attack a high-profile target in response... but if my speculation is accurate, they also seem fine with all kinds of real-world violence against their enemies. The purpose is to "punish", and the innocence of the target isn't a factor.
Some group calling themselves communist but acting like narcicists. hexbear i think. Harradsing a general instance because we felt they were incompatable. I randomly had someone on hexbear attempt to derail the conversation