As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.
As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.
Who wrote these regex? They are terrible:
()means we’re saving that part for later). Are we planning to do something with the mlg numbers? Why don’t we care about the mmmberry numbers?([0-9]*)insteadmlgandmlg1but notmlgabecause we anchor to the end ($). But not on mmmberry–that one will match “mmmberry5” (but we don’t track the number!) but also “mmmberry_is_the_worst” so the enemy of my enemy is also my enemy because they share a prefixMaybe mlg has sock-puppet accounts mlg1, mlg2, but never MLG?
I wouldn’t be shocked if he just pointed an LLM at a dump of posts and comments and asked it to write a list of regexes for stuff he doesn’t like