this post was submitted on 11 Jun 2023
13 points (100.0% liked)

Programming

13368 readers
2 users here now

All things programming and coding related. Subcommunity of Technology.

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 1 year ago
MODERATORS
alyaza@beehaw.org
Hexorg@beehaw.org
remington@beehaw.org
13
Could a malicious user bring down small lemmy instances by over-subscribing? (sh.itjust.works)
submitted 1 year ago by Gerald@sh.itjust.works to c/programming@beehaw.org
8 comments fedilink hide all child comments
 

I just read how the federation works, but I'm worried about a growing pain. Say I was a malicious user, could I bring down a smaller Lemmy instance by subscribing to as many communities as possible? Or maybe even subscribing to a malicuous Lemmy instance that keeps spamming thousands of posts every second?

Couldn't that easily fill up a server's storage and effectively bring a server down? I guess you could block the malicious Lemmy instance (although wouldn't it be easy to create another?) and ban a user that subscribes to too many instances, however, it feels to me like a very hard problem to solve

you are viewing a single comment's thread
view the rest of the comments
[โ€“] Subito@beehaw.org 0 points 1 year ago* (last edited 1 year ago) (1 children)

I wonder if such an activity can be automated (the fix you suggested, not the malicious activity)

[โ€“] ShadowAether@sh.itjust.works 2 points 1 year ago

You mean the blocking of malicious accounts/IPs creating high traffic right?