this post was submitted on 13 Feb 2025
116 points (99.2% liked)

Programming

18180 readers
389 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



founded 2 years ago
MODERATORS
 
top 30 comments
sorted by: hot top controversial new old
[–] deadcatbounce@reddthat.com 10 points 8 hours ago

All we need now is a CodeTitanic, to make the story complete.

[–] fargeol@lemmy.world 31 points 14 hours ago (2 children)

Codeberg is up again! And I got spammed too, does that mean I'm a good FOSS developer? 😳

[–] xtools@programming.dev 3 points 4 hours ago

who's a good FOSS developer? you are!

[–] Mubelotix@jlai.lu 21 points 13 hours ago (1 children)

if you are on codeberg you are a good FOSS developer

[–] melezhik@programming.dev 10 points 13 hours ago* (last edited 13 hours ago)

Ok. "I am a good FOSS developer"

[–] recursive_recursion@lemmy.ca 52 points 16 hours ago (2 children)

Based on recent news I'm guessing this might be the result of a DDoS attack from the far-right

[–] parpol@programming.dev 19 points 15 hours ago (2 children)

Before the ddos they were also spamming a certain n-word. Why are far-right groups targeting codeberg anyway?

[–] Kissaki@programming.dev 34 points 13 hours ago

Codeberg published a blog post yesterday. They suspect (or know?) that it's a broadened attack because Codeberg hosts liberal and human projects.

In the past days, several projects advocating tolerance and equal rights on Codeberg have been subject to hate attacks, such as massive spam of abusive messages in their issue trackers. We have been monitoring the situation closely and have tried to clean up the content as quickly as possible.

Often, content remained available only for a few and up to 30 minutes. Due to constrained personal capacities, some rare cases have remained online for longer. We appreciate all your reports to abuse@codeberg.org that help us identify abuse quickly.

On 12 February 2025, an abuser has escalated the attacks to a next level. Instead of targetting individual projects, they have started to create abusive content and mentioned Codeberg users in chunks of 100 each.

(emphasis mine)

[–] recursive_recursion@lemmy.ca 16 points 14 hours ago* (last edited 14 hours ago)

~~The real reason is that I have no idea~~, regardless they're attacking a free and open source software project/developers that benefits everyone. Attacking them makes no sense.

Far-right extremists tend to act based on tribal emotions rather than with empathy and logic.
Give them anything as an 'enemy' and they're likely to see red and charge.

Edit:
I remembered the reason:

In the past days, several projects advocating tolerance and equal rights on Codeberg have been subject to hate attacks, such as massive spam of abusive messages in their issue trackers.

[–] rimu@piefed.social 5 points 16 hours ago* (last edited 16 hours ago) (2 children)

Could be, although codeberg goes down more than anything else I use so this could be normal.

[–] ms5K8oWx@programming.dev 4 points 12 hours ago

although codeberg goes down more than anything else I use so this could be normal

They often go down because of ddos attacks, although not exclusively.

[–] recursive_recursion@lemmy.ca 8 points 16 hours ago* (last edited 16 hours ago)

Could be, although codeberg goes down more than anything else I use so this just could just be normal.

I also wouldn't rule that possibility out.

I'm guessing an attack from the far-right as their unruly behavior has been flaring up globally and Codeberg literally yesterday was fending off attacks from the far-right so to me the timing seems supicious.

[–] vividspecter@lemm.ee 7 points 13 hours ago (3 children)

This is a good argument for self-hosting Forgejo (which is quite simple compared to gitlab from what I hear).

But good to see they are standing up to this shit.

[–] bestboyfriendintheworld@sh.itjust.works 14 points 12 hours ago (3 children)

Self hosting git repos can be super minimal. If you don’t have a lot of users or repos, just use ssh. Hell you can host a repo on a local SMB network share eben.

[–] sping@lemmy.sdf.org 1 points 3 hours ago

Yes it's trivial to host a repo, and then you have achieved approximately 2% of a forge.

[–] anamethatisnt@lemmy.world 7 points 10 hours ago

Reason I went or self-hosting Forgejo is to know it when federation comes along for real.
I'd love being able to federate my self-hosted Forgejo with my friends self-hosted Forgejo servers.
https://forgejo.org/2025-01-monthly-update/#federation

[–] runeko@programming.dev 4 points 11 hours ago (1 children)

I wish I could upvote this a hundred times.

If you’re not stuck on git, give fossil a try. It’s a distributed source code version control with an integrated bug tracker, wiki, forum, and more. All that in in one 3 MB sized binary.

It can even mirror to GitHub and export/import git repositories.

It’s very easy to host yourself.

[–] wewbull@feddit.uk 5 points 10 hours ago

So much simpler than gitlab. An executable and a single config file. That's all there is if you use sqlite as the database.

Gitlab was a farmyard of different things to worry about.

[–] BB_C@programming.dev 3 points 9 hours ago* (last edited 7 hours ago)

Traditional server-based self-hosting will have lower average uptime, will be easier to attack, and will have a much higher chance of disappearing out of nowhere (bus factor event, or for any other reason).

A decentralized or distributed solution would make more sense as a suggestion here. Radicale (this one) is such an effort I'm aware of, although I never tried it myself or take a look at its architecture.

[–] astro_ray@piefed.social 9 points 15 hours ago

It looks like someone is spmming the issue tracker of Codeberg/org with mass mentions

[–] paequ2@lemmy.today 8 points 16 hours ago (1 children)

Hm. Got tagged on a spam post that just says "hi".

https://codeberg.org/austedan/thisisatest1/issues/45

Ah, I didn't know you could @moderation in the conversation.

[–] crony@lemmy.cronyakatsuki.xyz 20 points 15 hours ago* (last edited 10 hours ago) (2 children)

I got tagged in one called "N***er balls".

Imagine waking up and seeting that email notification.

PS: Picture just to confirm:

NOTE: I have also seen since yesterday that my crowdsec instance has been blocking way more ip's for bots trying to crawl and shit like that so I think that this all might be a more general uptake in bots and that sites that never really had great protections against it are now taking the fall.

Just from yesterday to today I got over 100k more blocks.

[–] flubba86@lemmy.world 4 points 9 hours ago

That's the same one I got.

[–] Shareni@programming.dev 2 points 10 hours ago

Got the same message, but from a different issue

[–] Kissaki@programming.dev 3 points 13 hours ago* (last edited 13 hours ago)

https://status.codeberg.org/

Uptime status may not be representative though.

When I open the dashboard right now it loads the HTML but then only shows a loading icon.

[–] rutrum@lm.paradisus.day 0 points 9 hours ago (2 children)

Codeberg keeps calling the group the far right. Is there any political motivation or something else here? To me, it just looks like troll behavior. Is there more details about the attacks that I missed?

[–] sensiblepuffin@lemmy.funami.tech 5 points 7 hours ago (1 children)

If you'll examine the last 20 years of history, you'll find that generally, unfocused and unclear trolling with racist elements is usually sourced from the far right.

[–] badmin@lemm.ee -4 points 6 hours ago

Source? What is the percentage of trolls that were even chased and successfully denonymized?

[–] sudo@programming.dev 8 points 9 hours ago

Its right-wing because of the content and target of the trolling. They've said this started as a target harrasent of certain projects.