there are quite a few ways to use more granular targeting. for example, we have specific url patterns that get challenged if certain headers have certain values and are missing others, while other urls won’t get challenged.

it would be trivial for them to not DDoS and yet they keep doing it.

if they were calling Lemmy APIs directly they would significantly reduce the load they bring to our service. if they were speaking ActivityPub they could even get the content delivered to their front door directly via federation.

they don’t care that they DDoS websites. they don’t care about optimizing for how certain types of websites are built, to reduce impact on third parties. the only language they speak is DDoS.

they intentionally spoof legitimate browser user agents and cycle through massive ranges of IP addresses. they have enormous pools of IPv4 addresses available that allow them to only use each IP for a couple of requests before cycling to the next one, which is yet another way they evade detection, as they are bypassing any rate limits we have configured that way.

we’re currently challenging visitors who aren’t logged in regardless of the browser due to extremely aggressive LLM scrapers. as long as you’re staying logged in you won’t get challenged.

Cloudflare actually stopped their service

what?

we are on the latest version now, there is no need to wait

doesn’t really look much different between the two instances. the theme differences are minor. the current default theme on piefed.world is even a bit more compact than the quokk.au default theme.

there are also user settings for more compact post listings, e.g. the variant with smaller thumbnails:

and after writing all this i realized you were referring to the bottom navigation. we updated several piefed versions in the last few days, if this is still the case for you i recommend raising this as a bug directly at https://codeberg.org/rimu/pyfedi/issues

I changed the password after leaking that screenshot

presumably in the time between leaking and changing it? once the password is changed the old password won’t work anymore, and neither will any of the previous login tokens.