As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.

  • trxxruraxvr
    link
    fedilink
    English
    arrow-up
    4
    ·
    19 hours ago

    The thing with CORS is that it still makes an option request to get the CORS headers. So even if the normal get requests don’t go through, db0 would still be bombarded with options requests. Those are generally a lot cheaper to process, but could still cause issues if there are too many requests.