this post was submitted on 10 Feb 2025
38 points (100.0% liked)

Mbin Blog Updates

2 readers
1 users here now

Blog updates for Mbin. Upcoming features, issues or anything else related Mbin or the fediverse. Mainly I (Melroy) write updates here.

Just follow this magazine to keep yourself up-to-date!

founded 2 years ago
MODERATORS
melroy@kbin.melroy.org
38
Mbin v1.8.0 released (kbin.melroy.org)
submitted 5 months ago by melroy@kbin.melroy.org to c/updates@kbin.melroy.org
20 comments fedilink hide all child comments
 

Today we released Mbin v1.8.0! It has been already 1 month since we released v1.7.4.

This is the v1.8.0 release of Mbin and it is a feature packed one like always ;).

It brings an extensive bookmarking system, signup request support, signup notifications, extended markdown rendering, custom notification settings to set magazines, users, threads and microblogs to default, loud or muted, setting a default sort for the front page and comment lists, a new image delete command for admins and documentation changes.

You also still might want to double check if you are using the latest Nginx configs (v1.8.0 has now additional regex improvements).

I want to thank all the contributors! We can't do it without you all!

Mbin takes a lot of time to develop, maintain and improve. Created as a successor of /kbin, but still going strong ever since. If you would like to support this work or cover the server costs, please consider donating. Thank you.

Melroy

EDIT: There is a more detailed post here.

top 20 comments
sorted by: hot top controversial new old
[–] Gloria@sh.itjust.works 12 points 5 months ago (1 children)

Very impressed by the clean UI Mbin is bringing to the Fediverse. Really nice!

[–] melroy@kbin.melroy.org 7 points 5 months ago

Thank you for your kind words.

[–] Fitik@fedia.io 7 points 5 months ago (3 children)

Thank you all for your work! Happy to use mbin pretty much everyday!

[–] BentiGorlich@gehirneimer.de 4 points 5 months ago

You have no idea how motivating it is to hear, that people use your code ❤️

[–] sunzu2@thebrainbin.org 2 points 5 months ago

Haha yes

[–] melroy@kbin.melroy.org 1 points 5 months ago

That is wonderful to hear!

[–] Zier@fedia.io 5 points 5 months ago (1 children)

Thank you for the bookmarks!!!!

[–] melroy@kbin.melroy.org 2 points 5 months ago

Thank you for using Fedia/Mbin.

[–] melroy@mastodon.melroy.org 5 points 5 months ago

Link to release: https://github.com/MbinOrg/mbin/releases/tag/v1.8.0

[–] TheObviousSolution@kbin.melroy.org 3 points 5 months ago (1 children)

So just curious, kbin.melroy.org requires logging in now? Why, was it being DDOSed in some way?

[–] melroy@kbin.melroy.org 3 points 5 months ago (1 children)

Correct, I did enable this login option for now, to reduce the impact on application level. Sorry about that.

The attack has been ongoing from Feb 8 2025, until today still. It comes in waves, I dunno who is attacking me or why. I use my firewall to block some of the origin countries where the attacks are coming from. However, the Botnet is located in basically very country on the planet. I migrated to OpenResty and will implement additional anti-DDos measures as well as optimizing Mbin further to reduce CPU overhead.

TLDR;

  • Attack started at Feb 8 2025, and still continues
  • Attacker is using a botnet from across the globe
  • Attacker is using valid GET requests with legit user-agent strings
  • Attacker is using both mobile and fixed line ISP types, so these are devices behind various ISPs across the globe. No cloud infrastructure is used.
  • Reason of the attack: Unknown

DDos attack on Mbin instance

[–] TheObviousSolution@kbin.melroy.org 1 points 5 months ago

Thanks for the detailed answer. I imagined it was due to something like that. Sounds like a "homebuilt" DDOS platform if its coming from any compromised device, so it could be any number of BS reasons, just simply testing out their botnet, or stressing the server to probe for specific vulnerabilities.

[–] SharkAttak@kbin.melroy.org 2 points 5 months ago (1 children)

Am i the only one seeing duplicated profile pics next to the usernames? Or did I miss something in the update?

[–] melroy@kbin.melroy.org 2 points 4 months ago (1 children)

he! You are right! I also now see it, thanks for noticing. I'm actually not running main branch, but this PR: https://github.com/MbinOrg/mbin/pull/1472

I think I exactly set showAvatar on true within the comment section or something? My bad, I will try to solve this asap again. Obviously this is not wanted :)

Thanks again for reporting.

[–] melroy@kbin.melroy.org 2 points 4 months ago (1 children)

@SharkAttak@kbin.melroy.org I fixed it already :)

[–] SharkAttak@kbin.melroy.org 2 points 4 months ago (1 children)

Great! Thx, felt a little strange.. :D

[–] melroy@kbin.melroy.org 1 points 4 months ago

Yes it was also not good haha

[–] Nougat@fedia.io 1 points 5 months ago (1 children)

... custom notification settings to set magazines, users, threads and microblogs to default, loud or muted, ...

Is there any information on how this works, what it's actually doing?

[–] BentiGorlich@gehirneimer.de 5 points 5 months ago

From this post: https://gehirneimer.de/m/mbinReleases/t/486586

The settings are (from left to right): muted, default and loud.

Default respects your global notification settings, while the other two modify it. They are processed hierarchically, meaning a muted user commenting on a loud thread which belongs to a muted magazine will not trigger a notification, while a loud or default user would. Another example: a muted thread in a loud magazine will not trigger a notification for new comments unless the commenting user is set to loud.

Hope this helps :)

[–] kreynen@kbin.melroy.org 1 points 5 months ago

@melroy@kbin.melroy.org I tuned out of the Kbin drama for bit. Only coming back to actively using Mbin again recently. IMPRESSIVE improvements!