Or serve a gzip bomb (is that possible?)

If I understand right that means link previews are requested every single time an user sees it? The instance should request it once a week, cache it and serve that to users

I’m kinda hoping it was just that a state sponsored attacker showed up on their door and said “include this snippet or else…” otherwise it’s terrifying thinking of someone planning some long con like this

We are all relying on the honesty of a few overworked volunteers…

From that post, commits set to UTC+0800 and activity between UTC 12-17 indicate that the programmer wasn’t operating from California but from another country starting with C. The name is also another hint.

Unrelated, I really like the idea that the author of that blog post to place the favicon near each link

From the website:

With Midori Browser you can browse the web with complete confidence and an advanced tracking blocker.

Then the next paragraph states:

Cryptotoken: To reward our users, we are organizing an initiative a Token to give users to use our products and services without tracking.

So it blocks tracking but adds more tracking, so users can buy some shitcoin to remove the tracking?

I’m glad that their forks of simple mobile tools didn’t gain traction, then