Thanks for your efforts! The only sound conclusions on their side would be to shut off unauthenticated endpoints returning valuable data.

where did my password leak!?

Javascript

First of all, thank you for creating Lemmy!

• Are you confident that ActivityPub is the right protocol for large numbers of users/communities/instances? I’ve read about concerns about the scalability of ActivityPub due to its “push” nature, and I’m wondering how reliable those concerns can be.
• Is there a “right” maximum size for instances (user or community-wise) so that the load and reliability is properly spread?
• (On behalf of a colleague not yet using Lemmy) Is it planned or enviable to provide OAuth/OpenID for auth, so that a user could have created an account in instanceA but log in to instanceB with the same account; potentially reducing the load on instanceA and/or allowing interaction with content federated with instanceB but not instanceA?

15 years and almost went to a stop going there (I setup a RSS feed for 3 subs, but I actually manually check them twice a week to make sure I’m not missing on important news)

The fediverse as a whole is getting more and more interesting this year. Sure, it’s still lacking in amount of content, but it brings me “good enough” content to avoid feeling like I’m missing something.

Which viable alternative could work to mitigate ddos?

Out of my head, I think OVH offers such a service (but without free tier).