Bluesky has been dealing with a DDoS attack for nearly a full day

Bluesky spent nearly a day swatting a DDoS attack — a flood of junk traffic meant to knock services offline — and users felt it. Feeds stuttered, notifications failed, search sputtered. The company says there’s no evidence of a data leak and promises another update by Friday, per its status note.

But the real action was in the comments. One camp rolled out the running gag that bad “AI vibecoding” is to blame, a meme that commenter minimaxir says is getting tired — yet it keeps popping up as a catch‑all dunk. Another corner went full conspiracy‑risk: userbinator warned that some big‑name “security fix” could swoop in and lock users behind ‘trusted hardware’ gates, turning protection into gatekeeping.

Meanwhile, decentralization die‑hards insisted, “Isn’t this supposed to be immune?” Cue pushback. Folks like OuterVale pointed out the API — the behind‑the‑scenes pipeline the app uses — took the beating, so the interface looked fine while errors exploded underneath, even varying by region as the attack spread. And yes, the status page itself seemed shaky, adding to the chaos. Others, like adrithmetiqa, asked the big question: Why do this? Malice, mischief, or message? No one knows.

Amid the outage, the timeline turned into a roast: “Blue skies with scattered timeouts,” “Decentralized vibes, centralized pain,” and “Status page also down, truly immersive.” The tech is complicated; the takes are not — and that’s why everyone’s glued to the drama.