chattable
1 week ago
To combat this, anon account creations are also disabled. What this means for you: New visitors to your site won't be able to read your chat though they can still send messages due to the server processing that and not the client.
chattable
1 week ago
By February 1st, all services will be restored except email sign up & chat creation. The project will remain on the free plan and will remain subject to daily limits as mentioned in the article below https://iframe.chat/updates/article/shutdown-info.html
chattable
1 week ago
I am also aware of being unable to login from your chat, I may work on this later. If you're tech savvy enough, you can copy your Firebase login/account cookie from the dashboard to your website (or your chat) then you won't need to sign in.
finalfantasyix
2 weeks ago
thanks so much for all the work you've put into maintaining chattable for so long. very sad to see it go :(
tommypanzram
2 weeks ago
Totally fair and understandable update. Hate that it got to this point but you have a solid project that is really well made. Not for nothing, but have you ever considered making the back end a docker container for users to have the option for self-hosting? Might sound like overkill but I'm having a hard time finding an alternative. The simplicity of yours isn't really matched and that's what I like most about it.
ne0nbandit
2 weeks ago
Thank you for the update :( I'm sorry stuff has been so rough to maintain.. You mentioned downgrading to the free plan database and I'm wondering if maybe there could be a way the admin could host their own database? At least to aleviate some of that burden
ne0nbandit
2 weeks ago
I perfectly understand if this would require a lot of code rewriting and whatnot though!
sugarfantasies
2 weeks ago
such a shame seeing this go, hope it gets better. Is there a way to donate? Because I know if i could i would
kirbydogs
2 weeks ago
Please open the donations back up. I wish to help you out, even if it isn't with Chattable.
sanji
2 weeks ago
thank you for all your hard work :( i'm sorry things have had to turn out this way
chattable
2 weeks ago
@tommypanzram unfortunately dockerization isn't a viable alternative. While it would work to clone most of Chattable you'd still need to setup a Firebase account with specific configurations across auth & rtdb, and then you'd need to edit front & backend code to point everything to the new database. Which isn't something I plan to provide support on
lilithdev
2 weeks ago
I am really glad to see that Chattable will continue! Downgrading to a free tier plan is kinda genius.
abberation
2 weeks ago
Oh my god, this makes me so sad :( Chattable was such an amazing service and it's so sad to see that some people just want to ruin everything for no reason.
chattable
2 weeks ago
We are approaching some hard monthly limits. The first 3 days of January consumed 85% of the monthly hard limit for resources. Chattable will have to stretch the remaining 15% of resources for the rest of the month to remain online
chattable
2 weeks ago
To alleviate this, new accounts are disabled. This means no person can sign up and new anonymous users can't read chats. This will be reverted next month.
datoxicwaltz
2 weeks ago
your project was the best free chat to use i really hope this doesnt mean the end...
pearliasystem
1 week ago
Thank you for the incredible work you've done on this project over the years. It's a shame that bad actors have ruined such a great resource. We will support you in your future endeavors either way!
tommypanzram
3 weeks ago
Cloudflare an option you're open to? I know their free plan has ddos protection.
win1999
3 weeks ago
Have you reached out to Google/Firebase on the matter? Can't you ban their IP/email?
chattable
3 weeks ago
I have reached out to Firebase, the attacker has been jumping VPNs since their home IP was leaked. Firebase won't do anything, Firebase also can't be looped through cloudfare, the server is fine but the database is hosted by Firebase which offers no spam protection
chattable
3 weeks ago
The only real option is to prevent the public from reading chat data directly from the database and loop all read requests through my server. I did this with writes when I switched to a backend. So expect a similar amount of downtime since then
win1999
3 weeks ago
Hmmm. You could 1) Firebase App Check. A good way to block scripts/bots regardless of their VPN 2) Backend Proxy. Moving reads to your backend, and then you could use Cloudfare Free Bot Shield 3) UID Ban in Rules. Hardcode a "deny" in your security rules? Firebase wont charge for requests blocked by rules.
kiwimeowo
3 weeks ago
I thought I messed up my code, but it's apparently broken on all of chattable? I hope this issue will be resolved soon, good luck!
kuroi
3 weeks ago
Can someone please explain to me why, WHY is someone attacking a free chat tool FOR WEEKS? Hope you can sort this out soon :/
chattable
3 weeks ago
The following steps will be to migrate from Firebase and fully host the database on my server. Bear with me, as it will be a lengthy process leaving Firebase. If you need any data (chat data or account data) from our database (or want it removed) email us
everythingkris
3 weeks ago
Why the flip would somebody attack a free service like this? Sorry you have to go through this Andrew.
lindley
3 weeks ago
so sorry this is happening!! hope you can figure it out soon, big chattable fan over here :)
chattable
3 weeks ago
To put into perspective, with tens of thousands of users costs usually float around $0.03/day or $0.40/month for the database alone. I also have to maintain server costs, domain costs, private email costs, and more
chattable
3 weeks ago
Without the attacks, all costs considered rounds up to about $810/yr ($65/mo for my server, $15 for yearly domain registration, $15 for email, and $10 maybe for database costs) however, with attacks inflating costs for Firebase due to excessive logins & reads, that adds $75/mo which adds another $900 annually. Not something I'd ask the public to fund. It's best to solve the problem than succumb and pay.
chattable
3 weeks ago
That's only to mention $75 at the current rate of attacks, if an attacker had more machines they could exponentially inflate these numbers even more
phelah
3 weeks ago
Oh hey wait, are you sure you should've put their Ip and email publicly here? Not trying to accuse you of anything I'm just curious if putting this information could lead to people finding them. It doesn't make sense why somebody would attack a free service like this, I'm genuinly curious why.
tommypanzram
3 weeks ago
Holy crap, dude please set up a patreon or other monthly contribution page. A reward could be as simple as access to a community discord. I admire you for providing a free service, but you don't have to take on that financial burdon to provide it. I know you have a ko-fi link on your page but a $1 per month subscription seems like it could be more reliable than a one-time $10 donation.
pastel-skies
2 weeks ago
Shiiii I thought Chattable was just broken, knowing a bad apple has been DDosing Chattable is just vile... hoping you can find a way to fix this mess, even if it means donating to help!
doggyhell
2 weeks ago
sorry to hear youve been dealing with hell for no reason besides someone deciding to be malicious. we appreciate your free service dev!
chattable
2 weeks ago
ETA: I have no timeline for this. With a change of work hours last year and a lack of motivation on my days off, paired with the amount of time & effort required to rewrite as much as I need to (to patch the abusable exploit) I just can not faithfully provide an ETA. It could be days, or months.
chattable
1 month ago
I want to emphasize my commitment to user privacy and will not explicitly allow mods or owners to peek at other people's private conversations.
bevweb
1 month ago
this is so real thoughhh i can never focus on one project for more than like a week at a time
chattable
1 month ago
Truth be told, I was diagnosed as a kid but as I grow older I think most ADHD symptoms are symptoms of just being human and that the diagnosis itself was invented to sell pharmaceuticals.
We finally found the 'dystopian future' shown in sci-fi stuff and games. Theres a good reason it was originally fiction.