Sopuli's Default Community

1265 readers

1 users here now

Community for all jibber-jabber. As this is a hard-coded community for every instance, we may get this doing something useful.

Simple test posts to [email protected]

Meta-discussion regarding the instance and support in problem situations [email protected]

Yhteisö kaikenlaiselle pälätykselle. Koska tämä on kovakoodattu yhteisö jokaiselle instanssille, voimme tehdä tällä ehkä jotain hyödyllistä.

Yksinkertaiset testiviestit mielellään [email protected]

Instanssia koskeva metakeskustelu ja tuki ongelmatilanteissa [email protected]

founded 3 years ago

MODERATORS

[email protected]

multiple lemmy instances are going down to a js injection or admin password hack (sopuli.xyz)

submitted 1 year ago by [email protected] to c/[email protected]

18 comments fedilink hide all child comments

lemmy.world and lemmy.blahaj.zone got hacked, admins in sopuli.xyz should enforce 2fa for admins and possibly disable/ look into possible injections from the community sidebar

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 7 points 1 year ago (1 children)

If they're stealing sessions that might not be enough. I saw some other mitigations discussed elsewhere.

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago)

Create new accounts & make them instance admin instead (they have to make a local comment to be made admin). Then remove your "browsing" accounts from admin group until patched.