this post was submitted on 10 Jul 2023
75 points (95.2% liked)

Meta (lemm.ee)

3581 readers
127 users here now

lemm.ee Meta

This is a community for discussion about this particular Lemmy instance.

News and updates about lemm.ee will be posted here, so if that's something that interests you, make sure to subscribe!


Rules:


If you're a Discord user, you can also join our Discord server: https://discord.gg/XM9nZwUn9K

Discord is only a back-up channel, [email protected] will always be the main place for lemm.ee communications.


If you need help with anything, please post in !support instead.

founded 1 year ago
MODERATORS
 

See Here, Here and Here for information about the current situation and the exploits being used.


UPDATE

Lemm.ee Admin @sunarus responded Here, TLDR is that Lemm.ee isn't vulnerable, would advise reading the message if you're still concerned.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 10 points 1 year ago (2 children)

You rock! Sorry if this is a stupid question, but if both instances are running the same version of Lemmy, why would lemmy.world be affected but not lemm.ee?

[–] [email protected] 10 points 1 year ago (1 children)

Malicious custom emoji contained scripts that sent session cookies to the attackers.

[–] [email protected] 2 points 1 year ago

Makes sense! Thank you.

[–] [email protected] 2 points 1 year ago

It should be said that the version number is more of an indication than anything specific. I don't think it would be hard for an instance to spoof its version number.

Also, lemm.ee in particular has a few mods and tricks that might not be in the lemmy codebase yet - @[email protected] has previously included new code he has pushed to the main stack before it has been accepted. This allowed us to have working versions of things before other instances.

Point being, two instances with the same version can have different code and implementations.