this post was submitted on 10 Jul 2023
111 points (99.1% liked)

main

1337 readers
6 users here now

Default community for midwest.social. Post questions about the instance or questions you want to ask other users here.

founded 3 years ago
MODERATORS
[email protected]
111
Regarding the recent Lemmy hack *Update* (midwest.social)
submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]
16 comments fedilink hide all child comments
 

In case you're not aware, multiple Lemmy instances suffered hacks recently that allowed the hackers to gain admin privileges and deface the instances and/or redirect users to other sites. Luckily, midwest.social was not a victim of this from what I can tell. To mitigate any more issues I have deleted the single custom emoji that had been uploaded and rotated the JWT which means you will have to log in again on all your devices.

Update: The devs have released 0.18.2 with a security fix for this and I've upgraded to it.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 1 year ago (1 children)

Not sure if it's related, but my midwest.social account had disappeared from wefwef and I had to log back in

[–] [email protected] 4 points 1 year ago (1 children)

Yeah, that's because of the new token.

[–] [email protected] 3 points 1 year ago

Oh. Wow, was that bit about the JWT always there? Did I just completely gloss over it?