As for hijacking usernames: If you are able to wipe and reinstall the instance you likely have the ability to just set my password hash to something else and control my account. As a user you need to trust your home instance.
this post was submitted on 08 Aug 2023
24 points (100.0% liked)
Lemmy Support
4652 readers
1 users here now
Support / questions about Lemmy.
founded 5 years ago
MODERATORS
If the domain registration lapses and a malicious actor was to pick it up it could cause issues potentially.
As I said: you need to trust your home instance in that regard. I don't think there is a technical solution for these problems.
So this partly happened on midwest.social, when the admin reverted to a three-day old backup. Other servers that had already cached comments from that time could still see them; those of us on the home server could not. I checked with my alt account.
I experienced it. I couldn't subscribe to the same communities with same username.
Yeah, I have a feeling that this is the case with my server. It does seem to be communities that I was already subscribed to having issues subscribing again.