Thank you for taking the time to update this :) Hope everything will be sorted out without people being scared. As a layman, was any user data compromised?
Lemmy.World Announcements
This Community is intended for posts about the Lemmy.world server by the admins.
Follow us for server news π
Outages π₯
https://status.lemmy.world/
For support with issues at Lemmy.world, go to the Lemmy.world Support community.
Support e-mail
Any support requests are best sent to [email protected] e-mail.
Report contact
- DM https://lemmy.world/u/lwreport
- Email [email protected] (PGP Supported)
Donations π
If you would like to make a donation to support the cost of running this platform, please do so at the following donation URLs.
If you can, please use / switch to Ko-Fi, it has the lowest fees for us
Join the team
Thanks all working again. Had to clear my browser cache in order to login again and had to resign in to memmy too.
I guess its early days for lemmy for incidents like this, fingers crossed something like this doesn't happen again :)
It's a nice reminder that those with the skills but not the bad intentions would be welcome to look through the source code for vulnerabilities and report/patch anything they might find. :)
Thanks for the info, Ruud. I just put in for a monthly donation to you all -- I appreciate you.
Well that's just great it really is a shame though how some people would actively want to ruin something free like this just because they can.
Congratulations everyone on the quick fix/mitigation!
I found this in my private messages, when an attack was happening I messaged the guy βare you okβ and he replied back to me with an image of my own messageβ¦ I wonder if this was similar to what was done here? Was 8 days ago
Had to re-login in the Connect app
TY to everyone itt who commented on how to fix the 3rd party app issues.
I was panicking when liftoff went wonky
I had an issue of being logged out of my account and could not log back in, after closing and reopening the site, closing browser, etc until I cleared my cookies, then it let me back in. If that helps anyone.
A lot of images seems to be gone from posts in /c/pics is this related to the hack or the cleanup after?
Would it be a good idea to force a login if the users IP or device suddenly changes?
What are the risks for people who use Jerboa for Lemmy? I logged put and back in and there doesn't seem to be any issues, so are the app users excluded from this?
Is it possible cookies for other websites were scraped? I was logged in to .world at the time; I have logged out of all accounts, and reset passwords as a precaution, but want to know if I should be on the lookout from this.