cross-posted from: https://lemmy.ml/post/1895271
FYI!!! In case you start getting re-directed to porn sites.
Maybe the admin got hacked?
edit: lemmy.blahaj.zone has also been hacked.
Looks like we are safe, based on this post. We don’t have any custom emojis.
It’s kinda neat that we’re all still on lemmy discussing a downed node, of sorts.
Because fediverse.
I also think there are plans to federate users and user ids. So it would be cool for all the people on lemmy.world and blajah.zone to just go to another server and comment with their account. But, that’s for a future version of activitypub.
until then Lasim could help IT allows you to migrate user subs and block between instances
does that also include subscriptions or just settings? i havent changed many settings yet but i made a new account (this one) and i want to move all my subscription over
Or the flip side, for the hacking of Lemmy world to expose the data of every user of every other instance.
That is neat.
But also hundreds of inexperienced admins running the same exact software with an HTML injection vulnerability is not so neat. https://sopuli.xyz/post/1180773
this exploit seems to have spread to lemmy.blahaj.zone too
Related: https://github.com/LemmyNet/lemmy-ui/issues/1895
https://github.com/LemmyNet/lemmy-ui/issues/1252
Makes me wonder how well fediverse handles vulnerabilities. I don’t think there is a hotline channel that would report vulnerabilities and fixes to instances in a coordinated fashion and I doubt every instance fixes these things ever.
