this post was submitted on 10 Jul 2023
486 points (100.0% liked)

Fediverse

17776 readers
48 users here now

A community dedicated to fediverse news and discussion.

Fediverse is a portmanteau of "federation" and "universe".

Getting started on Fediverse;

founded 5 years ago
MODERATORS
deadsuperhero@lemmy.ml
wakest@lemmy.ml
486
PSA: Lemmy.world has been compromised! (Edit: Multiple Instances are down) (lemmy.ml)
submitted 1 year ago* (last edited 1 year ago) by G59@lemmy.ml to c/fediverse@lemmy.ml
245 comments fedilink hide all child comments
 

FYI!!! In case you start getting re-directed to porn sites.

Maybe the admin got hacked?

edit: lemmy.blahaj.zone has also been hacked. beehaw.org is also down, possibly intentionally by their admins until the issue is fixed.

Post discussing the point of vulnerability: https://lemmy.ml/post/1896249

Github Issue created here: https://github.com/LemmyNet/lemmy-ui/issues/1895

you are viewing a single comment's thread
view the rest of the comments
[–] HKayn@dormi.zone 5 points 1 year ago (2 children)

But won't custom emojis from remote instances still trigger the exploit?

[–] CMahaff@lemmy.world 3 points 1 year ago

Apparently not per the post-hack report: https://lemmy.ml/post/1901079

[–] ruk_n_rul@monyet.cc -1 points 1 year ago

Apparently the custom emojis are rendered as static images when federated to outside instances so it's clean.