That was scary and exciting. Response seems competent and transparent. I ❤️ this place.

So, do we change passwords, esp those who logged on during the attack? (I created this acct right before the attack happened tho.)

Well done all involved. Sounds like it was caught and mitigated quickly

Despite the fact that Lemmy is a fairly new piece of software, which makes these issues more likely, I am really grateful for it being open source, and I really appreciate this level of transparency.

At least now we can mark off the "disruptive website defacement attack" line on the checklist of (relatively) new website growing pains. Better to have them make lots of noise and get fixed quickly than quietly do sneaky things in the background.

Thank you for the transparency and swift solution!

Any truth to what I've heard this may have been done by a group we defederated with?

I just disabled whole "/admin" section on my instance and added nice message 😆

Thanks for fixing and being so open about it

Good job. I don't understand very much of that, so that makes me all the more grateful. Thank you.

How does this impact those using mobile apps like Jerboa or Liftoff, instead of the website directly?

Could admins sign announcements with a PGP key to mitigate false admin posts and the consequences this might have? Or is this no longer necessary?

Thanks for the transparancy about this.

On Liftoff, I had to clear cache and storage in order to log back in. Still having issues with the website on Chrome, which keeps telling me I'm not logged in after clearing cache and logging back in.

Thanks for your efforts. I know that Lemmy was put in place rather quickly as a Reddit alternative. But I'm genuinely hopeful that this will be a good alternative.

The quick fix is much appreciated, thank you and everyone that helped for your hard work!