Um, probably coincidence or a false posi, but malwarebytes is labeling lemmy.~~world~~today as being compromised / malicious when following external links, it's only popped up twice, but here's a slightly redacted log file:

-Log Details- Protection Event Date: 7/10/23 Protection Event Time: 1:24 PM

-Software Information- Version: 4.5.33.272 Components Version: 1.0.2069 Update Package Version: 1.0.72209 License: Premium

-System Information- OS: Windows 11 (Build 22621.1928) CPU: x64 File System: NTFS User: System

-Blocked Website Details- Malicious Website: 1 , C:\Program Files\Google\Chrome Beta\Application\chrome.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data- Category: Compromised Domain: lemmy.today

(end)

May I ask was is the JWS coockinand if it is automatically changed or if we have to change it in a way?

That explains why I had to clear my browser cache, I was unable to login until I did.

I’ve been unable to login on desktop since this happened. Only been able to login via Memmy on IOS.

I put in my info and it kicks me back to the front page and doesn’t log me in.

I’ve tried clearing cache too

EDIT: Switching browser to Edge seemed to let me. Weird. Even reinstalled Firefox and still won't let me.

I appreciate the transparency. Hopefully with more eyes on the source code hacks like this will not happen again.

Thank you for your fast answer!

Should I change passwords or no?

Is a password change advised? How does the JWT cookie and exploit effect apps eg Jerboa?

Is that why I got logged off?

It seems that I lost all my subs. There were not many but still annoying.

E: Still subbed but can't see those in Voyager.

Good shit! Thanks for keeping things up and the pretty quick response as well.