spiderplant

joined 1 year ago
sorted by: new top controversial old
Beehaw is also down, but they elected to do it in c/fediverse@lemmy.ml
[–] spiderplant@infosec.pub 7 points 1 year ago

Smart move. I'm surprised more instances aren't doing this.

*Permanently Deleted* in c/fediverse@lemmy.ml
[–] spiderplant@infosec.pub 4 points 1 year ago* (last edited 1 year ago) (1 children)

FWIW, right now it seems unlikely that your password was accessible to anyone. Your login cookie may have been taken if you accessed Lemmy on a web browser (apps are likely fine), so you would want to clear your Lemmy cookies and cache once this is over.

But I'm speculating, and changing your password will definitely help!

*Permanently Deleted* in c/fediverse@lemmy.ml
[–] spiderplant@infosec.pub 8 points 1 year ago

This seems to be a front-end JavaScript exploit, so theres's a good chance that this is a Lemmy problem, not a Lemmy[dot]world problem. Don't be surprised if the issue starts spreading to other instances.

If I were running a server, I would take it offline until a patch is released (Beehaw did this, to be proactive).