6
submitted 1 year ago* (last edited 1 year ago) by dcx to c/announcements

Update: Federation and community creation are now back online!

Hey all, there's a hack floating around which spreads via federated comments and steals users' Lemmy auth tokens. Lemmy.world and other large instances have been hacked, so we're taking some precautions until this is fixed:

  • We're logging everyone out so that auth tokens reset
  • We're closing off federation and community creation until this is patched

FYI, there are no indications that anyone on our instance has been hacked. We did find ten comments with the code injection attack, which we've now scrubbed. But it's very unlikely that this will cause harm at this stage. There are several steps between this and hacking the entire instance. (Also FYI for nontechnical users, the hack affected Lemmy logins and nothing else. Web browsers run all websites in a kind of "jail")

Sorry for the inconvenience – growing pains. Updates to come as we learn more!

you are viewing a single comment's thread
view the rest of the comments
this post was submitted on 10 Jul 2023
6 points (100.0% liked)

Announcements

231 readers
1 users here now

founded 1 year ago
MODERATORS