Lemmy.world and other instances hacked
(lemmy.world)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 10 Jul 2023
45 points (97.9% liked)
Liftoff!
4352 readers
1 users here now
A mobile client for Lemmy running on iOS and Android
founded 1 year ago
MODERATORS
This seems to be the issue, a code injection using custom emojis. Apparently Lemmy is letting some unsanitized data in, which means that Little Bobby Tables strikes again. Somebody was afraid the attackers had seized control of the whole Lemmy network but federation helps hinder the damage here, only individual instances are affected and they'd have to attack each one independently, a single server service would be fully affected in this case.
Beehaw has fully taken down the server as a preventive measure, i imagine they won't be the last ones doing this.