lemmy instances be going down by spiderplant in c/memes@sopuli.xyz
[-] spiderplant@infosec.pub 0 points 1 year ago* (last edited 1 year ago)

I keep seeing Vlemmy mentioned but I guess I missed the drama. Did the server admin unexpectedly shut the server down?

Beehaw is also down, but they elected to do it by spiderplant in c/fediverse@lemmy.ml
[-] spiderplant@infosec.pub 5 points 1 year ago

Smart move. I'm surprised more instances aren't doing this.

*Permanently Deleted* by spiderplant in c/fediverse@lemmy.ml
[-] spiderplant@infosec.pub 4 points 1 year ago* (last edited 1 year ago)

FWIW, right now it seems unlikely that your password was accessible to anyone. Your login cookie may have been taken if you accessed Lemmy on a web browser (apps are likely fine), so you would want to clear your Lemmy cookies and cache once this is over.

But I'm speculating, and changing your password will definitely help!

*Permanently Deleted* by spiderplant in c/fediverse@lemmy.ml
[-] spiderplant@infosec.pub 6 points 1 year ago

This seems to be a front-end JavaScript exploit, so theres's a good chance that this is a Lemmy problem, not a Lemmy[dot]world problem. Don't be surprised if the issue starts spreading to other instances.

If I were running a server, I would take it offline until a patch is released (Beehaw did this, to be proactive).

spiderplant

joined 1 year ago