My main is locked up and it sucks, i hope this all gets fixed.
this post was submitted on 10 Jul 2023
3281 points (99.3% liked)
Lemmy.World Announcements
28382 readers
6 users here now
This Community is intended for posts about the Lemmy.world server by the admins.
Follow us for server news ๐
Outages ๐ฅ
https://status.lemmy.world
For support with issues at Lemmy.world, go to the Lemmy.world Support community.
Support e-mail
Any support requests are best sent to info@lemmy.world e-mail.
Report contact
- DM https://lemmy.world/u/lwreport
- Email report@lemmy.world (PGP Supported)
Donations ๐
If you would like to make a donation to support the cost of running this platform, please do so at the following donation URLs.
If you can, please use / switch to Ko-Fi, it has the lowest fees for us
Join the team
founded 2 years ago
MODERATORS
I appreciate the transparency. Hopefully with more eyes on the source code hacks like this will not happen again.
Just for a bit of perspective -- Scary hacks like this happen all the time in the for-profit corporate world, too. They just don't tell us about it. It will continue to happen as technology constantly grows and evolves.
Praise to the Admins and Devs who play this constant game of whack-a-mole!
load more comments
(1 replies)
It seems that I lost all my subs. There were not many but still annoying.
E: Still subbed but can't see those in Voyager.
I thought Iโd lost mine too, and when I checked the community I wasnโt subbed. I could still view my profile, comments and posts though.
I cleared the cache, then tried to post here and it said I was logged out (even though I could see all my activity except subs). I couldnโt see any way to logout, so I edited my profile and re-entered my password then hit save. That seems to have fixed it, now I can post and my subs are back.
Thank you for your fast answer!
Thanks for the post-mortem and the quick fix! Glad you guys around to help battle test Lemmy's code.
Is a password change advised? How does the JWT cookie and exploit effect apps eg Jerboa?
load more comments
(1 replies)
Good shit! Thanks for keeping things up and the pretty quick response as well.
Thanks to everyone involved for the quick response ๐
Is this why I had to sign in and out of my account on liftoff?
I couldn't comment untill I did that. There may be others!
load more comments
(1 replies)
I lost some of my post history. Is there a data issue that's come from this? Why are my comments gone?
If it is only recent post history, maybe it was purged along with many malicious comments/posts
I know but this was over a week of comments lost.
Well done on acting on it so quickly. I think I did see some of the fake announcements you were referring too but were taken down very quickly. Keep up the good work team and thanks for everything you are doing!
How are you preventing it to happen again until a patch is released from devs?
load more comments
(1 replies)
is that why I can't log into my lemmy.world account?
ok not a problem anymore. seems like I just had to clear my cache and it let me log in
Is there a rough time range when it happened? and any news about other big instances like lemmy.ml? Are those safe? Currently they are not on the same version as lemmy.world.
load more comments
(1 replies)
Thanks for keeping us up dated!
thanks to admin team for resolving that quickly
******* This happened to me, one of my posts had it's photo deleted (I didn't delete it), then when I replaced it, the next time I checked the entire post had been deleted.
Maybe there needs to be a quick rundown how to actually log out and in on clients, seems you can't with jerboa without just wiping the app, and wefwef, you need to delete all accounts.
I see some instances are throwing server errors
Thanks for fixing it.
Thanks.