Tough call, probably for the best. Hopefully it's resolved soon.
I think they're stealing auth tokens, not sure if 2fa would help. It looks like there may be a vulnerability in the markdown editor and being able to insert JavaScript. The JS being able to access your cookies to share them is the second issue.
Curl didn't return anything. They're likely just using it to log requests since the request path contains the data they need.
Extra content in exchange for an upvote ๐ค
Try searching for https://lemdro.id/c/askandroid from vlemmy. You might be the first subscriber on that instance.
They're dead last in their conference, it'd take a miracle. I'd love to be witness to that though ๐
It really depends on the company that you use to manage the domain's DNS. As long as they have an API to update DNS records..
For example, I can have my domain at Porkbun and have its DNS managed at Cloudflare. Cloudflare allows updating DNS records via API..so there's programs to update it. Some routers even support it.
Worst case, you can set up a service like duckdns and have your domain, via cname, point to the duck DNS subdomain.
There's options.
Yikes, I didn't even know there was a wiki. Thank you!
This is awesome info. There should be a place to document all the nuance around hosting an instance plus some tips and tricks.
Well I am an uncle ๐ค
/subbed!
To be fair, most apps other than Jerboa didn't exist a few weeks ago ๐
erre
joined 1 year ago
If you run the instance only for yourself then I'd say it makes you an unattractive target. Why do a lot of work to hack an instance with one user?
But yeah, since Lemmy's code is not super mature there'll be some pains in the short term.