Lemmy.world and other instances hacked
Lemmy.world and other instances hacked
While I was asleep, apparently the site was hacked. Luckily, (big) part of the lemmy.world team is in US, and some early birds in EU also helped mitigate this. As I am told, this was the issue: - There is an vulnerability which was exploited - Several people had their JWT cookies leaked, including a...
A number of Lemmy instances have been hacked overnight.
Some may remain inaccessible until they have been secured and restarted.
As a safety precaution logged-on sessions on many servers have been cancelled and you are required to logon again.
Unfortunately, the only way I could find to do this in Liftoff! is by going to Settings > Accounts and deleting each local account by long pressing on it, and then create it again.
All your posts, comments and bookmarks should be preserved during this process.
Please see the linked posts for further details as they emerge.
Thanks all, and please bear with us as this gets resolved.
You're viewing a single thread.
oh shit, is that what happened? i was so confused about what was going on last night. having just created my lemmy account.
So youre the one who hacked it.
Oof bad timing!