this post was submitted on 10 Jul 2023
481 points (99.2% liked)

Fediverse

17779 readers
39 users here now

A community dedicated to fediverse news and discussion.

Fediverse is a portmanteau of "federation" and "universe".

Getting started on Fediverse;

founded 5 years ago
MODERATORS
deadsuperhero@lemmy.ml
wakest@lemmy.ml
481
PSA: Lemmy.world has been compromised! (Edit: Multiple Instances are down) (lemmy.ml)
submitted 1 year ago* (last edited 1 year ago) by G59@lemmy.ml to c/fediverse@lemmy.ml
245 comments fedilink hide all child comments
 

FYI!!! In case you start getting re-directed to porn sites.

Maybe the admin got hacked?

edit: lemmy.blahaj.zone has also been hacked. beehaw.org is also down, possibly intentionally by their admins until the issue is fixed.

Post discussing the point of vulnerability: https://lemmy.ml/post/1896249

Github Issue created here: https://github.com/LemmyNet/lemmy-ui/issues/1895

you are viewing a single comment's thread
view the rest of the comments
[–] Stovetop@lemmy.ml 78 points 1 year ago (21 children)

One of the admin accounts appears to have been compromised. The owner/other admins appear to be aware now because that account had its admin access revoked and offending posts are being removed.

Definitely opens up a big question about the security of Lemmy instances that I am sure will be discussed over the next few days.

[–] hawkwind@lemmy.management 33 points 1 year ago (3 children)

I wouldn't assume reasons why or that it's fixed until that consensus has been more widely reached.

[–] Stovetop@lemmy.ml 7 points 1 year ago* (last edited 1 year ago) (2 children)

More time will definitely be needed. I'm glad they caught it and acted quickly enough to prevent more vandalism from occurring, but until we know how the account was compromised and what else they may have gotten in the process, it's still a situation to keep an eye on.

[–] hawkwind@lemmy.management 3 points 1 year ago (1 children)

They are still acting on it, seems.

[–] Stovetop@lemmy.ml 3 points 1 year ago

Yep, it's definitely not over.

load more comments (17 replies)