Meta (lemm.ee)

4126 readers

1 users here now

lemm.ee Meta

This is a community for discussion about this particular Lemmy instance.

News and updates about lemm.ee will be posted here, so if that's something that interests you, make sure to subscribe!

Rules:

Support requests belong in !support
Only posts about topics directly related to lemm.ee are allowed
If you don't have anything constructive to add, then do not post/comment here. Low effort memes, trolling, etc is not allowed.
If you are from another instance, you may participate in discussions, but remain respectful. Realize that your comments will inevitably be associated with your instance by many lemm.ee users.

If you're a Discord user, you can also join our Discord server: https://discord.gg/XM9nZwUn9K

Discord is only a back-up channel, [email protected] will always be the main place for lemm.ee communications.

If you need help with anything, please post in !support instead.

founded 2 years ago

MODERATORS

[email protected]

lemm.ee response to current exploit situation (lemm.ee)

submitted 2 years ago* (last edited 2 years ago) by [email protected] to c/[email protected]

25 comments fedilink hide all child comments

See Here, Here and Here for information about the current situation and the exploits being used.

UPDATE

Lemm.ee Admin @sunarus responded Here, TLDR is that Lemm.ee isn't vulnerable, would advise reading the message if you're still concerned.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 84 points 2 years ago* (last edited 2 years ago) (11 children)

Hey folks! I have spent this morning helping lemmy.world mitigate the issue. I have also sent out mitigation instructions to other admins as well.

For the particular exploit that was used on lemmy.world:

It does not spread through federation
lemm.ee was not vulnerable in the first place
As mentioned above, it has already been mitigated on lemmy.world

So there should not be any reason to defederate. I will continue monitoring and investigating, if further vulnerabilities pop up then I will adjust accordingly.

[–] [email protected] 10 points 2 years ago (3 children)

You rock! Sorry if this is a stupid question, but if both instances are running the same version of Lemmy, why would lemmy.world be affected but not lemm.ee?

[–] [email protected] 10 points 2 years ago (1 children)

Malicious custom emoji contained scripts that sent session cookies to the attackers.

[–] [email protected] 2 points 2 years ago

Makes sense! Thank you.

load more comments (1 replies)

load more comments (8 replies)