I hope they can bring the site back up soon and that it is not gone forever.

    • @moeka89@lemm.ee
      link
      fedilink
      91 year ago

      that is really bad because I am one of the moderator for one of the community in that servers. if this spreads out and took longer than expected. I might consider move my community to other servers.

      • Boz (he/him)
        link
        141 year ago

        I’d give it at least a day or two to see how things shake out, unless it’s really important to you to have that community up all the time.

  • Boz (he/him)
    link
    131 year ago

    I think that’s a good sign. It probably means the problem is being dealt with by admins. Any communities on the affected instances that have subscribers on other instances will be backed up on those other instances, so most of the content is safe no matter what. I just hope the users on those instances know they can come to others in the meantime.

    • TWeaK
      link
      fedilink
      101 year ago

      From the few bits I’ve read, it sounds like the issue is spreading through comments and involves the markdown parser. This needs dev intervention, not just admins.

      • megane-kun
        link
        fedilink
        English
        61 year ago

        it sounds like the issue is spreading through comments and involves the markdown parser.

        What do you mean? Is there something that us normal users can do to mitigate this? Or do we just hope that the devs and admins resolve this?

        • TWeaK
          link
          fedilink
          English
          51 year ago

          This is the conversation I’m referring to:

          https://i.imgur.com/uqW3P8o.png

          It may well be that the lemmy.world admin account was compromised as a result of the hack, rather than to make it happen.

          Apparently Memmy is immune to this, not sure about other apps. Someone else advised staying loggged out, and maybe be prepared to change your password after it’s resolved.

          • megane-kun
            link
            fedilink
            English
            31 year ago

            Thanks for the explanation.

            I’ve already made the decision earlier to change my passwords (on all my accounts on different instances) after this has been resolved.

            • @spiderplant@infosec.pub
              link
              fedilink
              English
              4
              edit-2
              1 year ago

              FWIW, right now it seems unlikely that your password was accessible to anyone. Your login cookie may have been taken if you accessed Lemmy on a web browser (apps are likely fine), so you would want to clear your Lemmy cookies and cache once this is over.

              But I’m speculating, and changing your password will definitely help!

              • megane-kun
                link
                fedilink
                English
                41 year ago

                Thanks!

                Fighting the urge to clear my cookies and cache right now, lol!

          • KSP Atlas
            link
            fedilink
            English
            31 year ago

            Looks like it could be some kind of markdown parser injection, where they manage to forcefully close the HTML src property and enter their own

      • Boz (he/him)
        link
        51 year ago

        Well, taking the most obviously affected instances down is a good start, anyway.

    • TWeaK
      link
      fedilink
      61 year ago

      Bit brave linking direct to an instance. This runs the risk of pulling people out of their apps and onto corrupt pages.

      • james
        link
        fedilink
        111 year ago

        I don’t think there’s any way to link to a post besides an instance specific link, unfortunately

        • Dandroid
          link
          fedilink
          51 year ago

          I really hope they add that soon. They only seem to have instance-agnostic links for communities and users for now.

          But I think you can copy that link into the search bar within Lemmy and not get pulled into another instance.