Sopuli's Default Community

1257 readers

1 users here now

Community for all jibber-jabber. As this is a hard-coded community for every instance, we may get this doing something useful.

Simple test posts to [email protected]

Meta-discussion regarding the instance and support in problem situations [email protected]

Yhteisö kaikenlaiselle pälätykselle. Koska tämä on kovakoodattu yhteisö jokaiselle instanssille, voimme tehdä tällä ehkä jotain hyödyllistä.

Yksinkertaiset testiviestit mielellään [email protected]

Instanssia koskeva metakeskustelu ja tuki ongelmatilanteissa [email protected]

founded 3 years ago

MODERATORS

[email protected]

multiple lemmy instances are going down to a js injection or admin password hack (sopuli.xyz)

submitted 1 year ago by [email protected] to c/[email protected]

4 comments fedilink hide all child comments

lemmy.world and lemmy.blahaj.zone got hacked, admins in sopuli.xyz should enforce 2fa for admins and possibly disable/ look into possible injections from the community sidebar

top 4 comments

sorted by: hot top controversial new old

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago) (1 children)

I just enabled 2-factor authentication because of this. Script-kiddies are not gonna capture this instance!

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago) (1 children)

It's highly unlikely 2FA is enough to mitigate this kind of an attack. It's a security vulnerability in lemmy itself, and they are stealing your access token instead of trying to log in as you.

edit: People, please, no reason to downvote admin ACKs. Just means they've at least read the message, after that, it's their instance and they'll do as they see fit.

[–] [email protected] 1 points 1 year ago (1 children)

OK.

[–] [email protected] 1 points 1 year ago

Did Sopuli have any custom emojis enabled? Based on what I read about the hack the vulnerability was linked with those as detailed here.