this post was submitted on 10 Jul 2023
23 points (100.0% liked)

Announcements

433 readers
2 users here now

lemmy.zip annoucements

The same rules as the main instance apply here.

founded 1 year ago
MODERATORS
Demigodrick
Sami
23
Temporarily defederating from the 2 breached instances (self.announcements)
submitted 1 year ago by Sami to c/announcements
5 comments fedilink hide all child comments
 

Defederating from Lemmy.world and lemmy.blahaj.zone until they have their shit back together as they seem to have been compromised (extent is not fully known at the moment). Beehaw took their servers down preemptively too.

Rogue admin accounts can do harm to other instances too this is a precautionary measure until we have a better idea of what we're dealing with.

Reminder not to click on sketchy links!

all 6 comments
sorted by: hot top controversial new old
[–] sunglocto 2 points 1 year ago (2 children)

Can anyone explain what the hell is happening? I just logged into lemmy when I woke up and I see all of this news of admins being compromised

[–] Sami 4 points 1 year ago

Here are post about it with some discussion/analysis:

https://lemmy.zip/post/357196

https://lemmy.zip/post/357639

https://lemmy.zip/post/358397

https://lemmy.zip/post/357947

tldr: It seems like they used an exploit to obtain admin accounts' cookies (the thing that keeps you logged into your account) to gain control of their accounts and potentially other exploits to deface the actual instances.

[–] Ultrawide1654 2 points 1 year ago

Holy shit! Thanks Sami!

[–] altima_neo 1 points 1 year ago

Thank you boss!