The Lemmy.world hack made a good opportunity to explore other instances out there. Found one based in my area. Back in action!
ayy nice I made a few different accounts on my first day and have added a few since especially in case of crazy things like this happening😂
Same here.
I have one on Kbin too.
I have one on .world but I have stopped using it until they decide to defederate with meta. I also have a kbin social account. Which is also nice place to use if .ml goes down from the lemmy vulnerability.
Afaik, unless lemmy.ml had patched the vulnerability like the lemmy.world folks, the instance is susceptible to the vulnerability.
I almost made the rash, uninformed decision to close up shop on lemmy.world and move my community to another instance. Luckily I did some further reading, and yeah, unless whatever other instance I jumped ship to was also patched I would have just been wasting my time since this is a vulnerability in the Lemmy code and affects all instances until the admins apply a bandaid/the code is fixed.
It’s possible to move communities to other instances? How’s it work?
Not really, unfortunately. You’d have to create the community on a different instance, make a sticky post in the original community redirecting them to the new community, and then lock the community to prevent new posts. If you don’t have a lot of content in the original community, or don’t care about keeping it, you could delete the community after a week or two once people have subscribed to the new community to prevent confusion.
It isn’t possible just yet, although there are issues on Lemmy’s github for it.
When hack?
Currently, far as I know. Blahaj seems to have gone down too
its back up, btw
The past few hours, it was recent.
XSS vulnerbility hack. From a mod:
On that note: does anybody know when or even if lemmy.world will be up again? Right now I’m using an alt account but I’ve got a main one and a community on .world and I couldn’t really find any information on how it’s going over there.
It’s already a done issue, but you will need to log back in and refresh your cookies/cache.
Also, are my Passwords at risk?
Probably not, but you should change it anyway. Use a password manager so none of your accounts have the same password.