I know that taking the instance offline isn’t an easy decision but it was the right choice to make until the exploit was patched.

For those who weren’t aware, from my understanding there was an exploit with custom emoji on the Lemmy front end that allowed a malicious script to be ran, which was stealing login cookies. This started on Lemmy(dot)world.

This seemed to have been patched this morning.

From what I’ve seen it didn’t seem to propagate through federated comments but never can be too careful.

Thanks crash and admin/mod team for keeping us safe 🙂

  • Spitfire@pawb.socialOP
    link
    fedilink
    English
    arrow-up
    8
    ·
    1 year ago

    Yeah it’s been happening more often it seems.

    But when something like this does happen I tend to want to gather as much info about it as I can. I was reading up on it through GitHub comments and other Lemmy comments on instances not affected.