Did you hear about that exploit? The one that got lemmy.world hacked? Does it affect here?
I doubt someone would really try it with here since this instance is so small, but I don’t know how big of a security issue the exploit is.
Here’s an update from lemmy.world https://lemmy.world/post/1287082 (I don’t know how to do instance specific links)
As far as I understand, the two things the hacks required were
- Custom Emojis
- a local user on the instance to be taken over
Any instance without custom emojis isn’t vulnerable to this particular exploit, and since each instance to be exploited would need a local user it seems likely that larger instances will be the ones that are affected since it doesn’t make much sense to get small instances.
We don’t have any custom emoji, so we should be fine.
okay I wasn’t sure