Lemmy Support

157 readers

3 users here now

Support / questions about Lemmy.

Matrix Space: #lemmy-space

founded 5 years ago

MODERATORS

dessalines@lemmy.ml

FYI: lemmy.world appears to have suffered a serious compromise. (rblind.com)

submitted 1 year ago by NoConfigence2192@rblind.com to c/lemmy_support@lemmy.ml

4 comments fedilink hide all child comments

At a minimum they had some hacked web UI mayhem going on along with at least 1 admin account compromised...now they are in an at least partially down state. Might be worth alerting the Powers That Be to see if they want to offer assistance and if any measures should be taken to protect servers federated with it.

you are viewing a single comment's thread
view the rest of the comments

[–] darrsil 3 points 1 year ago (1 children)

I'm surprised I haven't seen more posts yet about this. A rogue or compromised admin put JavaScript redirects on Lemmy.world as well as changed the name and some other things. The other admins removed the compromised admin, but then about 30 minutes later they were reinstated and started wreaking havoc again. The instance eventually went offline completely.

[–] oxf@lemmy.ml 1 points 1 year ago (1 children)

Thanks for the explanation. What terrible news...

Seems we're still in the early stages for this major happening, so I'm sure there will be more information released very shortly.

I guess this goes to show why a federated networks are important, and why people shouldn't flock to the most popular instance. Right now many communities are down because of this, while the ones that were wise enough to set up their own instances are unaffected.

[–] OtakuAltair@lemm.ee 1 points 1 year ago* (last edited 1 year ago)

people shouldn’t flock to the most popular instance

That's precisely why I joined vlemmy.net, but now that seems to be suffering some other issue and is just completely down since yesterday...

Growing pains, I suppose. Mastodon had a serious vulnerability discovered a few days ago too. Looks like the fediverse is gonna need some time to adjust to this sudden massive wave of users.