this post was submitted on 10 Jul 2023
72 points (100.0% liked)

main

76 readers
2 users here now

Default community for midwest.social. Post questions about the instance or questions you want to ask other users here.

founded 3 years ago
MODERATORS
seahorse@midwest.social
72
Regarding the recent Lemmy hack *Update* (midwest.social)
submitted 1 year ago* (last edited 1 year ago) by seahorse@midwest.social to c/main@midwest.social
18 comments fedilink hide all child comments
 

In case you're not aware, multiple Lemmy instances suffered hacks recently that allowed the hackers to gain admin privileges and deface the instances and/or redirect users to other sites. Luckily, midwest.social was not a victim of this from what I can tell. To mitigate any more issues I have deleted the single custom emoji that had been uploaded and rotated the JWT which means you will have to log in again on all your devices.

Update: The devs have released 0.18.2 with a security fix for this and I've upgraded to it.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] linuxdaemon@midwest.social 8 points 1 year ago* (last edited 1 year ago) (1 children)

If it you log in and it doesn't show your username, you might have to clear your cookies for midwest.socail and login again. I had to do that in Firefox anyway.

[โ€“] EssentialCoffee@midwest.social 4 points 1 year ago

Thanks for this. I needed to do this on Jerboa too.