this post was submitted on 10 Jul 2023
100 points (99.0% liked)

Lemmy NSFW

11864 readers
268 users here now

Updates about lemmynsfw.com

founded 1 year ago
MODERATORS
yay@lemmynsfw.com
MikeyMongol@lemmynsfw.com
gavi@lemmynsfw.com
Limeey@lemmynsfw.com
bobbiguy2122@lemmynsfw.com
metaconnoisseur@lemmynsfw.com
100
Temporarily defederated from lemmy.world (and lemmy.blahaj.zone) as they seem to be compromised (lemmynsfw.com)
submitted 1 year ago* (last edited 1 year ago) by gavi@lemmynsfw.com to c/lemmynsfw@lemmynsfw.com
14 comments fedilink hide all child comments
 

We quietly defederated temporarily earlier because lemmy.world seemed to be compromised earlier in some way, but then it was fixed. Now it's happened again. Unsure what is going on over there but there isn't much use speculating. They have been dealing with weird redirects to shock sites like lemonparty (throwback). Whoever has compromised them seems to have some early 2010s internet sense of humor I guess.

Anyway, once they have things under control and an announcement is made we will refederate ASAP. For the time being, please avoid going to their homepage for the time being as we have no idea what the nature of the compromise of their site is and to what extent.

EDIT: seems lemmy.blahaj.zone just was as well. :(

you are viewing a single comment's thread
view the rest of the comments
[–] eros90@lemmynsfw.com 2 points 1 year ago (2 children)

I have an account signed up there. Should I be worried? How does it affect the user?

[–] wowow@lemmynsfw.com 2 points 1 year ago

The attackers would've been able to get the token used to login but not your password from a vulnerability with custom emoji. Lemmy.world rotated their JWT secret so all logins are invalidated and the vulnerability has been patched. Should be just fine.

[–] gavi@lemmynsfw.com 1 points 1 year ago

We are unsure at this time. Just change any passwords you have that may be the same as what is on that instance just in case.