Welcome to the RD thread!

This is a place for casual random chat and discussion.

A reminder for everyone to always follow the community rules and observe the Code of Conduct.

Mobile apps:

Android: Jerboa ‣ Connect ‣ Liftoff ‣ Lemming ‣ Summit
iOS: Mlem ‣ Memmy ‣ Remmel
Cross-platform: Thunder ‣ Wefwef
Coming soon: Boost ‣ Sync ‣ Artemis

Quick tips:

Use Teddit.net when posting Reddit links
Upload videos to Streamable
Miss the old.reddit look? Go to user Settings and set Theme to "xx Compact".

Footnotes:

Daily pixel art by Paul Sabado
Report inappropriate comments and violators
Message the moderation team for any issues

you are viewing a single comment's thread
view the rest of the comments

[-] megane_kun@lemm.ee 6 points 1 year ago

I am liking lemm.ee more and more.

This is the lemm.ee admin's response when asked about the vulnerability used to attack lemmy.world and lemmy.blahaj.zone:

Hey folks! I have spent this morning helping lemmy.world mitigate the issue. I have also sent out mitigation instructions to other admins as well.

For the particular exploit that was used on lemmy.world:

It does not spread through federation

lemm.ee was not vulnerable in the first place

As mentioned above, it has already been mitigated on lemmy.world

So there should not be any reason to defederate [from lemmy.world]. I will continue monitoring and investigating, if further vulnerabilities pop up then I will adjust accordingly.

[-] theyawner@lemmy.world 5 points 1 year ago

Judging from the github ticket, it seems like it's a vulnerability on all lemmy instances. But the attack can only happen on instances where the markdown editor has generated the sidebar etc with vulnerable HTML code. The devs still needs to patch the vulnerability to ensure it won't happen again.

[-] megane_kun@lemm.ee 5 points 1 year ago

Admittedly, this stuff is way over my head, but given the quick action I've seen thus far, I'm hopeful that it won't be long before this vulnerability would be patched.