this post was submitted on 10 Jul 2023
111 points (99.1% liked)

main

1339 readers
3 users here now

Default community for midwest.social. Post questions about the instance or questions you want to ask other users here.

founded 3 years ago
MODERATORS
seahorse@midwest.social
111
Regarding the recent Lemmy hack *Update* (midwest.social)
submitted 1 year ago* (last edited 1 year ago) by seahorse@midwest.social to c/main@midwest.social
16 comments fedilink hide all child comments
 

In case you're not aware, multiple Lemmy instances suffered hacks recently that allowed the hackers to gain admin privileges and deface the instances and/or redirect users to other sites. Luckily, midwest.social was not a victim of this from what I can tell. To mitigate any more issues I have deleted the single custom emoji that had been uploaded and rotated the JWT which means you will have to log in again on all your devices.

Update: The devs have released 0.18.2 with a security fix for this and I've upgraded to it.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] seahorse@midwest.social 4 points 1 year ago (1 children)

Yeah, that's because of the new token.

[โ€“] SaintWacko@midwest.social 3 points 1 year ago

Oh. Wow, was that bit about the JWT always there? Did I just completely gloss over it?