Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
hachyderm.io is one of the many independent Mastodon servers you can use to participate in the fediverse.
Hachyderm is a safe space, LGBTQIA+ and BLM, primarily comprised of tech industry professionals world wide. Note that many non-user account types have restrictions - please see our About page.

Administered by:

Server stats:

9K
active users

hachyderm.io: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

Public *
maegul

Lemmy.world is current under some attack.

Seems an admin had their credentials hacked and the bad actor was defacing the webpage and posting as the admin.

There were attempts to clean it up that apparently didn’t entirely succeed as the hacker somehow resumed defacing things.

As of now, the site is down. Logging in may not be a good idea. Given the time, Ruud is probably still asleep and assistant admins are on it.

See lemmy.ml thread: lemmy.ml/post/1895271

@fediversenews

lemmy.mlPSA: Lemmy.world has been compromised! (Edit: Multiple Instances are down) - LemmyFYI!!! In case you start getting re-directed to porn sites. Maybe the admin got hacked? --------- edit: lemmy.blahaj.zone has also been hacked. beehaw.org [http://beehaw.org] is also down, possibly intentionally by their admins until the issue is fixed. Post discussing the point of vulnerability: https://lemmy.ml/post/1896249 [https://lemmy.ml/post/1896249] Github Issue created here: https://github.com/LemmyNet/lemmy-ui/issues/1895 [https://github.com/LemmyNet/lemmy-ui/issues/1895]
maegul

@fediversenews

Seems that there may be a vulnerability in the platform itself.

beehaw.org have taken the precaution of turning their server off until things get sorted.

See hachyderm.io/@beehaw/110687918

@beehaw

Also ... kudos to beehaw admins ... having an admin account on a separate instance and platform for announcements ... "this is the way" and all!

Jul 10, 2023, 05:14 AM·Public·Web
10boosts·14favorites
Quiet public
WesMason

@maegul
Ok, this just makes a lot of sense. Also...
If your instance is down (mine was due to a failed AC issue), even having an external admin account would not help because people would not have access to their account to see the admin. This is assuming users are not aware of the link to the admin account on another service. I need to think on this now though. I like the idea.

@fediversenews @beehaw @Jdreben

ExploreLive feeds
About