Sopuli's Default Community

1337 readers

1 users here now

Community for all jibber-jabber. As this is a hard-coded community for every instance, we may get this doing something useful.

Simple test posts to !test_community@sopuli.xyz

Meta-discussion regarding the instance and support in problem situations !meta@sopuli.xyz

Yhteisö kaikenlaiselle pälätykselle. Koska tämä on kovakoodattu yhteisö jokaiselle instanssille, voimme tehdä tällä ehkä jotain hyödyllistä.

Yksinkertaiset testiviestit mielellään !test_community@sopuli.xyz

Instanssia koskeva metakeskustelu ja tuki ongelmatilanteissa !meta@sopuli.xyz

founded 4 years ago

MODERATORS

QuentinCallaghan@sopuli.xyz

tkk13909@sopuli.xyz

multiple lemmy instances are going down to a js injection or admin password hack (sopuli.xyz)

submitted 2 years ago by wetnoodle@sopuli.xyz to c/main@sopuli.xyz

12 comments fedilink hide all child comments

lemmy.world and lemmy.blahaj.zone got hacked, admins in sopuli.xyz should enforce 2fa for admins and possibly disable/ look into possible injections from the community sidebar

you are viewing a single comment's thread
view the rest of the comments

[–] ananas@sopuli.xyz 4 points 2 years ago (1 children)

It's highly unlikely 2FA is enough to mitigate this kind of an attack. It's a security vulnerability in lemmy itself, and they are stealing your access token instead of trying to log in as you.

[–] QuentinCallaghan@sopuli.xyz 2 points 2 years ago (1 children)

OK.

[–] Nowyn@sopuli.xyz 1 points 2 years ago

Did Sopuli have any custom emojis enabled? Based on what I read about the hack the vulnerability was linked with those as detailed here.