125
Warning: lemmy.world just got hacked
(beehaw.org)
You are already defederated from them...
Just because Beehaw is defederated from this instance, that does not mean that visiting a recently compromised server will not cause your credentials to be compromised.
Read the post again. It was specifically mentioning viewing lemmy.world communities, which is not possible through beehaw.org due to defederation. All you would see is the content before defederation.
Not possible with a beehaw account. But we know many of us may have accounts elsewhere.
It's also possible that Beehaw's instance is vulnerable to the same XSS attack.
No user data like credentials gets transfered. Everything between instances is done with bot like helpers that do the data transfers.
That's the problem, they don't. If you have them stored anywhere on the device you view the communities with, your credentials are not safe.
Edit: this was for someone else.
Anything can be transferred without your knowledge. Do not access hacked servers while expecting privacy.
That would require your device to get hacked, not just the server.
As for privacy... there is really little of that on Lemmy or the fediverse as a whole.
Why would a "foreign" instance need to know my credentials from my local instance just to allow me to browse that foreign instance?
Ah, didn't realize they were already defederated. Still, admins should be on the lookout for an attack on Beehaw.
But I'm not. I'm federated with both Beehaw and lemmy.world.
The post was posted in !support@beehaw.org by beehaw.org user.
People have multiple accounts - maybe even specifically to view .world, or on .world, and this PSA is what made them think twice before switching to it. I mean, you’re here reading and commenting on this post, and you’re not a beehaw.org user. But you could also have a beehaw account if you wanted. If you did, maybe you’d have been on it browsing local when you saw this.
Not sure why this post is a problem. It’s a good PSA.
It's not a bad post. It's a multi-part post and I only responted to part of it. And it was informative too https://beehaw.org/comment/628677
They changed root folder / frontpage, if you access lemmy.world from web browser you'll be redirected somewhere
However, you still can access lemmy.world through applications
Welcome back to Beehaw!
If done via hacked admin credentials, this is a great advertisement for enabling 2FA anywhere it's supported. AIUI Lemmy is also getting support for this for user accounts soon (https://github.com/LemmyNet/lemmy/issues/2363)
Working fine right now.
Thanks for the heads-up. Password changed.
Not sure exactly how they were hacked, but if the server is still compromised then changing your password now doesn't do any good.
Looks fine to me...
view more: next ›
this post was submitted on 10 Jul 2023
125 points (100.0% liked)
Beehaw Support
2796 readers
1 users here now
Support and meta community for Beehaw. Ask your questions about the community, technical issues, and other such things here.
A brief FAQ for lurkers and new users can be found here.
Our September 2024 financial update is here.
For a refresher on our philosophy, see also What is Beehaw?, The spirit of the rules, and Beehaw is a Community
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 2 years ago
MODERATORS