Thanks all working again. Had to clear my browser cache in order to login again and had to resign in to memmy too.

I guess its early days for lemmy for incidents like this, fingers crossed something like this doesn't happen again :)

Thank you for taking the time to update this :) Hope everything will be sorted out without people being scared. As a layman, was any user data compromised?

I wasn't using webpage, I was only using mobile app (Connect). Could my coockie be also stolen that way or was that only possible on webpage?

Here's a relevant post that talked about this with @[email protected] I think is worth looking into for anyone curious what exactly happened.

https://sh.itjust.works/post/923025

please don't visit the legal section of the website or anything confirmed compromised if anything.

Excellent, thanks for the quick response ruud and admins.

I’ve been unable to login on desktop since this happened. Only been able to login via Memmy on IOS.

I put in my info and it kicks me back to the front page and doesn’t log me in.

I’ve tried clearing cache too

EDIT: Switching browser to Edge seemed to let me. Weird. Even reinstalled Firefox and still won't let me.

A lot of images seems to be gone from posts in /c/pics is this related to the hack or the cleanup after?

Poor beehaw.org is still down

I found this in my private messages, when an attack was happening I messaged the guy “are you ok” and he replied back to me with an image of my own message… I wonder if this was similar to what was done here? Was 8 days ago

Thanks for the info, Ruud. I just put in for a monthly donation to you all -- I appreciate you.

Is it possible cookies for other websites were scraped? I was logged in to .world at the time; I have logged out of all accounts, and reset passwords as a precaution, but want to know if I should be on the lookout from this.

Testing… I have to keep trying this because memmy is being a dick.

What are the risks for people who use Jerboa for Lemmy? I logged put and back in and there doesn't seem to be any issues, so are the app users excluded from this?

Would it be a good idea to force a login if the users IP or device suddenly changes?

Congratulations everyone on the quick fix/mitigation!