Judging from the github ticket, it seems like it's a vulnerability on all lemmy instances. But the attack can only happen on instances where the markdown editor has generated the sidebar etc with vulnerable HTML code. The devs still needs to patch the vulnerability to ensure it won't happen again.
theyawner
joined 2 years ago
It doesn't even have to be 2FA. Linux Tech Tips got their channels hacked through a malware that targeted a user's session tokens that keep the user logged in to their Youtube channels.
I thought it was odd how I can't find the lemmy favicon on my browser tabs. But it looks like they've started reverting the changes made.
Spent most of the weekend just playing Divinity Original Sin 2. I played the first game but got bored with it at some point. I don't even remember much about the story. The sequel on the other hand felt more engaging and having an option to start with pre-made character is actually a plus. I can see why there's excitement over the developer (Larian Studios) working on Baldur's Gate 3.
It's interesting how lemmy.world is becoming a primary source for performance monitoring and troubleshooting due to the actual high volume of traffic. And this in turn benefits all lemmy instances.
Weird. Mastodon instances can only share what's public and email isn't one of 'em. Only possible explanation is that someone knew or managed to acquire your email address or managed to take a guess. But the motivation behind it is puzzling.
Paanong auto-add?
Nearly a month ago I requested for my reddit data and I just got the file today. A few notes:
- It has all my comments since 2011. But a large part of it is unavailable on the actual site if I take a look at my profile.
- Most of the data is comprised of my comments (around 15000+), posts (almost 200), upvoted/downvoted comments, upvoted/downvoted posts, etc.
- IPs used to access the site are logged for about the last 3 months or so.
I just read about how you can only make a Threads account if you have Instagram. And you can't delete it. You can only either deactivate your Threads profile or outright delete your Instagram account.
It might not work since they're different platforms with different APIs. The only way an app might work on both platforms is if the app itself chooses to support both APIs.
That said, there's a level of interaction between the two since they both use ActivityPub. I.e. on Mastodon I can search for a particular Lemmy user and see their posts.
Better save up for the a/c and fans people. Hotter days lie ahead.
A not so fun fact: cities may experience the Urban Heat Island effect and one of the factors is the reliance on air conditioners.
It's a quirk of federation. You can only access and interact with you instance's local copy of a post from another instance. You won't see updates from other instances until the data has synchronized.