Hey guys,

Sorry about the absence, have been super busy with life, other projects and the nightmare of buying a flat lol.

Instance should be updated to 0.18.3, as some of you have noticed the website has been periodically down the last few weeks (at most by half an hour at a time) will keep monitoring the uptime after this update but hopefully this partially fixes it

So last night a XSS scripting attack was found on all Lemmy instances. See the lemmy world update here https://feddit.uk/post/453040

What this means is that hackers could inject their own "script" when any user viewed a comment/post that the hackers made. The hackers would then grab your JWT token with the script so they could impersonate that user. (And perform any actions on behalf of the user)

Luckily, it looks like I haven't been compromised so the site config should all be the same

What has been done about this

I've removed any comments or posts which included the script see here https://github.com/LemmyNet/lemmy-ui/issues/1895

I would have removed all custom emojis as well but there was none in our DB, this may potentially mean that this site was not affected. Just in case, I've also rotated the JWT tokens so all tokens are now invalid. This means you will have to logout and log back into the instance

Shoutout to @[email protected] for messaging me about this and bringing it to my attention

Big update this, this update comes with captcha being available which has now been re-enabled for sign up. This means signups are once again open (as captcha should filter out most bots).

Quite a few UI changes in this one and quite a few performance updates as well (mainly around how the database works). If anyone is interested our CPU average is around 8-10% usage and the memory usage has dropped to around 5% usage so the instance is looking pretty stable.

Hey everyone,

I've deployed a feddit.uk specific instance of wefwef at app.feddit.uk

If you haven't heard of wefwef before, it's essentially a mobile UI which you can deploy as a PWA to your phone, the link for the actual app is here https://wefwef.app

So that we don't rely on wefwef servers, I've deployed a local version which should be faster as it runs on the same server as feddit.uk so is essentially a second UI to the regular web app as I've limited to feddit.uk only at the moment.

Thanks, Tom

Hey everyone, It seems a lot of people are having issues verifying their email when first signing up as they are not receiving the email.

This is because around 20-30% or emails sent from [email protected] are being bounced due to being marked as spam. I'm working on fixing this at the moment, (the domain is on a domain blacklist on spamhaus.org)

In the meantime, please send an email to [email protected] from the email that needs verifying and I will verify the email manually which should resolve the issue.

Thanks, Tom

Wonder what has caused the sudden rise in the last few months

Shame would love to him in the Prem, but then it would for Liverpool or City. Reckon he'll do well at Madrid

cross-posted from: https://feddit.uk/post/1

What is Lemmy?

Lemmy is link aggregator software that exists in the fediverse, meaning it connects with other “ActivityPub” software like Mastodon and other Lemmy instances. Basically, you can follow and interact with communities here on feddit.uk, on any other Lemmy instance, or even from your Mastodon account!

What is Feddit.uk

Feddit UK is a UK specific instance of Lemmy, ideal for people from the UK or are just interested in following the UK community.

This instance is hosted by me Tom, an experienced software dev based in London. I decided to host Feddit UK as I saw many instances already made for other countries and none for the UK and saw the need for a UK community on the Fediverse. To help the upkeep cost of this instance, please consider donating by buying me a coffee!

Why Feddit

Feddit comes from the combination of the words Fediverse and Reddit. Lemmy is a new alternative to Reddit based on the Fediverse!

What are the rules here?

• No racism, sexism, homophobia, transphobia or xenophobia
• No incitement of violence or promotion of violent ideologies
• No harassment, dogpiling or doxxing of other users
• Do not share intentionally false or misleading information
• Do not spam or abuse network features.

Hey guys, just to let you know I'm upgrading the server tonight to a dedicated server which should improve the speed of the site significantly. It shouldn't take too long and might resolve some issues we were having on the instance.

At the moment, the server has been running on shared hosting which is cheap hosting where the server that runs the website is shared among many users. I upgraded it this morning but it didn't seem to help at all so I'm opting for a dedicated instance.

Over the last few days we've seen a good number of users join the instance and I've had a good number of donations from some great people!

My intentions are to run this server for as long as I can even if I'm putting some of my own money into it. I know some people may be worried about an instance like this being hosted by one person but I promise I'll keep it up and keep regular backups just in case I can't host it anymore or something happens to the server!

Hopefully that's the last we hear of Boris 👋