Spyke

Syndicated from the fediverse. Read and engage on the original instance.

View original on talk.kururin.tech
main·Lemmy.ca's Main CommunitybyKururin

Lemmy.world is compromised

They been redirecting to lemon party and some weird video. Do not go to the website. This is the admin that been hacked:

EDIT: lemmy.blahaj.zone also compromised!

View original on talk.kururin.tech
11

17 replies

lemmy.ca

Out of precaution we will defederate from lemmy.world until this is resolved.

Edit: Lemmy.world has resolved the issue

5

Have they resolved it? I can't comment there, or is that from this instance defederating from them? I don't have my lemmy.world account on this app

1

Although requiring 2FA, for all admins on your instance seems appropriate.

To my knowledge we all have 2FA enabled. Will confirm.

2

It's still compromised, right now it's showing text that says site seized by reddit for copyright infringement. Lol. Jerboa is just showing Lemmy World heads

4

The page redirects is named Israel and it redirects to blank page with "This site was seized by Reddit for copyright infringement". So no, they don't have control yet.

3

And this is why you use a password manager whenever you make new accounts on the internet.

If you had an account on the Lemmy.world website you need to change your password.

1

Looks like it’s gonna be a bit really put a lid on this, but I guess another sign why this is a good system?

1
lemmy.ca

Is there a way to not do email verification but still using 2FA? That way, even if a user's account is somehow phished/compromised, it won't compromise their other accounts.

0

I just successfully set up 2FA for an account on another instance that doesn't have a verified email without any issues, so there's no need to have done email verification to use 2FA.

2

this feels too intentional with two big servers in this short time frame icl

-1

Guys, the new Israel lemmy instance has a lot of content I like, but some images I don't agree with. should we defederate?

-1

You reached the end

Lemmy.world is compromised | Spyke