505
WARNING: Lemmy Self-Hosters, There Have Been CSAM Attacks taking place against !lemmyshitpost@lemmy.world (jamie.moe)
submitted 2 years ago* (last edited 2 years ago) by Jamie@jamie.moe to c/selfhosted@lemmy.world
157 comments fedilink hide all child comments

cross-posted from: https://jamie.moe/post/113630

There have been users spamming CSAM content in !lemmyshitpost@lemmy.world causing it to federate to other instances. If your instance is subscribed to this community, you should take action to rectify it immediately. I recommend performing a hard delete via command line on the server.

I deleted every image from the past 24 hours personally, using the following command: sudo find /srv/lemmy/example.com/volumes/pictrs/files -type f -ctime -1 -exec shred {} \;

Note: Your local jurisdiction may impose a duty to report or other obligations. Check with these, but always prioritize ensuring that the content does not continue to be served.

Update

Apparently the Lemmy Shitpost community is shut down as of now.

you are viewing a single comment's thread
view the rest of the comments
[-] idle@158436977.xyz 20 points 2 years ago

I went ahead and just deleted my entire pictrs cache and will definitely disable caching other servers images when it becomes available.

[-] sparky@lemmy.federate.cc 7 points 2 years ago

Anyone know if this work is tracked anywhere? I’m suddenly really suspicious of continuing to run my own instance.

[-] hitagi@ani.social 7 points 2 years ago

https://github.com/LemmyNet/lemmy/pull/3897

It does say "thumbnails" but as far as I know, Lemmy (or pictrs) makes a copy of the full image too. I don't know if this PR includes full images.

this post was submitted on 28 Aug 2023
505 points (98.3% liked)

Selfhosted

60426 readers
436 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world