3
submitted 2 years ago* (last edited 2 years ago) by [email protected] to c/[email protected]

Can the app please be updated to include the sort options Top hour, Top 6 hours, and Top 12 hours?

[-] [email protected] 9 points 2 years ago

What a username haha

[-] [email protected] 66 points 2 years ago

Is this what cracking Denuvo does to people?

20
submitted 2 years ago by [email protected] to c/[email protected]

cross-posted from: https://lemmy.world/post/1299831 due to the text below:

If you were not forced to sign back in this morning, contact your instance admin to verify mitigations were completed on your instance.

I wasn't forced to sign back in.

Is everything under control Jonah?

Hi all,

If you're just now signing in for the first time in 12+ hours, you may just now be finding out that Lemmy World and other instances where hijacked. The hijackers had the full abilities of hijacked user, mod, and admin accounts. At this time, I am only aware of instance defacing and URL redirections to have been done by the hijackers.

If you were not forced to sign back in this morning, contact your instance admin to verify mitigations were completed on your instance.

How?

This occurred due to an XSS attack in the recently added custom emojis. Instance admins should follow the issue tracker on the LemmyNet GitHub, as well as the Matrix Chat. Post-Incident Activity is still on-going.

Currently, it is likely that just your session cookie was stolen, with instance admins being targeted specifically by checking for navAdmin, an HTML element only instance admins had. I do not believe this to affect users across instances, but I have yet to confirm this.

What happens next?

As I am not the developers or affected instance admins, I cannot make any guarantees. However, here is what you'll likely see:

  1. Post Incident investigation continues. This will include inspecting code, posts, websites, and more used by the hijackers. An official incident writeup may occur. You should expect the following from that report:
  • Exactly what happened, when.
  • The incident response that occurred from instance admins
  • Information that might have helped resolve the issue sooner
  • Any issues that prevented successful resolution
  • What should have been done differently by admins
  • What should be improved by developers
  • What can be used to identify the next attack
  • What tools are needed to identify that information
  1. A CVE is created. This is an official alert of the issue, and notifies security experts (and enthusiasts), even those not using lemmy, about the issue.

  2. A code security audit is done. This will likely just be casual reviews by technical lemmy users. However, I will be reaching out to the Mozilla Foundation and Cure53 as they recently did an audit of Mastodon. If there is interest in an external audit of lemmy and the costs are affordable, I'll look into crowdfunding this cost.

[-] [email protected] 17 points 2 years ago

Good god that's terrifying.

[-] [email protected] 22 points 2 years ago

edit: my most upvoted comment is about beans.

[-] [email protected] 14 points 2 years ago

I can recommend, for Android:

Connect

Liftoff

Thunder

I'm using all 3, plus Jerboa, as they are all fantastic apps. At some point I'll just stick with one, but it's exciting following the development of these apps. Use Obtainium to keep them up to date (although Connect is Google Play only).

[-] [email protected] 8 points 2 years ago

There are some fantastic apps being made right now though. For android I am following development for:

Connect

Jerboa

Liftoff

Thunder

Connect is only on Google Play, but the bottom 3 I keep updated using the Obtainium app which grabs the releases from GitHub (gets updates faster then waiting for Google Play).

[-] [email protected] 7 points 2 years ago

It's just a gotcha to them. If I read an article from The Verge and Reddit hasn't commented on it, I'm not even going to remember that quote, let alone make that connection that the article must be unsubstantiated hearsay.

It must make them feel better saying it though.

[-] [email protected] 46 points 2 years ago

It now looks like this in 0.35:

[-] [email protected] 9 points 2 years ago

I don't have much of an imagination so I asked Bing AI:

  • LemmyGo: A simple and fast way to access Lemmy on your mobile device.
  • Lemur: A cute and catchy name that plays on the similarity between Lemmy and lemur, a type of primate.
  • Lemo: A sleek and modern name that sounds like a combination of Lemmy and emoji.
  • Lemix: A name that suggests mixing and sharing content on Lemmy.
  • Lemyx: A name that uses an unconventional spelling to stand out from the crowd.
1
submitted 2 years ago by [email protected] to c/[email protected]

On the subscribed community list (swipe from the left side of the screen) the communities I'm subscribed to are sorted A>Z and then a>z as shown in the image, so they seem to be case sensitive.

A minor nitpick, but are the devs aware assuming this is not intended behaviour?

[-] [email protected] 16 points 2 years ago* (last edited 2 years ago)

I think fragmentation is more susceptible on Lemmy due to the instance design, i.e. there are unlimited instances on Lemmy, each with multiple communities ("subreddits"), but only one instance on Reddit. So there could be 100 c/gaming on Lemmy, but only one r/gaming on Reddit.

It could just be the subreddits I'm subscribed to, but I don't have any fragmentation on there. The most fragmentation I have is something like r/games (discussion) and r/gaming (pictures), so they serve different purposes.

Maybe we are just seeing teething issues on Lemmy right now though, but seeing something like this is disappointing (spoken from someone who is on neither instance).

EDIT: spelling

[-] [email protected] 28 points 2 years ago

Just reading through this post, I think it would be good for Lemmy to have a feature that shows users when writing a comment or post that it won't be seen by users on X instance (in case lemmy.world users are not aware that beehaw.org has defederated them).

If they still go though with the comment or post, it would have an icon that if you hover over/click on it, it shows the communities that have defederated them or what the effect is (X users can't see this post, Y users are not seeing the "True" post etc.)

I don't think I'm explaining it well, but there needs to be some visual indication so anyone on any instance knows that a certain comment or post isn't being seen by users of a certain instance or whatever - or maybe that isn't feasible as there are certain instances that everyone would block.

[-] [email protected] 48 points 2 years ago

Huh, that didn't take long. Lemmy doesn't have legs if this is the start of things (community fragmentation).

1
submitted 2 years ago by [email protected] to c/[email protected]
view more: next ›

NoTime

0 post score
0 comment score
joined 2 years ago