this post was submitted on 10 Jul 2023
114 points (97.5% liked)

Summit

714 readers
1 users here now

Community to discuss Summit, a Lemmy reader for Android.

App (Play Store): https://play.google.com/store/apps/details?id=com.idunnololz.summit

APK: https://github.com/idunnololz/summit-for-lemmy/releases

Patreon: https://patreon.com/SummitforLemmy

Ko-Fi: https://ko-fi.com/summitforlemmy

founded 1 year ago
MODERATORS
 

There was a vulnerability attack on certain Lemmy instances. As part of the resolution to the attack, all accounts have been automatically signed out. The client currently does not handle this gracefully so you will need to manually sign out and sign back in. I am working on a fix for this.

Thank you.

top 5 comments
sorted by: hot top controversial new old
[–] [email protected] 12 points 1 year ago (1 children)

And enable 2FA if you can. Sure, it's annoying to have to dig out your phone (or browser extension, desktop app, etc.) for a code, but it's better than having your account taken over.

[–] [email protected] 22 points 1 year ago (1 children)

I could be wrong but I think the attack circumvents this. As the attacker would receive a users JWT token the 2FA in the login process is moot. Still better to have it enabled in general tho.

[–] [email protected] 1 points 1 year ago

All JWT tokens should have been invalidated by the server creators. Those tokens should no longer be usable. It's still possible actions were taken using your account while the server was compromised. See https://lemmy.world/post/1290412

[–] [email protected] 3 points 1 year ago

On Liftoff, I found I needed to remove my account and then add it again.

[–] [email protected] 2 points 1 year ago

If somehow you cant login back, try manually deleting the cookies from lemmy.world.