cross-posted from: https://lemmy.world/post/1287053
Be alert, Please do not launch a new tab of Lemmy.World. Having tabs already open with this site is fine but as soon as you do you will be bombarded with awful content with malicious intent to cause shock, disgust and distress.
In the meantime use alternative instances, other instances are not affected by this compromise. Do not open any links/posts from the user MichelleG.
Thanks for reading, please stay safe out there Lemmy users!
Update: Lemmy World is under attack again.
Update: I am not a super code-literate person so bare with me on this… But. Still please becareful. There appears to be a vulnerability.
Users are posting images like the following:
And inside hidden is JavaScript code that when executed can take cookie information and send it to a URL address.
Among other things. At this time if you see an image please click the icon circled before clicking the link. If you see anything suspicious, please report it immediately. It is better a false report than a missed one.
This is all part of growing pains on a new admin suddenly owning the top lemmy instance because they knew a little bit about branding.
As I’ve said before, I’m giving the admin a couple months and I feel they’ve done a fantastic job already.
Let this be a lesson to all. Use long passwords with a password manager to deter brute force attacks. Use 2FA for your account. It’s security 101.
The Lemmy 2fa has some compatibility issues and doesn’t verify you have working tokens
Interesting. That does present a serious issue then.
Why the hell do people have to be complete assholes? I had just clicked a link and got all the crap, then couldn’t go to the homepage or any of the posts in my history. I thought I got a virus until I tried it on my other device.
Honestly should be just as illegal as vandalism.
I mean it kinda is, the hacker exposed potential children to p*rnographic content.
looks like we survived the gay porn attack
The worst part was it wasn’t even good gay porn.
