142

The vulnerability seems to have been patched, federation is re-enabled and so is community creation. (lemmynsfw.com)

submitted 1 year ago by gavi@lemmynsfw.com to c/lemmynsfw@lemmynsfw.com

14 comments fedilink hide all child comments

Thank you for your patience yall. It seems our mitigation efforts worked and we were likely never in danger. If you are concerned about other accounts on affected instances, it is unlikely your personal data was breached. Keep a look out for more info on those instances though as they will likely explain things more.

top 12 comments

sorted by: hot top controversial new old

[-] DelvianSeek@lemmynsfw.com 9 points 1 year ago

Thanks for working things out and for keeping us up to date!

[-] uncommonlolcat@lemmynsfw.com 7 points 1 year ago

Can anyone point me to where they've hosted the source code to lemmynsfw.com? 👀

[-] buttercream@lemmynsfw.com 4 points 1 year ago* (last edited 1 year ago)

github.com/lemmyNet/

and if you want the specific issue that was this vulnerability: https://github.com/LemmyNet/lemmy-ui/issues/1895

[-] uncommonlolcat@lemmynsfw.com 1 points 1 year ago

I was just curious because https://the-federation.info/platform/73

Shows that the instance is on "0.18.1-nsfwpatch" so I just wanted to know what's the changes they had to do from the main repo in the patch

[-] buttercream@lemmynsfw.com 2 points 1 year ago

for the nsfw patch itself? probably just some code to halt stuff like blur for nsfw posts and the such. i dont think there is much going on changes wise with the patch. otherwise it is just built on top of the lemmy-ui. IMO

[-] uncommonlolcat@lemmynsfw.com 1 points 1 year ago

Whatever it may be, it would be nice to see the actual changes done 👍🏻

[-] bwilberforce@lemmynsfw.com 3 points 1 year ago

Appreciate the hard work and transparency!

[-] Pornphilosoph@lemmynsfw.com 2 points 1 year ago

@gavi@lemmynsfw.com My Account in this instance gets constantly logged out again from Memmy and Mlem. So I suppose that is an lemmynsfw issue, because my other account at another instance just works fine with both apps.

Could this be a fallout of the server update?