Did you hear about that exploit? The one that got lemmy.world hacked? Does it affect here?

I doubt someone would really try it with here since this instance is so small, but I don’t know how big of a security issue the exploit is.

Here’s an update from lemmy.world https://lemmy.world/post/1287082 (I don’t know how to do instance specific links)

  • SJ_Zero@lemmy.fbxl.net
    link
    fedilink
    English
    arrow-up
    4
    ·
    1 year ago

    As far as I understand, the two things the hacks required were

    1. Custom Emojis
    2. a local user on the instance to be taken over

    Any instance without custom emojis isn’t vulnerable to this particular exploit, and since each instance to be exploited would need a local user it seems likely that larger instances will be the ones that are affected since it doesn’t make much sense to get small instances.