SimplePhysics @ SimplePhysics @sh.itjust.works

Posts

2

Comments

93

Joined

2 yr. ago

Right. The amount people with good intentions looking for vulnerabilities in open source software far outnumbers the amount of malicious actors looking for vulnerabilities.

Right. The amount people with good intentions looking for vulnerabilities in open source software far outnumbers the amount of malicious actors looking for vulnerabilities. Chances are great that, by the time malicious actors find a vulnerability, someone with good intentions is working on a patch already.

Don’t they already have that (premium)?

True, I haven’t thought of that. It would work perfectly for light use. You would have to forgo social media when not in range of wifi though (such as while on the bus) and phone calls without wifi (assuming you will use Google Voice, TextNow, or something similar) though. Some people are willing to make that sacrifice, but I think the majority of people will see this as a major turn-off.

Nice! But it won’t be a full fledged phone replacement for most people because of using the phone (such as for GPS/music/podcasts) in the car where there is no wifi access.

No SIM, not even e-SIM could be a problem.

I can see it!

Lemmy.world was defaced last night. As far as I know, there is no DB breach. An XSS vulnerability was abused to steal the cookies of an admin account.

Nice! Yeah, seems to be that lemmy.world logo emoji that stole your cookies. There were people compromised accounts posting them everywhere on .world.

They seem to be down at the moment. I seriously hope SJW is not affected.

Same, my friend, same

Damn. SJW and .world share the same lemmy source code. Could what is happening to .world happen to SJW? I'd take a dig into the lemmy code, but my brain is literal mush right now, its 11:16 PM here.

I don't know. I'm running the latest version of Firefox, which does not have any publicly known severe vulnerabilities. I also happen to be running the latest version of macOS, and most malware target Windows. I have not seen any suspicious activity, so I think I'm good. I did harden my OS and browser a bit when I set things up, so that might have made a difference. I would run a scan with Malwarebytes if I were you. Good luck. Hopefully its just a troll.

Yeah, I get that too, minus the Reddit part. However, during the ten minute span where the attack was resolved (then restarted), a mod/admin account reported that it was caused by a compromised admin account, so not Reddit taking over the site via copyright law. They removed the account, but the issue seems to be back now.

A .world mod/admin mentioned a compromised admin account. They removed the account, but the issue returned soon after I made the first edit to the post.

Edited again, site has been re- compromised. See original post

Visited it again, seems restored. I'll update the post. See original post

Did you read my post? -I said there might be malware. -I said not to visit lemmy.world -The entire site may be fucking compromised. If you have control the servers, you can change database values to make your post any amount of upvotes you want.