Lemmy.world compromised, should we temporarily defederate?

https://sh.itjust.works/post/921912

Lemmy.world compromised, should we temporarily defederate? - sh.itjust.works

PSA: DO NOT ATTEMPT TO ACCESS LEMMY.WORLD, THERE MIGHT BE MALWARE Lemmy.world member here. I created this account after .world started redirecting me to porn sites and odd mp3 files. We might want to defederate to limit the potential impact. Also, SJW might be affected by the same vulnerabilities as .world, so maybe the admins here should look at that.

What impact?

As long as you dont go on lemmy.world, it’s not going to redirect you to all the stupid websites.

And I doubt whatever they’re posting (if they’re posting anything) is getting upvoted, so you won’t see it anywhere else.

And where are you getting “malware” from?

People are acting like it’s some crazy hack, and not the 4chan rejects from exploding heads finally guessing an admins password a week after they got defederated. And after all that time chasing the mailman, they had no idea what to do when they guessed it

But this does highlight an issue with instances. I doubt the handful of admins know each other. Like, maybe an email, but for the most part if shit like this happens during “off hours” it might be a while before the top admin even knows there’s an issue

Did you read my post? -I said there might be malware. -I said not to visit lemmy.world -The entire site may be fucking compromised. If you have control the servers, you can change database values to make your post any amount of upvotes you want.
Now let’s see if this goes the way VLemmy did this weekend.
Sorry I’m out of the loop. What happened to VLemmy?

Out of nowhere the instance went down. I believe it was late Saturday morning or so? It was my main instance and nobody has heard from the admin. He was always very enthusiastic and transparent, actively looking for more admins.

A day or so before it went down, he made a post about having to defederate with another instance due to current violation laws in his server’s country of origin. VLemmy is known for not banning many (if any) instances in favor of moderation, so they take defederation very seriously.

It looks like he got caught up with some bad content and had to shutdown. Not sure how long but all his tip and donation links have been closed including I believe his GitHub.

The donation links closing and silence from the admin definitely makes me think some kind of government shutdown.
Oh ok. Dang it’s been a helluva few days, huh?
That would be a fair statement