bookwormstory.social

Last night the instance lemmy.world suffered a JavaScript injection attack. The attack set out to steal login cookies of users upon visiting infected threads, primarily targeting admins.

Potentially Affected Data

• E-Mail address stolen and/or changed (if provided in user settings)
• Password changed

Mitigations

Malicious comments have been replaced by a removal message. I have deployed the UI hotfix and @ludrol@bookwormstory.social has deleted all Custom Emoji until it is clear whether those are safe to use. Additionally all login sessions have been invalidated as a safety precaution as well, any cookies that were stolen are now rendered useless.

Conclusion

So far it does not seem like this instance was affected.

If you are not using bookwormstory.social and your instance is not on UI Version 0.18.2-rc.1 please be aware that you are likely still at risk of the attack, please check for any announcements of your instance administrators.

Details of the vulnerability are here

I have decided to block Meta's Fediverse platform threads.net. The three reasons pushing me to do so are:

• Meta's known history of the Embrace-Extend-Extinguush playbook (XMPP)
• Meta's disturbing data collection practices when it comes to threads.
• I don't trust Meta to keep their platform properly moderated. Especially since large parts of the fediverse already defederated, reducing the number of independent moderators checking over their content.

Edit: This is preventitive, threads.net does not offer ActivityPub support currently but has announced plans to do so in the future.

Hi guys weird question, I use lemmy's inbox RSS as a sort of pseudo push notification (currently using monito RSS discord bot polling at every 10 min).

I was considering dropping the poll rate to every 1-2 min. Out of curiosity is a rss poll rate of every 1-2 min acceptable or considered excessive.

Primary reason I was considering dropping the poll rate this low is to prevent a notification lag (ie when brosing lemmy via a 3rd party app after viewing and marking a message as read 10 min latter I get a inbox notification for the same message).

Curious on your thoughts

All seriousness I found this on reddit

Special copy of Fahrenheit-451 reveals text when exposed to intense heat.

https://www.reddit.com/r/Damnthatsinteresting/comments/14rksbn/special_copy_of_fahrenheit451_reveals_text_when/

https://www.youtube.com/watch?v=Ik744lMPP9k

Modified from Catasterised (og puheeroff) https://www.youtube.com/watch?v=XLxn3zUdcbI&list=LL&index=95&t=2s

Reddit

Discord

...from Bertilde pov. Based on the poll sensei had on Twitter a while ago, the theme of the chapter will be noble apprenticeship.

As I understand it, there's a lot more to this story to be told. But the last line of the last episode that I saw sounded an awful lot like "the end".

Particularly given the subject matter of the show, I'm not opposed to just switching to the light novel, but what do you think?

To good to pass up

Source: https://www.reddit.com/r/HonzukiNoGekokujou/comments/14jxkyd/p5v5_welcome_to_the_hater_club_adolphine/