News for hackers. Stuff that matters.
Re:Lemmy.world Defaced by k_roy on Sunday July 09, 2023 @11:39PM (#36661780)
Right now, lemmy.world seems to be switching between "Site has been seized by Reddit for copyright infringment" and a tasteless mp4
Re:Lemmy.world Defaced by brucethemoose2 on Monday July 10, 2023 @12:06AM (#36661956)
Its just down for me.
Re:Lemmy.world Defaced by r721 on Monday July 10, 2023 @12:16AM (#36662019)
Archived defaced version: https://archive.is/wbQ2f
Re:Lemmy.world Defaced by freddyfred on Monday July 10, 2023 @12:40AM (#36662171)
Ooo u/spez is mad. Such a piss-baby
Re:Lemmy.world Defaced by 0l on Monday July 10, 2023 @12:58AM (#36662291)
XSS vuln apparently: https://lemmy.ml/post/1896249
Re:Lemmy.world Defaced by ranguna on Monday July 10, 2023 @04:00AM (#36663329)
For anyone wondering, this was the fix for the vulnerability that allowed people to gain access: https://github.com/LemmyNet/lemmy-ui/pull/1897/files
Re:Lemmy.world Defaced by tentacleuno on Monday July 10, 2023 @09:12AM (#36665875)
Looks like it was related to https://news.ycombinator.com/item?id=36664097. Absolutely ridiculous that the XSS vulnerability wasn't responsibly disclosed.