β’
As an IT, infosec and Internet OG, I truly enjoy how raw and "she's about to blow captain" Lemmy feels. It reminds me of the mid to late nineties when everything was iffy as fuck.
β’
Itβs a big group self-hosting project. I love it. It starts to change your mind about whatβs possible with the development of all these shared protocols, especially with how efficient you can make them.
You can run a relatively small instance on a NAS if you wanted. I like the idea of even more fragmented projects where everyone just hosts for themself and thereβs just a syncing protocol in between. Does give you a lot of attack vectors, but also makes any one attack not that impactful if isolation is good.
I do love that Lemmy is injecting a little bit of the old-time Wild West vibe back into my internet usage! Itβs refreshing in and of itself!
β’
For those unaware, Mastodon had two massive security flaws discovered a few days ago thanks to Mozilla:
https://github.com/mastodon/mastodon/security/advisories/GHSA-9928-3cp5-93fm (9.9/10 severity)
https://github.com/mastodon/mastodon/security/advisories/GHSA-ccm4-vgcc-73hp (9.3/10 severity)
They even got a cute nickname, tootroot!
β’
I think lemmy just blew up overnight.So we have become a target for folks who might have never known we existed prior.Sooner or later, the project needs to attract some pen testers to keep ahead. Luckily the hijackers were not very malicious this time. But could get worse as we grow. We are all in for a bumpy ride and it feels weirdly refreshing.
Possibly also people coming here with the kind of hateful content that was acceptable on Reddit and getting downvoted & blocked/banned almost immediately
yeah lemmy.world and lemmy.blahaj.zone got hacked through their custom emojis, as well as a few others probably. it should be mostly fixed by now though
