/0

2218 readers

3 users here now

Meta community. Discuss about this lemmy instance or lemmy in general.

Service Uptime view

founded 3 years ago

MODERATORS

db0@lemmy.dbzer0.com

Blahaj zone pwned (lemmy.blahaj.zone)

submitted 2 months ago* (last edited 2 months ago) by Wizard3964@lemmy.dbzer0.com to c/div0@lemmy.dbzer0.com

8 comments fedilink hide all child comments

Looks like they've been pwned.

Just checking in with admin to make sure we're not vulnerable to the same thing.

Detailed post here: https://pen.blahaj.zone/supakaity/weve-been-hacked

you are viewing a single comment's thread
view the rest of the comments

[–] A404@lemmy.dbzer0.com 2 points 2 months ago (2 children)

And this is is exactly the reason why I never access the fediverse with my home IP

[–] db0@lemmy.dbzer0.com 8 points 2 months ago (2 children)

We don't store ips anyway

[–] TwiddleTwaddle@lemmy.blahaj.zone 5 points 2 months ago (1 children)

And neither did Blahaj according to their disclosure post. As far as they can tell, only the email used to sign up for the account could be compromised.

[–] Wizard3964@lemmy.dbzer0.com 1 points 2 weeks ago

Their admins disclosed in a comment that ip addresses are stored by the Lemmy database, and were exposed.

[–] Wizard3964@lemmy.dbzer0.com 1 points 2 weeks ago

It looks like IP addresses are stored in the DB in lemmy. It's possible that the attacker had access to those IPs, but we don't believe they accessed them. This is the sort of thing we would turn off if we could :\

From the admin