The Most Pathetic Person

Very, seems like great work.

First - really good summary and sounds like everyone is working hard.

Cross posting the below comment.

Under GDPR if you have had a data breach you have a legal obligation to assess whether you need to report it and you must make the report within 72 hours of discovering the breach.

There are other types of reportable breaches too, I only mention data as it sounds most likely. You may or may not be subject to PECR which may also have been breached although less likely. I don’t really have enough familiarity with the regulation to discuss that one.

If you are not sure if there has been a breach you may also need to discuss it with the relevant body or make a report.

Please can you update what action you have taken regarding this and if the incident was reportable or not and the reasons why. Edit - from that new information, it sounds like this is a reportable breach.

For a full understanding, it would be good to know if you had 2FA enabled on the compromised account particularly as it had admin privileges and if so how 2FA was circumvented with this exploit.

It would also be good to know what measures you have in place to prevent the same or other malicious attempts on your Open Collective and Patreon accounts as issues with those are potentially more serious. They may not be vulnerable to this, but it is going to be reassuring to know there is good security practice, 2FA protection etc enabled and you have robust procedures in place.

• well actually this is well documented on GitHub
• Looks like you linked to a Lemmy community using an URL instead of its name
• if you were around when Digg...
• lemming
• Lenny
• Margot Robbie
• GDPR
• security incidents

People like me help to define, build, test, and support important services you use. Explains a lot.

I always struggled with looking at the porn because my erection would get in the way. Thank you for reading and have a great day

I'm mainly avoiding it because it's dumb

You're not missing much

I think deep down he is, although he has the moral compass of a 4 year old.

Edit - oh I thought you said Mr Bean

I think it remains to be seen. The rapid growth of .world has been the first real production test of how the platform handles more users and content. Amazing work by the team, but there are a lot of rough edges and it is a new platform with a lot of unknowns.

The things that spring to mind for me are:

• Sign up needs to be streamlined and made more simple, and find a way to not overload individual servers without just randomly assigning people to instances.

• Live defects, bugs and things feeling rough around the edges.

• Back-end build and scaling.

• Duplicate communities across instances.

• Account migration between instances.

• Data retention past x period - how will various instances handle this with a large number of users.

• GDPR and data request compliance from individuals, governments, etc.

• Funding the costs and resources associated with rapid, large growth. How do people know what their money is going to fund? I think there needs to be real transparency, public roadmaps and backlogs and understand how / if admins are accountable.

• How the platform and users will respond to large corporations or even individual admins on instances adding adverts, using / selling user data in ways the userbase do not expect.

Really interested to hear about the plans and costs to scale up and grow in a stable, reliable, and safe way. Hopefully Patreon membership grows too and allows continued performance improvements.

I think for more casual users, continued degraded performance - or worse, an instance being stopped for whatever reason and the content and accounts being lost - would probably stop the platform being a true replacement. Casual users would head back to Reddit.

I think having a public roadmap and backlog, good communication and transparency will be super important, particularly in these early stages.

Great job so far, this kind of sudden growth is not easy to manage!

This is beautiful to see - I understand Reddit is a company that needs to make a profit, but the way they have treated their users and unpaid staff is shocking (but not unexpected). The fact it also heavily impacts users with additional accessibility requirements is terrible.

Will be fun in a way to watch Reddit try to claw back what has happened.

Give it 12 months it will likely be a wreck along with the current CEO who will probably be given the boot.

I'm old enough to have seen many services go through this: AOL, MSN, MySpace, Fark, Slashdot, Digg, Something Awful, etc. Reddit (and maybe Twitter) are just next in line to realise they are not too big to fail. Hopefully followed by Meta.