Lemmy.world Defaced and Hacked
- 71
- 118
Top Poster of the Day:
peepeehands
Current Registered Users: 29,252
tech/science swag.
Guidelines:
What to Submit
On-Topic: Anything that good slackers would find interesting. That includes more than /g/ memes and slacking off. If you had to reduce it to a sentence, the answer might be: anything that gratifies one's intellectual laziness.
Off-Topic: Most stories about politics, or crime, or sports, unless they're evidence of some interesting new phenomenon. Videos of pratfalls or disasters, or cute animal pictures. If they'd cover it on TV news, it's probably lame.
Help keep this hole healthy by keeping drama and NOT drama balanced. If you see too much drama, post something that isn't dramatic. If there isn't enough drama and this hole has become too boring, POST DRAMA!
In Submissions
Please do things to make titles stand out, like using uppercase or exclamation points, or saying how great an article is. It should be explicit in submitting something that you think it's important.
Please don't submit the original source. If the article is behind a paywall, just post the text. If a video is behind a paywall, post a magnet link. Fuck journos.
Please don't ruin the hole with chudposts. It isn't funny and doesn't belong here. THEY WILL BE MOVED TO /H/CHUDRAMA
If the title includes the name of the site, please leave that in, because our users are too stupid to know the difference between a url and a search query.
If you submit a video or pdf, please don't warn us by appending [video] or [pdf] to the title. That would be r-slurred. We're not using text-based browsers. We know what videos and pdfs are.
Make sure the title contains a gratuitous number or number + adjective. Good clickbait titles are like "Top 10 Ways to do X" or "Don't do these 4 things if you want X"
Otherwise editorialize. Please don't use the original title, unless it is gay or r-slurred, or you're shits all fucked up.
If you're going to post old news (at least 1 year old), please flair it so we can mock you for living under a rock, or don't and we'll mock you anyway.
Please don't post on SN to ask or tell us something. Send it to [email protected] instead.
If your post doesn't get enough traction, try to delete and repost it.
Please don't use SN primarily for promotion. It's ok to post your own stuff occasionally, but the primary use of the site should be for curiosity. If you want to astroturf or advertise, post on news.ycombinator.com instead.
Please solicit upvotes, comments, and submissions. Users are stupid and need to reminded to vote and interact. Thanks for the gold, kind stranger, upvotes to the left.
In Comments
Be snarky. Don't be kind. Have fun banter; don't be a dork. Please don't use big words like "fulminate". Please sneed at the rest of the community.
Comments should get more enlightened and centrist, not less, as a topic gets more divisive.
If disagreeing, please reply to the argument and call them names. "1 + 1 is 2, not 3" can be improved to "1 + 1 is 3, not 2, mathfaggot"
Please respond to the weakest plausible strawman of what someone says, not a stronger one that's harder to make fun of. Assume that they are bad faith actors.
Eschew jailbait. Paedophiles will be thrown in a wood chipper, as pertained by sitewide rules.
Please post shallow dismissals, especially of other people's work. All press is good press.
Please use Slacker News for political or ideological battle. It tramples weak ideologies.
Please comment on whether someone read an article. If you don't read the article, you are a cute twink.
Please pick the most provocative thing in an article or post to complain about in the thread. Don't nitpick stupid crap.
Please don't be an unfunny chud. Nobody cares about your opinion of X Unrelated Topic in Y Unrelated Thread. If you're the type of loser that belongs on /h/chudrama, we may exile you.
Sockpuppet accounts are encouraged, but please don't farm dramakarma.
Please use uppercase for emphasis.
Please post deranged conspiracy theories about astroturfing, shilling, bots, brigading, foreign agents and the like. It degrades discussion and is usually mistaken. If you're worried about abuse, email [email protected] and dang will add you to their spam list.
Please don't complain that a submission is inappropriate. If a story is spam or off-topic, report it and our moderators will probably do nothing about it. Feed egregious comments by replying instead of flagging them like a pussy. Remember: If you flag, you're a cute twink.
Please don't complain about tangential annoyances—things like article or website formats, name collisions, or back-button breakage. That's too boring, even for HN users.
Please seethe about how your posts don't get enough upvotes.
Please don't post comments saying that rdrama is turning into ruqqus. It's a nazi dogwhistle, as old as the hills.
Miscellaneous:
The quality of posts is extremely important to this community. Contributors are encouraged to provide high-quality or funny effortposts and informative or entertaining comments. Please refrain from posting the following:
Boring wingcucked nonsense nobody cares about that belongs in chudrama
Normie shit everyone already knows about
Anything that doesn't gratifify one's intellectual laziness
Bimothy-tier posts
Anything that the jannies don't like
Jannies reserve the right to exile baby ducks from this hole at any time.
We reserve the right to exile you for whatever reason we want, even for no reason at all! We also reserve the right to change the guidelines at any time, so be sure to read them at least once a month. We also reserve the right to ignore enforcement of the guidelines at the discretion of the janitorial staff. This hole is a janny playground, participation implies enthusiastic consent to being janny abused by unstable alcoholic bullies and loser nerds who have nothing better to do than banning you for any reason or no reason whatsoever.
[[[ To any NSA and FBI agents reading my email: please consider ]]]
[[[ whether defending the US Constitution against all enemies, ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]
/h/slackernews SETTINGS /h/slackernews MODS /h/slackernews LOG /h/slackernews EXILEES /h/slackernews FOLLOWERS /h/slackernews BLOCKERS
Jump in the discussion.
No email address required.
looks like it's an exploit in the emojis or something. you know how in markdown image links you can provide alt text? well apparently the lemmy code just smacked the text into the HTML without doing any sort of check.
so you could do something like
and it'd essentially render the HTML as
this was used to send multiple requests to some website that is bitching about Ukraine (I'm not even joking here, screenshot below) with your cookies.
it also apprently checks for a specific element in the page that would indicate the user is an admin. apparently they don't set HttpOnly on their cookies, so this script was able to just raid the user's cookie jar. all and all, seems pretty bad.
Jump in the discussion.
No email address required.
lol of course emojis in lemmy need to have alt text
god forbid all the disabled blind lgbtqia+ members browsing lemmy in a text based browser can't understand a meme
Jump in the discussion.
No email address required.
More options
Context
More options
Context
so two lemmy instances were hacked, do we know if it was some sort of lemmy vuln or just bad passwords?
EDIT: looks like simple XSS
https://lemmy.ml/post/1896249
Jump in the discussion.
No email address required.
devs will use rust to prevent memory issues but can't prevent simple xss
Jump in the discussion.
No email address required.
Hmm today I will interpret unsanitized inputs
Jump in the discussion.
No email address required.
More options
Context
Wouldn't have happened if they'd used rust for the frontend
Jump in the discussion.
No email address required.
rust frontend with webassembly
Jump in the discussion.
No email address required.
controversial opinion but if your program is meant to run natively and on the web then a rust frontend is the only good choice from a technical standpoint
sure rust is dogshit for writing ui but a frontend library which can run natively on wasm and raw hardware is objectively superior to electron cancer
Jump in the discussion.
No email address required.
I know it's considered a meme language especially around here for all the shit but I still think Rust is a really solid programming language, and I'd love to be able to program in Rust rather than C++ for my day job.
Jump in the discussion.
No email address required.
More options
Context
but also, https://tauri.app/
Jump in the discussion.
No email address required.
tauri is better but still inefficient compared to native performance
a language that's memory safe and isn't ugly would unironically be better than javascript for writing frontend cross platform, fight me
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
More options
Context
More options
Context
tbh Lemmy could reimplement itself in python and still get better performance
Jump in the discussion.
No email address required.
sorry but python isn't 🚀 blazing fast 🚀
Jump in the discussion.
No email address required.
More options
Context
More options
Context
They forgot not everybody is moral, and that you shouldn't let your users decide where to look for a butthole emoji
Jump in the discussion.
No email address required.
More options
Context
More options
Context
Do rustBIPOCs really
Jump in the discussion.
No email address required.
More options
Context
There is a peepee sized hole in your brain where your ability to create original thoughts used to be. It has rotted out of your head and dribbles out your ears, you have then taken said goo and smeared it across your computer monitor. You have been so thoroughly skullfricked all e-drama looks like a 90's sitcom with 2 directionless plot lines recycled ad infinitum.
<(SAY THE LINE, DO THE FUNNY THING! I LIKE THE FUNNY THING )
Jump in the discussion.
No email address required.
This is unironically going to be a snappy quote
Jump in the discussion.
No email address required.
All I hope is that I'm compensated fairly for my contribution
Jump in the discussion.
No email address required.
I'm sure the mods would be happy to cut you in on their salary
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
!effortposters not an effortpost but a good post nonetheless
Jump in the discussion.
No email address required.
Spitting napalm
Jump in the discussion.
No email address required.
More options
Context
More options
Context
@carpathianflorist snappy pls
Jump in the discussion.
No email address required.
More options
Context
why so mean to @j_p
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
More options
Context
More options
Context
More options
Context
This is what happens when you don't have Egyptians
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
More options
Context
Or a CIA honeypot
Jump in the discussion.
No email address required.
More options
Context
More options
Context
isn't lemmings that british game where you dig around with those little guys
Jump in the discussion.
No email address required.
Want to be sad? Here's what modern Lemmings looks like
https://play.google.com/store/apps/details?id=com.sadpuppy.lemmings&hl=en_US&gl=US
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
More options
Context
Soulless mobile game art
Jump in the discussion.
No email address required.
More options
Context
Actually looks dope thanks friend
Jump in the discussion.
No email address required.
More options
Context
People complained about All New World as well
Although it was pretty easy, I thought it was underrated
Not touching the mobile game tho
Jump in the discussion.
No email address required.
More options
Context
More options
Context
that was a good game
Jump in the discussion.
No email address required.
More options
Context
I still have an early 90s monochromatic brick laptop with Lemmings installed. Sadly it did not work last time I tried to play it.
It was a fun game, seems pretty inventive for the time it was created.
Jump in the discussion.
No email address required.
https://playclassic.games/games/puzzle-solving-dos-games-online/play-lemmings-online/play/
Jump in the discussion.
No email address required.
For a moment I thought it was a glowie Marsey, and the link was meant to steal my Ip.
But it's legit, and the game is even in colour, nice.
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
More options
Context
Well that was quick.
Jump in the discussion.
No email address required.
More options
Context
Why is everyone on redditalternatives such strags
Jump in the discussion.
No email address required.
They're all the cute twink mods who think they can coral their imaginary userbase onto a new site to strag out on them since they can't do it on reddit anymore
Unlike rdrama, they literally have nothing to offer except for an exponentially increased amount of soy cute twinkry squared
Jump in the discussion.
No email address required.
More options
Context
That sub wasn't too active until this past month when all the seething redditors invaded it.
Jump in the discussion.
No email address required.
LOL I can imagine that, it was quite chuddy when I used it a couple of years ago and might be how I found rdrama
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
Yeah, it wasn't the shit-ton of redditors in every thread on the front page for the past 6 weeks who mentioned lemmy that makes you feel noticed, it's being ddosed
Edit: the redditstrags on redditalternatives couldn't even type "neighbor" without censoring omfg what is happening in the internet 🤣
Jump in the discussion.
No email address required.
More options
Context
Every fricking link has normal discussions aside from reddit. As soon as I opened the redditalternatives link I found:
Orange man bad histrionics
Locomotive hystericals
And your average reddit NPC behavior
Bonus:
The internet guerrila war will just get worse from here, you might even encounter uncensored slurs
Jump in the discussion.
No email address required.
Lol they think anyone at all noticed Reddit had an issue
More people noticed Twitter but everyone whining about it seems to be still on Twitter just as much. I’m skeptical of threads myself.
Jump in the discussion.
No email address required.
REDDIT HAS FALLEN,
BILLIONSTRILLIONSQUADRILLIONS MUST DIETRANS LIVES MATTER
Jump in the discussion.
No email address required.
More options
Context
More options
Context
More options
Context
Lemmy fricking sucks nuts
Jump in the discussion.
No email address required.
Unironically this
Jump in the discussion.
No email address required.
More options
Context
More options
Context
it must take a real genius to create a good alternative to reddit
Jump in the discussion.
No email address required.
More options
Context
Heres a spicy meme about how they got hacked through a xss attack on the back end
Jump in the discussion.
No email address required.
More options
Context
what was the mp4?
Jump in the discussion.
No email address required.
More options
Context
carp aevann pls pin
Jump in the discussion.
No email address required.
Jump in the discussion.
No email address required.
More options
Context
More options
Context
"Lemmy.blahaj.zone"?
🎵 shark, do do do do do do, shark, do do do do 🎵
Jump in the discussion.
No email address required.
More options
Context
I heard it was hacked by the folks that killed ruqqus
Jump in the discussion.
No email address required.
More options
Context
what was the tasteless mp4?
Jump in the discussion.
No email address required.
Dancingswede perhaps?
Jump in the discussion.
No email address required.
More options
Context
More options
Context
I don't know what this entails but if redditors dislike it then I approve
Jump in the discussion.
No email address required.
More options
Context
Snapshots:
archive.org
ghostarchive.org
archive.ph (click to archive)
Archive:
archive.org
ghostarchive.org
archive.ph (click to archive)
E-H discussion:
archive.org
ghostarchive.org
archive.ph (click to archive)
/r/instantkarma:
archive.org
ghostarchive.org
archive.ph (click to archive)
/r/mademesmile:
archive.org
ghostarchive.org
archive.ph (click to archive)
Jump in the discussion.
No email address required.
More options
Context
Lmao you could load arbitrary code via the custom emoji feature?
Looks like JS devs are just as retarded as our snek devs. They're even using
attrs
as a prop name so they've definitely been writing shit python code tooJump in the discussion.
No email address required.
More options
Context
Shut up,I am more important than this stupid post.. ....
Jump in the discussion.
No email address required.
More options
Context
I'm sure all the jannies that took their ball from reddit and went to lemmy totaly dont regret their decision to stay in that shithole.
Jump in the discussion.
No email address required.
More options
Context
Wtf this has nothing to do with Motorhead
Jump in the discussion.
No email address required.
More options
Context