Why am I signed out every time I open this? Why can I hardly post anything anywhere? It’s like a dice roll.

  • @fubo
    link
    English
    141 year ago

    Server-side authentication bug; maybe fallout from the recent attack? I’d expect instability for the next day or so as auth & related problems shake out.

    • @RockfuryOP
      link
      English
      11 year ago

      Attack? I am outta the loop. What happened?

      • @fubo
        link
        English
        3
        edit-2
        1 year ago

        https://lemmy.world/post/1290412

        Summary: Attacker found a way to inject JavaScript into the sidebar, letting them steal auth tokens (“JWTs”), including from an admin account. They then used the stolen admin access to vandalize the site. At one point, the attacker used the stolen admin account to falsely announce that the attack had been remediated. Later that day, the attack actually was remediated by the site owner (Ruud) and the vulnerability was patched in the Lemmy code.

        • @RockfuryOP
          link
          English
          11 year ago

          Appreciate the info.

      • @fubo
        link
        211 year ago

        Production services are actually fuckin’ goddamn difficult, and I add another swear to this comment for every time I have to try reposting it.

        • @Laxaria
          link
          121 year ago

          Yep lemmy.world is live (stress) testing in production. It has its benefits, like when a set of patches were committed to vastly improve performance that was a big problem on a huge instance like lemmy.world but not on the smaller ones, and its downsides with all the random issues that pop up which happen when testing live in production.

      • @puppy
        link
        6
        edit-2
        1 year ago

        Lemmy has been improved at light speed over the last couple of weeks. When I joined around 3 weeks ago everything felt prototype-like. But now lemmy.world back-end with Voyager front-end feels almost like Apollo quality. At this rate, it definitely will, in another couple of weeks.