![](/static/66c60d9f/assets/icons/icon-96x96.png)
![](https://media.kbin.social/media/7b/56/7b56e489f96f7c0deba67d7ef39731267c3c3c1f8c5d87ad37480fa9b74892d6.png)
Especially since doing that will let you Federate through compromised comments, and possibly affect other instances using the Federation network, unless they’re updated.
Especially since doing that will let you Federate through compromised comments, and possibly affect other instances using the Federation network, unless they’re updated.
Yes. They got hacked. An admin account got compromised, and the hackers exploited a bug in Lemmy-UI (the web site) that let them do things like redirect users to another site that let them run Javscript. It seems to have let them collect some user tokens from accounts, and access an admin account that way.
Others did get hacked, or are vulnerable to it, but aren’t big enough targets?
Beehaw is closed, so they would have had to have an existing account to exploit the same bug (or go through something like Kbin), and Lemmy.world is the biggest Lemmy instance.
And if they could do that, someone else could use the same trick to do worse things, since they’re just running bare JavaScript.
No. The existing Lemmy-Lite that was advertised on join-Lemmy.org appears to be massively out of date, and no longer actively maintained.
It was a bug with Lemmy-UI, so you might be able to get away using an app or site that isn’t vulnerable. Whether that is Wefwef, one of the apps, like Jerboa, or something that is Federated, but not Lemmy, like Kbin, or Mastodon (things might be a bit clunky if you do, since Lemmy threads aren’t well handled by Mastodon).
I believe it’s a planned feature (for Lemmy, at least), and Mastodon supposedly already has something like that in place.
Being able to just have one account for the entire Lemmyverse could also be nice, but is probably a bit of a far-fetched idea for the time being.
No, there’s no aggregator/indexer quite like that just yet. Your best bet is to just hope that the search shows up something useful because you captured the right key words.
Kbin has a report function, although I don’t know if reports Federate. They might not.
Lemmy does do reporting, although it’s not clear whether it’s just moderators, or whether the admins will also receive them.