I made LASIM! https://github.com/CMahaff/lasim
I currently have 3 accounts (big shock):
/u/CMahaff@lemmy.world
/u/CMahaff@lemmy.ml
/u/CMahaff@lemm.ee
Author of the tool here! If you are okay letting me know the instance, I can definitely take a look and see if I can figure out the issue. I might need to make an account though.
There’s lots of Lemmy instances, and I’m always finding new quirks with different configs. But it’ll help the next person who might run into the same thing!
Apparently not per the post-hack report: https://lemmy.ml/post/1901079
This bug also needs to be fixed so that a user logging out / changing password actually correctly invalidates their JWT token: https://github.com/LemmyNet/lemmy/issues/3364
I suspect that last night even if an admin knew their account was compromised, they probably couldn’t do anything about it without DB access.
Absolutely this. There are issues with deletes not federating properly too, right?
That’s a big part of the issue here too since even when .world cleans up the content it’s already been pushed out to every other instance and will now remain there until all THOSE admins also purge it.