You have to be signed in to see the actual porn lol

Looks like the accounts were compromised by stealing their cookie - something 2FA can’t stop.

Still should have it on, though.

I don’t think there will be too much fallout. Sites get hacked.

Also I believe this was achieved through cookie stealing, which 2FA would not have helped

Too bad it doesn’t work with several 2FA apps and right now…

If they can do that, they could’ve done it on a traditional site anyway

As far as I know these bots aren’t verifying emails yet. So if you have email verification on just follow my post here and it should take care of these bots. For now.

https://thelemmy.club/post/60352

As an FYI - all you need to do is delete user entries in the person table.

It will delete the local_user entry and also update the site_aggregates count automatically.