Fediverse

19 readers

2 users here now

This magazine is dedicated to discussions on the federated social networking ecosystem, which includes decentralized and open-source social media platforms. Whether you are a user, developer, or simply interested in the concept of decentralized social media, this is the place for you. Here you can share your knowledge, ask questions, and engage in discussions on topics such as the benefits and challenges of decentralized social media, new and existing federated platforms, and more. From the latest developments and trends to ethical considerations and the future of federated social media, this category covers a wide range of topics related to the Fediverse.

founded 2 years ago

Multiple lemmy instances are getting hit with a js injection (sh.itjust.works)

submitted 1 year ago by wetnoodle@sh.itjust.works to c/fediverse@kbin.social

22 comments fedilink hide all child comments

Lemmy.world and lemmy.blahaj.zone have been hit with a JavaScript injection attack it seems.

you are viewing a single comment's thread
view the rest of the comments

[–] ImaginaryFox@kbin.social 1 points 1 year ago (1 children)

Any recommendations on how to mitigate risks like this when it comes to browsing lemmy? Any lite version to see lemmy through without Javascript?

[–] techno156@kbin.social 3 points 1 year ago

No. The existing Lemmy-Lite that was advertised on join-Lemmy.org appears to be massively out of date, and no longer actively maintained.

It was a bug with Lemmy-UI, so you might be able to get away using an app or site that isn't vulnerable. Whether that is Wefwef, one of the apps, like Jerboa, or something that is Federated, but not Lemmy, like Kbin, or Mastodon (things might be a bit clunky if you do, since Lemmy threads aren't well handled by Mastodon).