this post was submitted on 09 Jul 2023
3 points (100.0% liked)

Café

777 readers
4 users here now

Welcome to our virtual third place, The Café.

Come on in and make a new human connection over a cup of coffee (or Teh Tarik). This is a casual community, do whatever you want, share your oyen pics, your frustrations, and even organize a weekend picnic with the community. The world is your oyster.

Rules are simple, be kind and civil with each other. As with any other café, rude patrons will be kicked out.

founded 1 year ago
MODERATORS
imaginelizard@monyet.cc
hyattpotter@monyet.cc
MonyetBot@monyet.cc
MonyetAdmin@monyet.cc
3
/c/café daily chat thread for 10 July 2023 (monyet.cc)
submitted 1 year ago by imaginelizard@monyet.cc to c/cafe@monyet.cc
59 comments fedilink hide all child comments
top 50 comments
sorted by: hot top controversial new old
[–] UltimateUsermaim@monyet.cc 4 points 1 year ago (1 children)

I wanna share my latest poem I made 2 weeks ago

King of Dirt

I eat myself full of dirt

Of the Dirt I thought I conquered

The dirt I thought I won over but in truth

It was nothing but an obvious case of denial and an overinflated ego

It is dirt borne of half baked resolve and clown juice

When will I learn to take things seriously

When will this dirt be the true works of my labour

Here I lay, reigning over these piles of dirt I've convinced myself I have

My magnum opus, the greatest king of all

My king of dirt

[–] UltimateUsermaim@monyet.cc 1 points 1 year ago

Sorry for the shoddy formatting. Still not used to connect for lemmy

[–] zenyet@mitra.076.moe 4 points 1 year ago (4 children)

looks like today's theme for me is search engines, already found:

  1. https://search-lemmy.com/ for searching lemmy
  2. https://searchengine.party/ for the usual web search engines
load more comments (4 replies)
[–] oyenyaaow@lemmy.zip 3 points 1 year ago (1 children)

wakey wakey bancuh kopi makan pagi zzZZzzZZ lagi

[–] Annoyed_Crabby@monyet.cc 3 points 1 year ago

No(ಥ_ಥ)

[–] armandtanzarianmusic@monyet.cc 3 points 1 year ago (1 children)

Downloaded a mobile version and now it sits next to my Reddit.

Also tried Threads. Immediately got a bunch of Muslim accounts on For You. I don't follow any on Instagram neither am I Muslim.

Will wait till my feed stabilizes back to my usual diet of left wing shitposts and music memes.

[–] penangkia@monyet.cc 2 points 1 year ago

You are lucky. I got half naked thirsty bros

[–] Annoyed_Crabby@monyet.cc 2 points 1 year ago* (last edited 1 year ago) (7 children)

Shit, lemmy world got hacked, click on that Israel will lead you to explicit picture of a bunch of naked old man sucking each other, and also pop's up lead to porn site.

Avoid at all cost.

[–] zen@monyet.cc 4 points 1 year ago* (last edited 1 year ago) (1 children)

this is bad. rumour has it this is due to an admin's json web token being leaked.

so I would advise all admins here not to log into 3rd party web apps (mobile apps should be okay) with their admin accounts, as the web apps usually proxy your requests (hence, they have your token), and they proxy not due to nefarious purposes, but due to some problem with cors (in other words, being forced to proxy your request isn't really their fault, and once the cors problem is fixed in the lemmy backend, they can stop doing that).

[–] Annoyed_Crabby@monyet.cc 1 points 1 year ago

Thanks Zen, you're a lifesaver. Brb pressing the emergency button

[–] oyenyaaow@lemmy.zip 2 points 1 year ago (1 children)

is it the lemon party picture?...........feels old.

welcome to pre-rickroll internet.

[–] Annoyed_Crabby@monyet.cc 1 points 1 year ago (1 children)

Ahh, that's what it called, no wonder it's somehow familiar.

[–] zen@monyet.cc 3 points 1 year ago* (last edited 1 year ago) (1 children)

now I'm hearing that the hack is being spread through direct messages as well.

as this seems to be a javascript hack, all admins logged on through any web ui (even the official one) are advised to not open dm's from unknown users.

as mobile apps differ from browsers, and shouldn't execute javascript directly, they should be less affected, but please take caution anyway for the time being.

edit: it seems lemmy.blahaj.zone has been hacked too. the malicious javascript has been detected in custom emojis and community description sidebars, so admins must watch out for new users who signup and immediately start posting custom emojis or opening new communities.

[–] Annoyed_Crabby@monyet.cc 1 points 1 year ago (1 children)

Merely open the dm? Or do we have to click the link for it to happen?

[–] zen@monyet.cc 1 points 1 year ago* (last edited 1 year ago) (2 children)

I think it is better to not open it at all (at least in the web browser, mobile apps seem to be okay, but nothing is really certain atm), as the malicious javascript seem to be connected to custom emojis and community descriptions in the sidebar (see my latest edit), so no clicking required.

[–] Annoyed_Crabby@monyet.cc 1 points 1 year ago

Alright, got it. Thanks!

[–] cendawanita@monyet.cc 1 points 1 year ago

damn, i feel like we can check off one success criteria: suddenly so attractive for hacks.

[–] zenyet@mitra.076.moe 1 points 1 year ago (1 children)

https://github.com/LemmyNet/lemmy-ui/issues/1895 has more information on mitigations, which may not be necessary if no custom emojis were added.

it also has something for invalidating all json web tokens by changing the signing key (all users will need to re-login after doing that), which may be necessary depending on whether the tech team believes any of them (especially any of the admin's) have been compromised (there is currently no expiry date on the tokens).

#lemmyworldhacked #fediversedrama

[–] Annoyed_Crabby@monyet.cc 1 points 1 year ago

Thanks, i'm giving it a read but i'm not coding literate so may need some time to parse 😂

load more comments (2 replies)
[–] UltimateUsermaim@monyet.cc 2 points 1 year ago (1 children)

Sial. Dah Hari isnin.

[–] some_random_meatbag@monyet.cc 3 points 1 year ago (1 children)

I know right, uhuks where did my weekend go.

load more comments (1 replies)
[–] Naomikho@monyet.cc 2 points 1 year ago (4 children)

I'm still contemplating whether to buy a yukata for bon odori. But I don't think I will wear it much 😞

[–] hyattpotter@monyet.cc 3 points 1 year ago (1 children)

I saw a bunch of really nice ones in JJJ! If you're not against thrifting, do consider it!

[–] Naomikho@monyet.cc 1 points 1 year ago (1 children)

What's JJJ? Sorry I never heard of that before 😂

[–] Annoyed_Crabby@monyet.cc 1 points 1 year ago (1 children)

Jalan jalan japan

[–] Naomikho@monyet.cc 1 points 1 year ago

Thanks, let me check it out after work... Assuming I don't K.O.

[–] sleepy@monyet.cc 1 points 1 year ago (1 children)

how much for one set? o.o

[–] Naomikho@monyet.cc 2 points 1 year ago

I found one on shopee for 50+, but only one colour choice. I like the design tho. Most yukatas on shopee Lazada average about RM70 from what I see

[–] Annoyed_Crabby@monyet.cc 1 points 1 year ago (1 children)

Can rent what. I rented one last time, they got whole set and also shoe as well.

[–] Naomikho@monyet.cc 2 points 1 year ago (4 children)

The price for renting isn't cheap though no? Isnt it more worth to buy in that case? 🤔

[–] imaginelizard@monyet.cc 2 points 1 year ago (1 children)

Can try the pre-loved ones, they're cheaper.

load more comments (1 replies)
load more comments (3 replies)
[–] Annoyed_Crabby@monyet.cc 2 points 1 year ago (1 children)

Shiet, sad that i have to work, reading the saucy stuff of lemmyworld hack is entertaining and educational.

[–] cendawanita@monyet.cc 1 points 1 year ago

Anyone got saucy summary?

[–] penangkia@monyet.cc 2 points 1 year ago (1 children)

Did not expect my post to promote the Kdrama community to provoke anti-Lemmy posts, but this is Mastodon 🤣

[–] imaginelizard@monyet.cc 1 points 1 year ago

Keep promoting anyway. The more the merrier I say, any engagement is a good engagement when we're this small.

[–] sleepy@monyet.cc 2 points 1 year ago* (last edited 1 year ago)
[–] cendawanita@monyet.cc 1 points 1 year ago* (last edited 1 year ago) (1 children)

btw if anyone is also exploring fedi side of the microblogs (your insta, tumblr, twitter equivalent - there's even an FB one), and are looking for more hashtags to follow as you set up your account (as you don't have to follow accounts, you can also just follow hashtags):

  • Histodon
  • Bookstodon
  • Bloomscrolling
  • Florespondence
  • TootSEA
  • MYToots
  • MakanApaToday (belated also can)
  • PlaylistSEA (music recs; doesn't have to be current)
  • FilmSEA
  • ArtistSEA or ArtSEA
  • CatsOfMastodon
  • LawFedi

the Malaysians are still workshopping if we want to call ourselves Feditiam or Feditory so the ones who layan this are tagging one or the other, lol.

load more comments (1 replies)
[–] cendawanita@monyet.cc 1 points 1 year ago

Morning. Another bowl of instant cereal.

load more comments
view more: next ›