I appreciate the transparency. Hopefully with more eyes on the source code hacks like this will not happen again.

Well done on acting on it so quickly. I think I did see some of the fake announcements you were referring too but were taken down very quickly. Keep up the good work team and thanks for everything you are doing!

Is this why I had to sign in and out of my account on liftoff?

I couldn't comment untill I did that. There may be others!

******* This happened to me, one of my posts had it's photo deleted (I didn't delete it), then when I replaced it, the next time I checked the entire post had been deleted.

I lost some of my post history. Is there a data issue that's come from this? Why are my comments gone?

is that why I can't log into my lemmy.world account?

Is a password change advised? How does the JWT cookie and exploit effect apps eg Jerboa?

Thanks to everyone involved for the quick response 👍

Is there a rough time range when it happened? and any news about other big instances like lemmy.ml? Are those safe? Currently they are not on the same version as lemmy.world.

How are you preventing it to happen again until a patch is released from devs?

Amazing how you quickly reacted to this!! Bravo!!

TIP: if you can't login after what happened, clear out your browser cache including ALL cookies, that fixes it (it did for me at least). I believe it's also advisable to change lemmy password.

As someone in EU I didn't even realized there was an issue. Well done and great reaction time! Also thank you for the transparency 👑

I can't log into my account anymore, this one is a new one I've just made. I tried to reset my password but nothing came in the mailbox. I can still see comments and posts from that account though.

It's this one:

And I don't know why but I can't save the profile pic for this account.

Edit: Nvm, I use another email to sign up for Lemmy and forgot about it

Maybe there needs to be a quick rundown how to actually log out and in on clients, seems you can't with jerboa without just wiping the app, and wefwef, you need to delete all accounts.

I see some instances are throwing server errors

Thanks.

Is this why I can't log in on Chrome? I switched to Firefox and it worked.

Great job everyone! Keep it up! Love the transparency!

I see you, Imposter.