sh.itjust.works Main Community

If you are a lemmy.world user, log out and log back in to clear cookies!

Last night, lemmy.world was compromised via an XSS vulnerability with custom emoji. Using this vulnerability, attackers took control of an admin account. The site redirected to mp4 files when logged in, and porn sites when not logged in. The issue was resolved by lemmy.world admins soon after it started, but the attacker regained control of the compromised admin account around ten minutes after resolution, redirecting users to the same mp4 files and sites. Soon after that, the site became inaccessable. The issue is currently resolved, and lemmy dev team has been notified of this vulnerability. sh.itjust.works will not be affected, as we do not have any custom emojis. If you own an instance with custom emojis, it is advised to remove these emojis and clear your cookies.

The following is the original post:

PSA: DO NOT ATTEMPT TO ACCESS LEMMY.WORLD, THERE MIGHT BE MALWARE

Lemmy.world member here. I created this account after .world started redirecting me to porn sites and odd mp4 files. We might want to defederate to limit the potential impact. Also, SJW might be affected by the same vulnerabilities as .world, so maybe the admins here should look at that.

Edit: ~~Situation seems to have stabilized. Some site icons aren't loading, but otherwise everything seems stable.~~ Read Edit2

Edit2: ~~HOLY SHIT ITS BACK~~ Read Edit3

Edit3: ~~lemmy.world is now down as of 10:56 PM CST (USA)~~ Read Edit4

Edit4: lemmy.world is now up, but serving an error as of 11:03 CST (USA) See a screenshot of this error. I also got logged out, hopefully it doesn't mean they just wiped the databases lol.

Edit5: Edit4 still applies, but I can now access lemmy.world via Memmy on my phone. Wefwef (Voyager now) does not work, however. Timestamp: 11:34 PM CST (USA)

Edit6: lemmy.world restored. Compromised admin account said something in a weird post. I'm going to bed now, my brain is play-dough rn. Will update you guys tomorrow morning.

I tend to dream big alot and i tend to want thing sinstantly with this age of tech and it can be annoying at times. i even reaserch thing sbut never do them i wonder if ther eis a way to dream small and what might that look like?

like i want to start a youtube channel with my low-end pc and my fmaily says it dosent hurt to try but im not sure, i want to do gaming but everyone does gaming and im very limited with my pc, etc i could go on but i wont.

my interst will probrably change to something tommorow which is annoying.

also my create community button is missing on the web browser. Thanks in advance.

I mod a community here, and for the last three days posts made to that community have not been showing up outside of this instance. Specifically, I have an account on Lemmy World, and I can't see any recent posts from the community I mod on that account.

Also, I follow several communities from other instances including lemmy.world and lemmy.ml and none of the content for those communities have updated here in the last three days, though when I check them from accounts I have with other instances, they all show up fine.

I have checked all of this on my mobile browser, my desktop browser, and Jerboa.

Does anyone know what's going on? Does this have anything to do with the steps @[email protected] has been taking to combat bots? This is really problematic, it's like we've been shadow defederated.

Edit: Seriously, why would someone downvote this post?

Edit 2: I'm not sure if this is related or not, but for the first time, I'm not able to respond to a Kbin users comment. That happened in this post.

Like I said above. Most of the subscriptions that I had as of this morning now are no longer showing up.

Searching for communities I know exist do not show up in search results. Switching to a lemmy.world account lets me search the community and it returns in results.

Checked multiple apps, same results.

Currently using Memmy and I’d deleted and reinstalled it, and when I was re-adding sh.itjust.works I noticed it now shows this instance no longer allows user created communities. I’m assuming that was probably due to the bot accounts spam creating communities earlier this week. Could this be why I can only see a very small number of communities now? Or is it unrelated?

Could it be related to the update that just went out?

Or was there some defederation that just happened?

Edit: formatting

Edit 2: as of several minutes ago, instances now show up in my subscriptions list, and I am now able to search for instances in Memmy, Mlem, and Thunder. Wefwef has been working since yesterday. Liftoff still shows a null value. I have not updated any apps yet, tho Memmy and Mlem do show updates now, so I guess I’ll pull them.

Edit 3: still seems to be working post update.

TheDude recently upgraded the server to the most recent version of Lemmy. You'll notice significant improvements to the user interface, and hopefully the functionality is also improved. There is no official changelog yet because this version is not yet finalized, but I'll link the GitHub releases page where it should eventually appear.

https://github.com/LemmyNet/lemmy/releases

Edit: 0.18.1 is now fully released and we have upgraded to the final version. You can view the link above for the changelog.

J'utilisais Boost pour Reddit jusqu'à tantôt.

Salut la gagne!

cross-posted from: https://sh.itjust.works/post/776343

Better suited for the main community, the Agora is mainly for official discussions and votes.

@[email protected]

Hello,

I'm the mod of Japanese Metal. For a few days now, the community appears empty to me, both on Liftoff and my browser on my desktop. Edit: it's fine if I view it on my lemm.ee account, but that's not optimal.

What might be the cause, and how do I fix it? Anyone with a similar problem?

Thanks in advance.

That's it. It's just the fastest springboard this garbage company had to get yet another social media platform out the door when they sensed blood in the water.

Edit: This is a response to people who think FB users will somehow discover the fediverse and be converted by this action. They won't.

Or that FB has noble goals in choosing AP or will somehow be forced to be better. They won't.

It's just good software.

Millions of dollars and a team of some of the world's best designers and this is what they came up with?

Meta/Instagram launched a new product called Threads today (working title project92). It adds a new interface for creating text posts and replying to them, using your Instagram account. Of note, Meta has stated that Threads plans to support ActivityPub in the future, and allow federation with ActivityPub services. If you actually look at your Threads profile page in the app your username has a threads.net tag next to it - presumably to support future federation.

Per the link, a number of fediverse communities are pledging to block any Meta-directed instances that should exist in the future. Thus instance content would not be federated to Meta instances, and Meta users would not be able to interact with instance content.

I'm curious what the opinions on this here are. I personally feel like Meta has shown time and time again that they are not very good citizens of the Internet; beyond concerns of an Eternal September triggered by federated Instagram, I worry that bringing their massive userbase to the fediverse would allow them to influence it to negative effect.
I also understand how that could be seen to go against the point of federated social media in the first place, and I'm eager to hear more opinions. What do you think?

Hi everyone! I believe it is important to introduce people to this whole new concept of the fediverse, so I wrote an introductory, semi-in-depth post about it, and I'd like your opinions on it. Should I add anything? Remove anything?

I created a post on lemmy.world. I am subscribed to that same community here as well. I don't see my post here yet. How long should it typically take for an article from a different instance to show up here?

I wanted to subscribe to https://sh.itjust.works/c/[email protected], but it just says "Subscription pending", and while I can post there and it shows all of the posts in the community, it doesn't show any comments to those posts.

If I visit the community directly through lemmy.world (without being logged in to an account of course), it shows that there are multiple comments to all of the posts, but if I visit through my account on this instance it shows 0 comments to all of the posts.

I don't know if it is connected to the "subscription pending" issue, but I have tried refreshing to make the subscription pending change into subscribed, but it doesn't happen.

Edit: I just tried posting in the community in the vain hope of establishing a connection to it from here, but when I press the post button it just continously loads while the error message "SyntaxError: JSON.parse: unexpected character at line 1 column 1 of the JSON data" keeps popping up in the corner.

I've been getting a lot of these messages lately:

SyntaxError: JSON.parse: unexpected character at line 1 column 1 of the JSON data

So I decided to look at the network requests in the browser console. After all, what JSON data was it trying and failing to parse?

Well, turns out that it was pretty much always:

Timeout occurred while waiting for a slot to become available

I don't do a lot of backend work, but I suspect that the lack of slots might be referring to the server running out of resources to process all of the ongoing user activity concurrently. Could we be running into scaling issues?

Just today these are some communities created on this instance:

https://sh.itjust.works/c/tutoiementunboaste https://sh.itjust.works/c/unrenewablesubpana https://sh.itjust.works/c/vegetarianprogramm https://sh.itjust.works/c/myelopetalplainnes https://sh.itjust.works/c/waylaidmegasses https://sh.itjust.works/c/expiateshottie https://sh.itjust.works/c/knackwurstsreearn https://sh.itjust.works/c/sculptedsixteenpen https://sh.itjust.works/c/anelesunimitablene https://sh.itjust.works/c/ebonistregenerativ https://sh.itjust.works/c/extensionlessvulca

Is there any way to report this spamming? In particular is there any way to report this spamming that doesn't require creating a separate account on a separate system?

cross-posted from: https://lemmy.world/post/1034389

Greetings Fellow Pioneers of the Fediverse!

Are you a digital nomad who has recently migrated from another platform? Or perhaps a curious explorer who's caught wind of Lemmy's potential? Have you just begun your journey into the vast and promising landscape of decentralization?

For those still navigating the complexities of our brave new decentralized platform, I highly recommend watching this video. It does a good job encapsulating some of the immense potential and foundational principles of The Fediverse.

Once you're up to speed, it's time to delve deeper w/ FOSAI:

Are you experiencing FOMO around emerging technologies? Maybe you're a hobbyist, researcher, or developer passionate about free and open-source projects?

If any of these resonate with you, congratulations! You've landed in the perfect hub for everything related to free and open-source artificial intelligence - a.k.a. FOSAI - a new, sub-movement of FOSS for AI-particular tech stacks and software implementation strategies/platforms.

At FOSAI, my aim is to keep you informed on the latest, most significant advancements in the rapidly evolving landscape of AI/LLM/Diffusion technologies. This endeavor is fueled by my genuine passion and hope for technology, not by clickbait, sensationalism, or social media rage-bait and disinformation campaigns this technology typically gets a bad rap for.

At the end of the day - I don't care how many (or how little) people are following the movement so long as the information I share is valued, true, and used to support a goal that will better your life (and others).

To know more about me and what drives this community, please check out my welcome message here

Eager to dive into the world of AI today? I recommend visiting my resource-packed FOSAI Nexus Post or getting acquainted with my Lemmy Crash Course to Free Open-Source AI.

Embracing the philosophy of FOSS, we envision a future where empowerment, creativity, and ethics intertwine seamlessly with technology. Where the human experience is enhanced by innovation, not detracted by it. We believe in a future that lets you experiment with AI in any of its stages easily and accessibly - no matter the cost.

Here, we believe in a future where anyone can work with democratized super intelligent software and platforms that are not controlled by a select few, but by a majority of many. Where you own your data, your technology, what you do with it (and everything between). A future where you are not monitored for every action. Where your data is not being sold to the highest bidder.

A future that is free, a future that is open. A future that is as bright as we make it out to be without compromising the truth of our reality and the direction of our species.

My hope with this community is to foster patience, optimism, and trust in one another. I want to collect and share truths, processes, information, and workflows that educate and enhance our lives, fostering personal growth, development, and change. Real change. Tangible change. Not just the change you have been dreaming for, but the change you deserve.

When posting here, all I ask of you is to Know Thyself, be prepared to engage with dialogue that is intellectually empathetic, and to share/document processes and knowledge that is empowering to others, no matter their walk of life, experience or technical prowess.

I ask you to know our community. Know the impact of the words you share in earnest and to trust in one another that the empathy in which you seek to support is already there.

If any of this resonates with you, aligns with your thoughts or values, or is interesting in general - please consider subscribing to /c/FOSAI [email protected]

Links From This Post

Fediverse / FOSAI

• The Internet is Healing: https://www.youtube.com/watch?v=TrNE2fSCeFo
• FOSAI Welcome Message: https://lemmy.world/post/67758
• FOSAI Nexus Resource Hub: https://lemmy.world/post/814816
• FOSAI Crash Course: https://lemmy.world/post/76020

Contributing to Intellectual Empathy & Discussion

• The Diataxis Method: https://diataxis.fr
• Know Thyself: https://en.wikipedia.org/wiki/Know_thyself
• Socratic Dialogue: https://en.wikipedia.org/wiki/Socratic_dialogue
• Bonus: https://en.wikipedia.org/wiki/Stoicism

Hi everyone,

So just wanting to let everyone know, I am fully aware that having an account on any instance won't really change the experience much, but I really liked sh.itjust.works for running the server on renewable energy and just overall good vibes.

When trying to register, I was told that I'll be getting an email verification but unfortunately I have not, and I have waited for a while now. Spam/junk mail is also empty, and I was unable to resend the verification link.

Really hope this problem get fixed. Happy to be here regardless :)

I understand that very few (or no) websites actually delete anything. They just mark them as "deleted". But this usually means that once something is deleted, users have no ability to see the deleted data. This doesn't seem to be the case with Lemmy.

I've been trying out the Android app called Connect for Lemmy, and it shows the contents of all deleted comments with a "DELETED" word on them. See the uploaded screenshot.

This seems bad to me. Users expect that deleted comments are no longer viewable, and won't be returned by Lemmy's API. Lemmy still shows the username of the deleted comments, which was bad enough, but now I'm seeing that it doesn't prevent apps from seeing the deleted comments.

What are your thoughts on this?

Lemmy needs serverside hide features for posts and for communities or I’ll never find real interesting communities hiding on the 10th page of top feeds. This lack of functionality could cause the top feeds to stay trash permanently and drive away users. Especially when new apps are constantly appearing, client side hides are more or less useless as I switch between apps.

Reddit post hide features are fairly performant because they quietly expire after some period of time. They stay in your “hidden” list but actually will start showing in the results again if somehow that content is still visible. You can see this on super slow or abandoned subreddits if you hide every and come back a month later.

Reddit community blocking features have always sucked with the serverside limit of 100. Seems even more dire in Lemmy when the same shitposting communities spring up on different hosts

.. is there a better way to report?

I was exploring another instance (lemmy.world), and I wondered if I could find a community on this instance that I moderate (https://sh.itjust.works/c/mash). So I tried searching for the name, that didn't work. I tried searching [email protected], that didn't work either. Finally I tried going directly to https://lemmy.world/c/[email protected], and that led to a Lemmy page saying I had entered a broken link. I also tried going to https://lemmy.world/c/[email protected], and that did work.

So am I doing something wrong?