▲ 22 ▼ Blahaj zone pwned (lemmy.blahaj.zone) submitted 4 months ago by Wizard3964@lemmy.dbzer0.com to c/div0@lemmy.dbzer0.com 8 comments fedilink hide all child comments Looks like they've been pwned. Just checking in with admin to make sure we're not vulnerable to the same thing. Detailed post here: https://pen.blahaj.zone/supakaity/weve-been-hacked
[–] db0@lemmy.dbzer0.com 8 points 4 months ago (3 children) We don't store ips anyway permalink fedilink source parent hideshow 3 child comments replies: [–] TwiddleTwaddle@lemmy.blahaj.zone 6 points 4 months ago (1 child) And neither did Blahaj according to their disclosure post. As far as they can tell, only the email used to sign up for the account could be compromised. permalink fedilink source parent hideshow 1 child comment replies: [–] Wizard3964@lemmy.dbzer0.com [S] 1 point 3 months ago Their admins disclosed in a comment that ip addresses are stored by the Lemmy database, and were exposed. permalink fedilink source parent [–] Wizard3964@lemmy.dbzer0.com [S] 1 point 3 months ago It looks like IP addresses are stored in the DB in lemmy. It's possible that the attacker had access to those IPs, but we don't believe they accessed them. This is the sort of thing we would turn off if we could :\ From the admin permalink fedilink source parent
[–] TwiddleTwaddle@lemmy.blahaj.zone 6 points 4 months ago (1 child) And neither did Blahaj according to their disclosure post. As far as they can tell, only the email used to sign up for the account could be compromised. permalink fedilink source parent hideshow 1 child comment replies: [–] Wizard3964@lemmy.dbzer0.com [S] 1 point 3 months ago Their admins disclosed in a comment that ip addresses are stored by the Lemmy database, and were exposed. permalink fedilink source parent
[–] Wizard3964@lemmy.dbzer0.com [S] 1 point 3 months ago Their admins disclosed in a comment that ip addresses are stored by the Lemmy database, and were exposed. permalink fedilink source parent
[–] Wizard3964@lemmy.dbzer0.com [S] 1 point 3 months ago It looks like IP addresses are stored in the DB in lemmy. It's possible that the attacker had access to those IPs, but we don't believe they accessed them. This is the sort of thing we would turn off if we could :\ From the admin permalink fedilink source parent