The spam campaign attacking Writefreely instances is out of control. Can you contact the admins you know?@fediverseYesterday I received this message from my friend @elettrona:Are you the one running the "writefreely blogs" bot, aka writefreely@poliverso.org? Because there are tons of English accounts full of links that post nonstop.And indeed, that account republishing posts from some Italian instances had a staggering amount of spam.This is due to a very serious vulnerability that hasn't yet been patched by the developers, but which has (obviously) started to be exploited on a large scale.I've notified all the Italian administrators of @writefreely instances, but I'm having some difficulty contacting the foreign ones.These are the ones with the most users:write.otter.homes/readinfosec.press/readblog.liberta.vip/readwrite.tedomum.net/readval-vgms.gay/readbolha.blog/readBut there are many others.Is there anyone among you who can try this or at least spread the word?Note: As I mentioned, the vulnerability has been known for a long time and is currently being exploited on a large scale.github.com/writefreely/writefr

all 7 comments

sorted by: hot top controversial new old
[–] 5 points 3 months ago (3 children)

@macfranc @fediverse @elettrona Thanks for the heads up. I'm cutting a new release with the patch now.

  • source
  • hideshow 3 child comments
  • [–] [S] 1 point 3 months ago (2 children)

    @writefreely Thank you so much for your input! ♥️ @fediverse @elettrona

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 3 months ago

    "Use WriteFreely instead of Plume," they said.

    "It's in active development," they said.

    Then again, if this was to happen to Plume (and I wouldn't be surprised if it was), it'd take the devs until the 2030s to fix it.

  • source
  • [–] 3 points 3 months ago

    Holy shit this is so bad.
    I'm gonna shut my own instance down RN and see for something else

  • source
  • [–] 3 points 3 months ago

    So it was fixed two weeks ago, but they haven't released the fixed version, and their last release was... 11 months ago???

  • source