💩 🫘
Concerns were posted a few days ago, but no POC that used the exact same attack as we saw here. Basically, there were some warnings, and work was underway that would have prevented this, but it was not done fast enough. There is a patch now, that will take a while to roll out, plus a renewed focus on general and related issues.
Don’t fall for it. They’re also an admin on mastodon.world! :)
They defaced it with dicks and changed the federation list to be only threads.net. I don’t think it was a state sponsored chinese hacking group. :)
That, is actually kind of fascinating and may be important info for someone doing a follow-up investigation. If that was the bad actor phishing for moderation access, why would they need that, when they already had an admin account? If it was legit, then it’s super sus. whoever this app developer was needs to have a little light shone on them.
TBF, at least you’re doing something.
You do you. I would tell my users I have no idea what’s going on, and definitely not say “using your open tabs is probably fine.”
I think this carrying on without providing more information is reckless. Does an actual admin from this instance really know what happened or are you just taking a bunch of random commentary and speculation as gospel then telling the users “we’re good.”
Can you click “sync” and install the OneDrive client? That “mounts” the folder locally and you might be able to treat it just like a normal file.
Do you mean recorded teams meetings or just a video file on a SharePoint site? Is it embedded, or just a file in document collection/OneDrive?
Sexy loads.
Yep. Just a nice GUI.
Politically speaking, the lemmy/fediverse would make a great PolySci thesus. There is no practical universal governance other than sharing the ActivityPub protocol. It is an interesting experiment in how humans behave. Each instance is like a country.
Admins: FYI on lemmy logs:
Example of a federation message success (HTTP Response 200):
INFO actix_web::middleware::logger: 12.34.56.78 'POST /inbox HTTP/1.1' 200 0 '-' 'Lemmy/0.17.4; +https://remote.lemmy' 0.145673
and failure (HTTP Response 400):
INFO actix_web::middleware::logger: 12.34.56.78 'POST /inbox HTTP/1.1' 400 65 '-' 'Lemmy/0.17.4; +https://remote.lemmy' 0.145673
These are usually accompanied soon with a more verbose reason like Http Signature is expired.
Lemmy is far better at logging INCOMING stuff than it is OUTGOING. You can grep for activity_queue to get a sense if there are issues. This is not good:
Target server https://lemmy.lemmy/inbox rejected https://lemmy.local/activities/announce/9852ff01-c768-484b-a38da-da021cd1333, aborting
Also there are stats indicating “pile-ups”:
Activity queue stats: pending: 1, running: 1, retries: 706, dead: 0, complete: 12
I am not ambitious enough unfortunately, and probably not smart enough either.
It’s a game of leapfrog and it’s at a little bit of a stalemate because people just pay $5/mo. for a VPN. It was a monetization race and that’s were we landed. I’m sure copyright holders are not happy with that, but there’s no incentive to develop or change anything because who doesn’t have $5/mo?
It used to be that just being on the internet made you trusted enough to get the warez. I don’t know how to keep the movement alive with big brother watching out for his homies so hard. Decentralize, encrypt and anonymize I suppose. BT needs an overhaul to prevent attribution. Ten bucks says it’s easily possibile but the VPN companies who have our back will lobby against it, lol.
The thing with piracy these days is there is a huge fear of legal burden AND extreme protectiveness to prevent takedowns. It’s the same thing as being a gang member and suspicious of new blood being undercover cops. Once you find actual piracy that works, the last thing you want to do is post publicly about it!
Out of curiosity, where would the regulators go for a case like this? There’s no “company” running it per. se.