Conversation

POS tankies can't code, apparently.

Lemmy devs were notified in June about major flaws in the way they handle custom emojis that allowed bad actors to steal people's logged-in sessions. they don't seem to have done anything...

https://akkoma.nrd.li/notice/AXXhAVF7N5ZH1V972W

https://tildes.net/~tech/17vw/lemmy_world_has_been_hacked_and_is_currently_down#comment-9er7