Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Pleroma-tan (kirby@lab.nyanide.com)'s status on Tuesday, 06-Feb-2024 05:47:31 JST Pleroma-tan
in reply to
- Aether ???
@Aether You're wrong

it allowed people to spoof messages from remote users, but nothing more as far as anyone knows

In conversation about 10 months ago from lab.nyanide.com permalink
- Embed this notice
  Aether ??? (aether@poa.st)'s status on Tuesday, 06-Feb-2024 05:47:32 JST Aether ???
  
  A Mastodon vulnerability allowed attackers to take over user accounts.
  
  bleepingcomputer.com/news/security/mastodon-vulnerability-allows-attackers-to-take-over-accounts/
  
  Fortunately Mastodon is distributed, so... The bug will persist until every single Mastodon node has been individually updated.
  
  every.single.instance.
  In conversation about 10 months ago permalink
  Attachments
  1. Domain not in remote thumbnail source whitelist: www.bleepstatic.com
    
    Mastodon vulnerability allows attackers to take over accounts
    
    from @BleepinComputer
    
    Mastodon, the free and open-source decentralized social networking platform, has fixed a critical vulnerability that allows attackers to impersonate and take over any remote account.

Feeds