Conversation

Notices

1. Embed this notice
   Oneesan succubus (lain@pleroma.soykaf.com)'s status on Tuesday, 20-Feb-2024 18:16:19 JST Oneesan succubus
   Please update immediately or deactivate the emoji stealer:
   
   https://pleroma.social/announcements/2024/02/20/pleroma-security-release-2.6.2/
   • Embed this notice
     anime graf mays ?️? (graf@poa.st)'s status on Tuesday, 20-Feb-2024 18:19:53 JST anime graf mays ?️?

     in reply to
     @lain thanks lain we disabled it 2 years ago 🫡
     Oneesan succubus likes this.
   • Embed this notice
     Oneesan succubus (lain@pleroma.soykaf.com)'s status on Tuesday, 20-Feb-2024 18:20:44 JST Oneesan succubus

     in reply to

     • anime graf mays ?️?
     @graf ahead of the curve
   • Embed this notice
     ✙ dcc :pedomustdie: :phear_slackware: (dcc@annihilation.social)'s status on Tuesday, 20-Feb-2024 18:25:26 JST ✙ dcc :pedomustdie: :phear_slackware:

     in reply to
     @lain People use the emoji stealer?
   • Embed this notice
     anime graf mays ?️? (graf@poa.st)'s status on Tuesday, 20-Feb-2024 18:25:36 JST anime graf mays ?️?

     in reply to
     @lain we have some additional security issues to present but we need to make sure we can duplicate and correct them first. non critical but save a major release for a couple in the next few weeks
     Oneesan succubus likes this.
   • Embed this notice
      (mint@ryona.agency)'s status on Tuesday, 20-Feb-2024 18:36:36 JST 

     in reply to

     • Zergling_man
     @Zergling_man @lain It only steals the emojis it sees in post instead of whole packs, and puts them into "stolen" pack.
     ✙ dcc :pedomustdie: :phear_slackware: likes this.
   • Embed this notice
     Zergling_man (zergling_man@sacred.harpy.faith)'s status on Tuesday, 20-Feb-2024 18:36:37 JST Zergling_man

     in reply to
     @lain I'm amazed people even run it anyway, seems like an easy spam vector: Just install a fake pack that will return infinitely large images. :^)
     But then, AP is a spam protocol.png.