Embed Notice

I truly hope #peertube will have some sort of an extreme bug hunt because this year it has leaked worse than a sieve. One critical hole after another. It even has the questionable honor of being the first ever online service run by me that got broken into, although I managed to neutralize it before anything got done.

What's worse is that last time I checked, the Peertube instances that contact mine are often wildly out of date. I see people leaving comments on those about the installation being wide open.

In case you missed it, the last one patched a hole where anyone could pretty much do whatever to your playlists.

https://github.com/Chocobozzz/PeerTube/security/advisories/GHSA-37jf-59fg-9hpr

#peertube #infosec #vulnerability #fediverse