c/div0 · by Wizard3964@lemmy.dbzer0.com · 65d

Blahaj zone pwned

https://lemmy.blahaj.zone/post/44150358

Looks like they've been pwned.

Just checking in with admin to make sure we're not vulnerable to the same thing.

Detailed post here: https://pen.blahaj.zone/supakaity/weve-been-hacked

20 points · 8 comments · view on lemmy.world

8 Comments

db0@lemmy.dbzer0.com · 9 pts · 65d

We don't run the same service which got pwned

A404@lemmy.dbzer0.com · 2 pts · 65d (5 replies)

And this is is exactly the reason why I never access the fediverse with my home IP

db0@lemmy.dbzer0.com · 8 pts · 65d (3 replies)

We don't store ips anyway

TwiddleTwaddle@lemmy.blahaj.zone · 5 pts · 65d (1 reply)

And neither did Blahaj according to their disclosure post. As far as they can tell, only the email used to sign up for the account could be compromised.

Wizard3964@lemmy.dbzer0.com · 1 pts · 22d

Their admins disclosed in a comment that ip addresses are stored by the Lemmy database, and were exposed.

Wizard3964@lemmy.dbzer0.com · 1 pts · 22d

It looks like IP addresses are stored in the DB in lemmy. It's possible that the attacker had access to those IPs, but we don't believe they accessed them. This is the sort of thing we would turn off if we could :\

From the admin

Carl@anarchist.nexus · 1 pts · 31d

[ removed ]

alapakala@quokk.au · 2 pts · 31d (1 reply)

I can't access https://pen.blahaj.zone/supakaity/weve-been-hacked
I want to see the incident report.

Eggman@thelemmy.club · 2 pts · 31d

https://web.archive.org/web/20260624162731/https://pen.blahaj.zone/supakaity/weve-been-hacked