FYI!!! In case you start getting re-directed to porn sites.

Maybe the admin got hacked?

  • eerongal@ttrpg.network
    link
    fedilink
    English
    arrow-up
    16
    ·
    1 year ago

    Definitely opens up a big question about the security of Lemmy instances that I am sure will be discussed over the next few days.

    They added 2FA login to lemmy in one of the newer updates. Probably pretty pertinent for any admins to use it…

    • ebits21@lemmy.ca
      link
      fedilink
      English
      arrow-up
      10
      ·
      edit-2
      1 year ago

      It’s buggy and missing some key checks to make sure it’s working when you set it up.

      Real risk of locking yourself out of your account.

        • ebits21@lemmy.ca
          link
          fedilink
          English
          arrow-up
          6
          ·
          1 year ago

          Mostly a risk on initial setup.

          I’ve been waiting a bit for it to stabilize and just using huge random passwords

          • Zetaphor@zemmy.cc
            link
            fedilink
            English
            arrow-up
            4
            ·
            1 year ago

            If you’re using a password manager you’d be doing this for every site and without even having to think about it. Bitwarden is a great choice.

            • ebits21@lemmy.ca
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              1 year ago

              Oh I do. Used Bitwarden for many years.

              I actually use keepass for totp codes too.

    • bdonvr@thelemmy.club
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 year ago

      Also I believe this was achieved through cookie stealing, which 2FA would not have helped