lemmy.world and lemmy.blahaj.zone are down from what seems like a JavaScript injection attack
Sorry for multiple posts, I couldn’t tell if the sh .itjust. works post of mine went through and thought they were down too (also commenting here from kbin because i wanna not add more links to/from lemmy in case it could help this spread)
Assuming that this isn’t exclusive to the particular builds those instances are running it’s going to be a rodeo for a while. While I can see the desire to target larger instances it’s not going to be long before any instance is a target for the lulz.
Especially since doing that will let you Federate through compromised comments, and possibly affect other instances using the Federation network, unless they’re updated.
looks like it’s already patched: https://lemmy.blahaj.zone/post/766402?scrollToComments=true
Could this be why beehaw.org seems to be fully down? Screenshot of browser saying connection timed out while trying to access beehaw.org
I’m on the beehaw matrix and that is the reason. They’re entirely down as a precaution until they can update
