WARNING: Lemmy Self-Hosters, There Have Been CSAM Attacks taking place against !lemmyshitpost@lemmy.world
WARNING: Lemmy Self-Hosters, There Have Been CSAM Attacks taking place against !lemmyshitpost@lemmy.world
cross-posted from: https://jamie.moe/post/113630
There have been users spamming CSAM content in !lemmyshitpost@lemmy.world causing it to federate to other instances. If your instance is subscribed to this community, you should take action to rectify it immediately. I recommend performing a hard delete via command line on the server.
I deleted every image from the past 24 hours personally, using the following command:
sudo find /srv/lemmy/example.com/volumes/pictrs/files -type f -ctime -1 -exec shred {} \;
Note: Your local jurisdiction may impose a duty to report or other obligations. Check with these, but always prioritize ensuring that the content does not continue to be served.
Update
Apparently the Lemmy Shitpost community is shut down as of now.
So, from memory there has been:
- This recent attack
- Regular DDOS attacks
- Frequent attempts to spam community creation
- That one time the instance got hacked and set to redirect to shock sites
Am I missing anything?
This seems like more than just a few trolls. Maybe someone really doesn't want to see user-owned social media take off.
I literally am going to give up social media in general if this doesn't stop
Seen it last night late around 3am shit made me sick I honestly almost cried but I just closed the app and tried not to think about it
Whatever the goal is it's a stark reminder that there is monsters creeping in the shadows every where you go
Likely scum moves from reddit patriots to destroy or weaken the fediverse.
I remember when Murdoch hired that Israeli tech company in Haifa to find weaknesses is TV smart cards and then leaked it to destroy their market by flooding counterfit smart cards.
They are getting desperate along with those DDOS attacks.
I got lucky. I am not subscribed to this community, and I am the only person on my instance. But what if I was subscribed and hadn't seen this post? This is too much responsibility for me.
I just shut down my instance until we can disable cached images. If that never happens, then I'm not bringing it back up.
Shout-out to https://github.com/wescode/lemmy_migrate. I moved my subscriptions over in a minute or two, and now, other than not having my post history, it's exactly the same.
i’d love for a good tech journalist to look into how and why this is happening and do a full write-up on it. come on ars, verge, vice
Self hoster here, im nuking all of pictrs. People are sick. Luckily I did not see anything, however I was subscribed to the community.
- Did a shred on my entire pictrs volume (all images ever):
sudo find /srv/lemmy/example.com/volumes/pictrs -type f -exec shred {} \;-
Removed the pictrs config in lemmy.hjson
-
removed pictrs container from docker compose
Anything else I should to protect my instance, besides shutting down completely?
blocked lemmyshitpost some time age because it is trash anyway
Likely Spez’s personal jailbait collection
There was a weird JSON error I was getting in the last few minutes. I'm not sure if this is at all related.
Locking the thread. Information relevant to self-hosters has already been shared. Too many reports of off-topic comments to leave this open.
sudo find /srv/lemmy/example.com/volumes/pictrs/files -type f -ctime -1 -exec rm {} \;- sudo: run as root
- find /srv/lemmy/example.com/volumes/pictrs/files -type f: find files (f) in directory
- -ctime -1: which have been created in the last day
- -exec rm {} ; execute the command rm (remove) on each of them
That's it, I'm defederating from lemmy.world. the admins let their users make death threats against users of other instances on top of this.