preston

Go nuts, post all the spoilers here.

Not pinning this one so nobody wanders in on accident. 🙂

Hey everyone, just a quick update on the downtime earlier this morning.

CSAM was posted to a community we federate with by a user from kbin.cafe, so I've taken the following actions:

• Purged that user and related media upload links from our database.
• Defederated from kbin.cafe, as their admin seems to have mostly abandoned the site.
• Upgraded to the release candidate of Lemmy 0.19, since it has new admin/moderation features that'll make handling cases like this easier in the future.

On the bright side, Lemmy 0.19 has some fancy new performance improvements and improved post ranking options! Stay tuned for a full feature overview soon from the Lemmy project folks.

(Edit) Here's some updates on 0.19 and breaking changes:

https://possumpat.io/post/1123074

https://possumpat.io/post/1639282

(Edit2)

We're now updated to the full 0.19 release!

As always, if you have any questions or concerns let me know.

Hey everyone! Quick instance update.

You may have noticed some server instability over the past few weeks with the site being slow or unresponsive. Today I upgraded the database hardware to better handle the federation traffic volume, so far seems like everything is humming along much more smoothly. 🎉

Over the past day, large lemmy instances were vandalized with CSAM spam. To ensure possumpat.io has no caching of these images, I'm rolling back the image database by a few days and currently pausing new image uploads.

You might see some server downtime as maintenance is done around this.

Even more performance updates! I was a bit slow getting this one rolled out as I was at FFXIV fanfest. 🙂

As always, let me know if you have any problems or questions.

Full changelog can be found here.

As you may have seen, lemmy.world was recently compromised due to an attacker gaining access to an Administrator account.

This exploit is related to the custom emoji feature, so as a precaution the few custom emoji we had so far have been removed.

As the attack involves hijacking an already logged-in account session, all user sessions have been reset - just in case any possumpat.io account was compromised while we had custom emoji enabled. I apologize for the inconvenience.

I'll update this post once we know more, and as always if you have any questions let me know.

Edit: For those interested in the technical details, this github thread details the vulnerability and ongoing efforts to mitigate it.

Edit: lemmy.world's post on the hack.

Edit: Exploit has been patched, will re-enable custom emoji soon.

Many backend performance improvments and some tweaks to the default web UI.

I'm personally seeing an issue with the update right now - The site theme is sometimes getting confused between light and dark mode. If you are encountering this, let me know. In the meantime, choosing a site theme in your user settings seems to fix the mixup.

With the upgrade to 0.18, we now have custom emoji support!

Feel free to suggest any emoji you like in the comments.

Lots of performance and UI improvements! As always let me know if anything seems missing or broken.

Site loading slow?

Can't find a community?

Questions about Lemmy/Fediverse?

Friend's registration application lost in the mail?

Post any and all questions about the instance here, and I'll see what I can do to help.