504

WARNING: Lemmy Self-Hosters, There Have Been CSAM Attacks taking place against !lemmyshitpost@lemmy.world (jamie.moe)

submitted 11 months ago* (last edited 11 months ago) by Jamie@jamie.moe to c/selfhosted@lemmy.world

154 comments fedilink hide all child comments

cross-posted from: https://jamie.moe/post/113630

There have been users spamming CSAM content in !lemmyshitpost@lemmy.world causing it to federate to other instances. If your instance is subscribed to this community, you should take action to rectify it immediately. I recommend performing a hard delete via command line on the server.

I deleted every image from the past 24 hours personally, using the following command: sudo find /srv/lemmy/example.com/volumes/pictrs/files -type f -ctime -1 -exec shred {} \;

Note: Your local jurisdiction may impose a duty to report or other obligations. Check with these, but always prioritize ensuring that the content does not continue to be served.

Update

Apparently the Lemmy Shitpost community is shut down as of now.

you are viewing a single comment's thread
view the rest of the comments

[-] xtremeownage@lemmyonline.com 42 points 11 months ago

Yup. Nope.

Pictrs is just completely disabled now. Rather be safe, then sorry.

[-] Clbull@lemmy.world 17 points 11 months ago

Is this why I couldn't upload a meme to the Lemmy World servers earlier today?

Fuck...

[-] pastthepixels@lemmy.potatoe.ca 12 points 11 months ago

Yeah... Just wow. I disabled pictrs and deleted all its images, which also means all my community images/uploaded images are gone, and it's more of a hassle to see other people's images, but in the end I think it's worth it.

Through caching every image pictrs was also taking up a massive amount of space on my Pi, which I also use for Nextcloud. So that's another plus!

[-] xtremeownage@lemmyonline.com 4 points 11 months ago* (last edited 11 months ago)

Note, apparently, lemmy will get pretty pissy if pictrs isn't working..... and the "primary" lemmy GUI will straight-up stop working.

Although, https://old.lemmyonline.com/ will still work.

And- I am with you. My pictrs storage, has ended up taking up quite a bit of room.

[-] rar@discuss.online 2 points 11 months ago* (last edited 11 months ago)

There has to be a more elegant way of dealing with this in the future, like de-coupling between Lemmy-account hosting (which effectively means acitivypub-fediverse account) and Lemmy-communities hosting.

[-] neutron@thelemmy.club 6 points 11 months ago

Does that disable image saving and processing for one's instance?

[-] xtremeownage@lemmyonline.com 6 points 11 months ago* (last edited 11 months ago)

Yup.

So far, mostly everything appears to work still. But, trying to upload an image, just throws an error.

SyntaxError: Unexpected token 'R', "Request er"... is not valid JSON

I don't see a way to actually "gracefully" disable it, but, this works.

Edit- don't just stop pictrs.

Lemmy gets very pissy... and b reaks.

[-] stark@qlemmy.com 6 points 11 months ago

Is disabling Pictrs as simple as stopping the Docker container?

[-] xtremeownage@lemmyonline.com 8 points 11 months ago

Yup.

I sent a step further, and commented out the pictrs related configuration from the lemmy.hjson too.

this post was submitted on 28 Aug 2023

504 points (98.5% liked)

Selfhosted

38680 readers

280 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago

MODERATORS

HybridSarcasm@lemmy.world

HybridSarcasm@lemmy.hybridsarcasm.xyz