this post was submitted on 10 Jul 2023
23 points (100.0% liked)

Meta

700 readers
1 users here now

Discussion about the aussie.zone instance itself

founded 2 years ago
MODERATORS
admin@aussie.zone
lodion@aussie.zone
23
(URGENT) Lemmy has an XSS vulnerability in the sidebar - sh.itjust.works (sh.itjust.works)
submitted 2 years ago by eatham@sh.itjust.works to c/meta@aussie.zone
33 comments fedilink hide all child comments
 

https://sh.itjust.works/post/923025

you are viewing a single comment's thread
view the rest of the comments
[–] maniacalmanicmania@aussie.zone 3 points 2 years ago (2 children)

Thanks. I'm going to wait for your guide. What do you advise we do with bot accounts?

[–] lodion@aussie.zone 4 points 2 years ago (2 children)

I've thrown this together.

[–] maniacalmanicmania@aussie.zone 3 points 2 years ago

Thanks. This worked. I got a little confused with points 3, 4 and 5 but now that I've re-read your instructions I see that they are clear and I have no suggestions for improving them at this time.

[–] Gorgritch_umie_killa@aussie.zone 2 points 2 years ago (1 children)

Hey, so i followed the guide. I think i hit all the steps, but when i try to log in on the browser to test whether its worked. The 2fa box does come up. But when i enter the code and hit login theres no progression on from that screen. Not sure where i've gone wrong? Using Aegis btw.

[–] lodion@aussie.zone 2 points 2 years ago (1 children)

Hmm you may need to disable 2FA again. I'm not sure why it wouldn't work, perhaps Aegis hasn't imported it correctly?

[–] Gorgritch_umie_killa@aussie.zone 2 points 2 years ago

Okay cool, it just worked. No idea what difference waiting overnight made though.

[–] lodion@aussie.zone 3 points 2 years ago

In the short term, use a 60 character password and never use that account interactively. ie only use it with your scripts/bot. And obviously keep the password securely stored.