lemmy.world is a victim of an XSS attack right now and the hacker simply injected a JavaScript redirection into the sidebar. It appears the Lemmy backend does not escape HTML in the main sidebar. Not sure if this is also true for community sidebars. [https://sh.itjust.works/pictrs/image/707c0f16-3d5c-4888-b865-34228d968ee6.png]
  • Lodion 🇦🇺MAEnglish
    4·
    1 year ago

    Real risk of locking yourself out of your account.

    yes, the initial setup is not intuitive at all. Once setup it functions normally.

    • maniacalmanicmaniaEnglish
      3·
      1 year ago

      Thanks. I’m going to wait for your guide. What do you advise we do with bot accounts?

        • maniacalmanicmaniaEnglish
          3·
          1 year ago

          Thanks. This worked. I got a little confused with points 3, 4 and 5 but now that I’ve re-read your instructions I see that they are clear and I have no suggestions for improving them at this time.

        • Gorgritch_Umie_KillaEnglish
          2·
          1 year ago

          Hey, so i followed the guide. I think i hit all the steps, but when i try to log in on the browser to test whether its worked. The 2fa box does come up. But when i enter the code and hit login theres no progression on from that screen. Not sure where i’ve gone wrong? Using Aegis btw.

          • Lodion 🇦🇺MAEnglish
            2·
            1 year ago

            Hmm you may need to disable 2FA again. I’m not sure why it wouldn’t work, perhaps Aegis hasn’t imported it correctly?

      • Lodion 🇦🇺MAEnglish
        3·
        1 year ago

        In the short term, use a 60 character password and never use that account interactively. ie only use it with your scripts/bot. And obviously keep the password securely stored.