SmolSlime

Really love this sequel song of ENERGY SYNERGY MATRIX. You can clearly see the improvement of the animation, and imo the sequel also sounds better. The longer version is here https://www.youtube.com/watch?v=lFkot7cIkTc

There's a JavaScript injection exploit going on. Apparently the exploit also works on comments, just by embedding an image and adding some JS code in it. I don't know if this could steal the entire cookies or just the website's, but just to be safe don't randomly click every link.

The post below is copy pasted from https://kbin.social/m/[email protected]/t/168524/Lemmy-world-and-another-instance-have-been-compromised#entry-comment-661712

Some information I have posted to Lemmy.World:

I am not a super code-literate person so bare with me on this… But. Still please becareful. There appears to be a vulnerability.

Users are posting images like the following:

imgur.com/a/RS4iAeI

And inside hidden is JavaScript code that when executed can take cookie information and send it to a URL address.

Among other things. At this time if you see an image please click the icon circled before clicking the link. DO NOT CLICK THE IMAGE. If you see anything suspicious, please report it immediately. It is better a false report than a missed one.

I have seen multiple posts by these people during the attack. It is most certainly related to JS.

This is my old account that I just logged in today. Just joined a server and Discord asked for email verification. Okay, that's not hard, thankfully Discord doesn't restrict email to only big providers. But then suddenly DIscord asked to verify by phone number, because "something is out of ordinary". What's out of ordinary from that??? Joining a server > Discord asks to verify > I verify.

I was losing my mind seeing people suggesting moving to Discord when Rexxit happened. Like WTF, it's even worse than Reddit. Non-indexable content, worse privacy, needing account just to access the said content, etc.

I really hate how services nowadays require your phone number just to use their service. Unfortunately most people just don't care of privacy, thanks to "I have nothing to hide" mindset.