I appreciate the transparency. Hopefully with more eyes on the source code hacks like this will not happen again.

Hmm. Liftoff won't let me post but shows logged in and as a newbie be damned if I can find where to log out.

I’d like to logout, then log back in, because I can’t upvote / downvote- how do I logout? I can’t seem to find a logout button.

Thanks for the post-mortem and the quick fix! Glad you guys around to help battle test Lemmy's code.

Is a password change advised? How does the JWT cookie and exploit effect apps eg Jerboa?

Good shit! Thanks for keeping things up and the pretty quick response as well.

Maybe there needs to be a quick rundown how to actually log out and in on clients, seems you can't with jerboa without just wiping the app, and wefwef, you need to delete all accounts.

I see some instances are throwing server errors

I lost some of my post history. Is there a data issue that's come from this? Why are my comments gone?

Huh, i think i got lucky by forgetting that there is something i can consume other than youtube

thanks to admin team for resolving that quickly

Thanks.

Well done on acting on it so quickly. I think I did see some of the fake announcements you were referring too but were taken down very quickly. Keep up the good work team and thanks for everything you are doing!

Great job everyone! Keep it up! Love the transparency!

******* This happened to me, one of my posts had it's photo deleted (I didn't delete it), then when I replaced it, the next time I checked the entire post had been deleted.

is that why I can't log into my lemmy.world account?

Is this why I can't log in on Chrome? I switched to Firefox and it worked.

How are you preventing it to happen again until a patch is released from devs?

Thanks to everyone involved for the quick response 👍