Are they just an issue with wefwef or trying to use an exploit

-16 points

Click on one of the links and find out. Donโ€™t forget to let us all know what happened. /s๐Ÿคฃ๐Ÿคฃ

permalink
report
reply

just a website with the usual bullshit rambings of anti-ukraine conspiracists.

permalink
report
parent
reply
1 point
*
Deleted by creator
permalink
report
parent
reply
9 points

And now it has your session cookie

permalink
report
parent
reply

Which is why I always check dodgy links in a non logged in browser in an isolated vm.

permalink
report
parent
reply
10 points

Clicking on it would run javascript on load (most browsers block it by default), but I would avoid clicking either way.

permalink
report
reply
3 points

You canโ€™t see what the link actually is, only its Label.

Onload, if interpreted as Javascript instead of text, would have executed on load, not on click.

permalink
report
parent
reply
51 points

if it has document.cookie in it - it is trying to steal your cookies, to use your account. thatโ€™s a JavaScript link that, well, sends your account cookies to a random ass site.

permalink
report
reply
36 points

idk for sure but people are saying lemmy.world got hacked maybe it has to do with that?

permalink
report
reply
22 points

Definitely seems to be trying to exploit the same thing

permalink
report
parent
reply
8 points
*

yeah after reading more of the post I linked it definitely looks like it

permalink
report
parent
reply
9 points
44 points

A few minutes ago Ruud posted that there was a hack, i wonder if it has something to do with that?

https://lemmy.world/post/1290412

permalink
report
reply
34 points

Yes, these comments are JavaScript code, intended to run in the browser of anyone viewing them. Best to stay clear of the webapp for now (native mobile apps should not be vulnerable).

permalink
report
parent
reply

Asklemmy

!asklemmy@lemmy.ml

Create post

A loosely moderated place to ask open-ended questions

Search asklemmy ๐Ÿ”

If your post meets the following criteria, itโ€™s welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

Icon by @Double_A@discuss.tchncs.de

Community stats

  • 9.6K

    Monthly active users

  • 4.9K

    Posts

  • 275K

    Comments