Reminds me of when I had to change my site’s login cookies from “session” cookies to “persistent” cookies because mobile browsers aggressively clear the session. I don’t know if that’s what was going on in this case.
Memmy signed me out (covertly - only way I could tell is my subscription view showed communities wasn’t subscribed to). Re-entering my credentials fixed it. Let’s see if this posts first time.
Logging out and back in only really fixes the “youre logged out” (not entirely though) issue. Posts still have to be posted multiple times for it to actually happen most of the time from my experience.
I heard it is a load balancing issue. Lemmy World has two instances, with two different JWT secrets, and you have a 50/50 chance of hitting the wrong server when you make any API requests.
I guess they don’t really know what they’re doing and are learning how load balancing works on the fly, and thinking that’ll result in HA without side-effects without further work.
According to the support Community this was fixed about an hour and a half ago, but I continued to have issues I had to manually log out again and log back in to fix it
Getting federation working as advertised is a pain in the ass. I ran a solo instance back when Mastodon was new, and there was no end to the nonsense it generated. That’s why I’m now subscribed to the instance @ernest is running. :)
Just setup my own Masto server for myself. My initial thought was, “Crap, I can’t follow anything by hashtag anymore,” since I’m the only user and nothing would get pulled in by federation.
Then I learned about using https://relay.fedi.buzz to create a whole bunch of relays based on hashtags. And now it’s pretty much perfect for how I use it.
My federation feed is just stuff I like, and my server doesn’t get filled with random crap from federating with hundreds of full-ass servers like typical relays give you.
Server-side authentication bug; maybe fallout from the recent attack? I’d expect instability for the next day or so as auth & related problems shake out.
Summary: Attacker found a way to inject JavaScript into the sidebar, letting them steal auth tokens (“JWTs”), including from an admin account. They then used the stolen admin access to vandalize the site. At one point, the attacker used the stolen admin account to falsely announce that the attack had been remediated. Later that day, the attack actually was remediated by the site owner (Ruud) and the vulnerability was patched in the Lemmy code.
Yep lemmy.world is live (stress) testing in production. It has its benefits, like when a set of patches were committed to vastly improve performance that was a big problem on a huge instance like lemmy.world but not on the smaller ones, and its downsides with all the random issues that pop up which happen when testing live in production.
Lemmy has been improved at light speed over the last couple of weeks. When I joined around 3 weeks ago everything felt prototype-like. But now lemmy.world back-end with Voyager front-end feels almost like Apollo quality. At this rate, it definitely will, in another couple of weeks.
lemmy.world is bugged right now. What I did is backed up my account subscriptions/settings and imported it over to sh.itjust.works. You may need to try a few times (it’ll tell you when it’s successful).
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]
A community to talk about the Fediverse and all it’s related services using ActivityPub (Mastodon, Lemmy, KBin, etc).
If you wanted to get help with moderating your own community then head over to [email protected]!
Rules
Posts must be on topic.
Be respectful of others.
Cite the sources used for graphs and other statistics.
@[email protected] ITS A
LEMMY MOMENT
Reminds me of when I had to change my site’s login cookies from “session” cookies to “persistent” cookies because mobile browsers aggressively clear the session. I don’t know if that’s what was going on in this case.
Testing on Memmy. Hope this works.
Memmy signed me out (covertly - only way I could tell is my subscription view showed communities wasn’t subscribed to). Re-entering my credentials fixed it. Let’s see if this posts first time.
I logged out and back in again and that seems to have helped. Not sure if it mattered at all or if the timing was coincidental.
Logging out and back in only really fixes the “youre logged out” (not entirely though) issue. Posts still have to be posted multiple times for it to actually happen most of the time from my experience.
Getting logged out randomly and having to submit comments multiple times for them to post sure is fun. /s
Every time they upgrade their servers you gotta re-login.
I heard it is a load balancing issue. Lemmy World has two instances, with two different JWT secrets, and you have a 50/50 chance of hitting the wrong server when you make any API requests.
I guess they don’t really know what they’re doing and are learning how load balancing works on the fly, and thinking that’ll result in HA without side-effects without further work.
According to the support Community this was fixed about an hour and a half ago, but I continued to have issues I had to manually log out again and log back in to fix it
Great!
Login issue reportedly fixed with 0.18.2 update: Lemmy.world updated to 0.18.2
Good to know! Looks like the login/out issue stopped.
Getting federation working as advertised is a pain in the ass. I ran a solo instance back when Mastodon was new, and there was no end to the nonsense it generated. That’s why I’m now subscribed to the instance @ernest is running. :)
Just setup my own Masto server for myself. My initial thought was, “Crap, I can’t follow anything by hashtag anymore,” since I’m the only user and nothing would get pulled in by federation.
Then I learned about using https://relay.fedi.buzz to create a whole bunch of relays based on hashtags. And now it’s pretty much perfect for how I use it.
My federation feed is just stuff I like, and my server doesn’t get filled with random crap from federating with hundreds of full-ass servers like typical relays give you.
Ernest is running lemmy instance or you’re talking about kbin?
Yeah, kbin here.
We beta testing
I mean, we literally are. They have been very clear about that.
Betta believe it
There are thousands of instances. I don’t understand why everyone is piling on to lemmy.world
Server-side authentication bug; maybe fallout from the recent attack? I’d expect instability for the next day or so as auth & related problems shake out.
Attack? I am outta the loop. What happened?
https://lemmy.world/post/1290412
Summary: Attacker found a way to inject JavaScript into the sidebar, letting them steal auth tokens (“JWTs”), including from an admin account. They then used the stolen admin access to vandalize the site. At one point, the attacker used the stolen admin account to falsely announce that the attack had been remediated. Later that day, the attack actually was remediated by the site owner (Ruud) and the vulnerability was patched in the Lemmy code.
Appreciate the info.
lemmy.world has never been stable, nor has lemmy
Production services are actually fuckin’ goddamn difficult, and I add another swear to this comment for every time I have to try reposting it.
Yep lemmy.world is live (stress) testing in production. It has its benefits, like when a set of patches were committed to vastly improve performance that was a big problem on a huge instance like lemmy.world but not on the smaller ones, and its downsides with all the random issues that pop up which happen when testing live in production.
Lemmy has been improved at light speed over the last couple of weeks. When I joined around 3 weeks ago everything felt prototype-like. But now lemmy.world back-end with Voyager front-end feels almost like Apollo quality. At this rate, it definitely will, in another couple of weeks.
https://lemmy.world/comment/1147256
Getting the same thing. Found out I was unsubbed from the sub I was following.
lemmy.world is bugged right now. What I did is backed up my account subscriptions/settings and imported it over to sh.itjust.works. You may need to try a few times (it’ll tell you when it’s successful).
Thank you for the tip on backing up.
Lemmy.world when I tried to post kept saying not logged in. Created an account on sh.it just.works
e: This instance hardly has anything
You can access all your lemmy.world communities from sh.itjust.works, it doesn’t really matter if it has much locally.
Only issue is it’s hot feed seems bugged
I have also experienced some bugs. So now I have more accounts