IMO it’s not a good idea to be discussing attack vectors publicly when a number of other instances are unpatched and the exploit has been in the wild for less than a day.
I agree that admins need to work together, but discussing it in public on Lemmy so soon after the attack isn’t the way. There exists a Matrix channel for admins, that’s where this type of thing should go.
https://github.com/LemmyNet/lemmy-ui
That’s the frontend to the Lemmy project.
Here’s a great blurb about it right from the source.
https://www.npr.org/2022/12/06/1141003318/wait-wait-dont-tell-me-caller-contestant
Agreed. As an American, cool concept, rough name. There is no way I’m recommending a software called crackpipe at work.
And let’s say I wanted to use it, I’m going to install this and instruct my kids how to use crackpipe? I’m sure that will go over great with little Timmy’s school when he tells his teacher and friends.
I’d strongly consider changing it.
We’re not talking about it, but we’re definitely not ignoring it. 👀