• Penang Kia
    2•2 years ago

    Did not expect my post to promote the Kdrama community to provoke anti-Lemmy posts, but this is Mastodon 🤣

    • imaginelizardOPM
      1•2 years ago

      Keep promoting anyway. The more the merrier I say, any engagement is a good engagement when we’re this small.

  • @[email protected]
    1•2 years ago

    btw if anyone is also exploring fedi side of the microblogs (your insta, tumblr, twitter equivalent - there’s even an FB one), and are looking for more hashtags to follow as you set up your account (as you don’t have to follow accounts, you can also just follow hashtags):

    • Histodon
    • Bookstodon
    • Bloomscrolling
    • Florespondence
    • TootSEA
    • MYToots
    • MakanApaToday (belated also can)
    • PlaylistSEA (music recs; doesn’t have to be current)
    • FilmSEA
    • ArtistSEA or ArtSEA
    • CatsOfMastodon
    • LawFedi

    the Malaysians are still workshopping if we want to call ourselves Feditiam or Feditory so the ones who layan this are tagging one or the other, lol.

  • @[email protected]
    2•2 years ago

    I’m still contemplating whether to buy a yukata for bon odori. But I don’t think I will wear it much 😞

    • jellodiM
      3•2 years ago

      I saw a bunch of really nice ones in JJJ! If you’re not against thrifting, do consider it!

      • @[email protected]
        2•2 years ago

        I found one on shopee for 50+, but only one colour choice. I like the design tho. Most yukatas on shopee Lazada average about RM70 from what I see

      • @[email protected]
        1•2 years ago

        Oo that’s a good thing to do too haha, but I think I’ll be satisfied with one set. Gotta save the rest of the budget for JK and jirai kei outfits XD

    • Annoyed_🦀
      1•2 years ago

      Can rent what. I rented one last time, they got whole set and also shoe as well.

          • @[email protected]
            1•2 years ago

            Yep, I’m looking into those options too! Scrolled thru carousel but sadly I haven’t found something that I like :(

        • Annoyed_🦀
          1•2 years ago

          Hmm, i saw one rental is about rm70 for ladies, with Yukata + Pretied-Obi (Belt) + Koshihimo x2 (Sash) + Geta (Footwear) + Random Head Accessory. Too expensive? :x

            • Annoyed_🦀
              1•2 years ago

              Got full set wor, haha I don:t know the price🙈

              But going it in full yukata is the intended experience, i’d say buy buy buy

  • Annoyed_🦀
    2•2 years ago

    Shit, lemmy world got hacked, click on that Israel will lead you to explicit picture of a bunch of naked old man sucking each other, and also pop’s up lead to porn site.

    Avoid at all cost.

    • @[email protected]
      2•2 years ago

      Goddammit. The fediverse drama continues.

      Btw admins it’s best that we defederate for the time being.

    • @[email protected]
      1•2 years ago

      https://kbin.social/m/[email protected]/t/168524/Lemmy-world-and-another-instance-have-been-compromised#entry-comment-661712

      The linked comment suggests that the entire Lemmy platform is currently vulnerable to the cookie stealing exploit that already happened to several instances.

      Now, if only we have automod that could detect code injection in markdown links and tempban offenders…

    • @[email protected]
      4•2 years ago

      this is bad. rumour has it this is due to an admin’s json web token being leaked.

      so I would advise all admins here not to log into 3rd party web apps (mobile apps should be okay) with their admin accounts, as the web apps usually proxy your requests (hence, they have your token), and they proxy not due to nefarious purposes, but due to some problem with cors (in other words, being forced to proxy your request isn’t really their fault, and once the cors problem is fixed in the lemmy backend, they can stop doing that).

    • zen
      1•2 years ago

      https://github.com/LemmyNet/lemmy-ui/issues/1895 has more information on mitigations, which may not be necessary if no custom emojis were added.

      it also has something for invalidating all json web tokens by changing the signing key (all users will need to re-login after doing that), which may be necessary depending on whether the tech team believes any of them (especially any of the admin’s) have been compromised (there is currently no expiry date on the tokens).

      #lemmyworldhacked #fediversedrama

      • Annoyed_🦀
        1•2 years ago

        Thanks, i’m giving it a read but i’m not coding literate so may need some time to parse 😂

        • @[email protected]
          3•2 years ago

          now I’m hearing that the hack is being spread through direct messages as well.

          as this seems to be a javascript hack, all admins logged on through any web ui (even the official one) are advised to not open dm’s from unknown users.

          as mobile apps differ from browsers, and shouldn’t execute javascript directly, they should be less affected, but please take caution anyway for the time being.

          edit: it seems lemmy.blahaj.zone has been hacked too. the malicious javascript has been detected in custom emojis and community description sidebars, so admins must watch out for new users who signup and immediately start posting custom emojis or opening new communities.

            • @[email protected]
              1•2 years ago

              I think it is better to not open it at all (at least in the web browser, mobile apps seem to be okay, but nothing is really certain atm), as the malicious javascript seem to be connected to custom emojis and community descriptions in the sidebar (see my latest edit), so no clicking required.

  • @[email protected]
    3•2 years ago

    Downloaded a mobile version and now it sits next to my Reddit.

    Also tried Threads. Immediately got a bunch of Muslim accounts on For You. I don’t follow any on Instagram neither am I Muslim.

    Will wait till my feed stabilizes back to my usual diet of left wing shitposts and music memes.

    • @[email protected]
      2•2 years ago

      Welcome!

      Your account is tied to the instance you created your account in. To browse you’ll need to subscribe to another instance by searching for the instance and adding it to your list. I think you can find a guide somewhere under announcements :)

  • Annoyed_🦀
    3•2 years ago

    Shiet, sad that i have to work, reading the saucy stuff of lemmyworld hack is entertaining and educational.

      • @[email protected]
        1•2 years ago

        My weekend been used up moving and packing to a new place. And then settling some forms for Monday. Babi. Ade je. When does it feel like it’s truly an off day?