Hello World! The last week or so we have seen quite a big 'boost' in the amount of new users signing up so we thought it would be a good time to highlight some things that are of interest to new users. **CODE OF CONDUCT** Lemmy World is not a free speech instance, there are a couple of ground rules that need to be followed. If you're new, I would advise you to read our [Code of Conduct](https://lemmy.world/legal). **NEW USER QUESTIONS** If you are new to the fediverse as a whole, it might all be a bit overwhelming. What is Lemmy? What is federation? What even is an instance? For those questions I would suggest you have a look at the [getting starting guide](https://lemmy.world/post/37906). It should cover most of your questions. **STILL HAVE QUESTIONS?** You can head over to the [!support@lemmy.world](https://lemmy.world/c/support) community. This community should be used for questions regarding Lemmy World and is not the support community for the Lemmy software this site uses. Our Admin [@quinten](https://lemmy.world/u/quinten) recently made a post covering the most recurring questions there too. [Read about that here](https://lemmy.world/post/4505404). **ALTERNATIVE USER INTERFACES** Lemmy World hosts a few custom User Interfaces which give you a completely different experience both on the desktop as on mobile. - [https://a.lemmy.world](https://a.lemmy.world) - Alexandrite is a beautiful and convenient desktop-first alternate web UI for Lemmy. Official site https://alexandrite.app - [https://p.lemmy.world](https://photon.lemmy.world) - Photon A sleek client for Lemmy with powerful mod and admin tools. The only alternative client with feature parity to the official client. Official site https://phtn.app - [https://m.lemmy.world](https://m.lemmy.world) - Voyager was one of the first alternative UI's that became available. Optimized for Mobile. Official site https://vger.app - [https://old.lemmy.world](https://old.lemmy.world) - a familiar desktop experience for lemmy. Official site https://mlmym.org **THIRD PARTY APPS** There are a lot of Third Party apps available for Lemmy. From Paid to Open Source, you will find something that suits you easily. For a complete list of apps have a look at https://lemmyapps.netlify.app/ (Thanks [Blaze@discuss.tchncs.de](https://discuss.tchncs.de/u/Blaze)). EDIT: Updated the apps list. Also some more interesting links in [@otter@lemmy.ca](https://lemmy.ca/u/otter)'s post here: https://lemmy.world/comment/3962001 EDIT 2: Instead of https://photon.lemmy.world you can now just go to https://p.lemmy.world. You can thank [@Rootiest@lemmy.world](https://lemmy.world/u/Rootiest) laziness for that.

If you need support, best is to not DM me here or mention me in comments. I now have 300 notifications and probably no time to read them soon. Also I don’t do moderation so any moderation questions I have to forward to the moderation team. ## where to get support There’s the [!support@lemmy.world](https://lemmy.world/c/support) community, and another option is to send mail to info@lemmy.world. Mail is converted to tickets which can be picked up by admins and moderators. Thanks! Enjoy your day!

We've upgraded the instance to 0.18.1-rc.1 (to be completed)

**Edit** : OK so the outage was less brief than expected. The upgrade of the 3GB pictrs database took over 1 hour, and the version 0.4 database is now 14.5 GB... But anyway, it seems to be working alright now! We will upgrade pictrs today, from 0.3.1 to 0.4.4. This will enable us to switch to S3 storage later on, and is needed for more anti-CSAM tools. Outage should only involve picture uploads, and should be brief.

Hello World! As we've all known and talked about quite a lot, we previously blocked several piracy-focused communities. These communities, as [announced](https://lemmy.world/post/3234363), were: - !piracy@lemmy.dbzer0.com, - !steamdeckpirates@lemmy.dbzer0.com, - !piracy@lemmy.ml, and their local counterparts as follow up actions. In our [removal announcement](https://lemmy.world/post/3234363), we stated that we will continue to look into this more in detail, and re-allow these communities if and when we deem it safe. It was a solid concern at the time, because we were already receiving takedown requests as well as constant attacks, and didn't want to put our volunteer team at risk. We had zero measures in place, and the tools we had were insufficient to deal with anything at scale. Well, after back and forth with some very cool people, and starting to have proper measures as well as tooling to protect ourselves, we decided it's time to welcome these communities back again. Long live the IT nerds! We know it's been a rough ride with everything, and we'd like to thank every one of you who were understanding of us, and stayed with us all the way. Please know that as users, you are what makes this platform what it is, and damned we be if we ever forget it. With love, and as always, stay safe in the high seas! Lemmy.world Team ❤️

EDIT: The update is done - Lemmy Host now running 0.18.5 This is a short post to inform you that we will be updating Lemmy World to the latest stable release of Lemmy. This is small update that fixes issues with federation of moderation actions performed by admin accounts. There is a bigger update, v0.19.0, just around the corner but the developers wanted to get this federation issue fixed as soon as possible. The server will be updated at 1700 UTC - if you want to know when that is in your timezone you can [click here](https://www.timeanddate.com/worldclock/fixedtime.html?msg=Lemmy+World+upgrade+to+0.18.5&iso=20230930T19&p1=16&am=30). Since this is a small update, it shouldn't take long. Downtime should be minimal. Please feel free to check both https://status.lemmy.world and https://dash.lemmy.world before and during the upgrade.

I've written a short blog about what happened in August, and the finances.

# Join the Adventure on the official Lemmy.world Minecraft Server! Calling all Minecraft adventurers and builders! We're thrilled to invite you to embark on an incredible journey on the lemmy.world Minecraft Server. Get ready for an immersive experience like no other, where creativity knows no bounds, and the possibilities are endless. Minecraft Version: 1.20.x Address: **minecraft.lemmy.world** You can ask questions, request features, share your stories on the discord, matrix and in the [official lemmy community](https://lemmy.world/c/lwmc) The Server has some [rules](https://lemmy.world/post/5465996) Other info: Server FAQ: https://lemmy.world/post/5467019 Server Info: https://lemmy.world/post/5468646

Hello everyone, Recently we have been dealing with a lot of spam from the kbin.social communities. There is a bug in kbin where moderation tasks are not federated to other instances. That means even if a moderator over at kbin removes a post, it will still be visible on Lemmy instances and it's up to the instance admins to clean it up. There have been talks about this in the Lemmy admin channels with some instances considering defederating from kbin.social - and others who have already made that step. We don't want to defederate, because we know this would impact the kbin community greatly - but we have to do something. That's why we have currently removed most of the kbin communities from Lemmy World, making them unavailable to our users. But the kbin users can still view and interact with our communities and users. This means that those spam-accounts will stil be able to post in our communities too, but at least it makes the task of moderation already a little bit lighter on our team. But it was either this or defederation. The moderation tools on kbin are in an even worse state then Lemmy's. We will keep monitoring the situation and will keep you up to date should anything change. We hope you understand and support our decision. The Lemmy World team

We set up a bridge between the Lemmy.world General Matrix room and the Public-1 channel on the Lemmy World discord server yesterday. It's not perfect as emoji reactions aren't visible and some minor things like how it handles edited messages but other than that it seems to be working well. Now people on both chat clients can interact with eachother!

We know most of you were *thrilled* about our Discord server, so we decided to make you even happier with [our very own space](https://matrix.to/#/#space:lemmy.world) on matrix! - There is an announcement room for all the latest and greatest about Lemmy World: https://matrix.to/#/#announcements:lemmy.world - A General channel where everyone is welcome to join and talk: https://matrix.to/#/#general:lemmy.world And lastly, this one is more for admins of other instances but we have opened a "LW Defense HQ" room which we want to use in our ongoing fight against spammers: https://matrix.to/#/#defense:lemmy.world Come join us! EDIT: Madlad [@ruud@lemmy.world](https://lemmy.world/u/ruud) was easily convinced to set up a lemmy.world matrix server. So I edited the links to the new space and rooms. The old ones still work too! That means you can now also sign up for a Lemmy World matrix account. Instructions in this comment: https://lemmy.world/comment/3443207

Lately we have been dealing with a few abusive members from Feddit.nl and we were unable to get in touch with the instance administrator. Part of the problem is the instance's open registrations which do not require you to enter an e-mail address during signup. This in combination with an inactive admin is a recipe for abuse. We hope this is only temporary but we have to do this to protect our users. Edit: we use fediseer, have a look https://gui.fediseer.com/instances/detail/lemmy.world Edit 2: **We got in touch with the Feddit.nl admin. Email requirements were added to the sign-up process and we're setting up a communication channel. So that means we are federating with Feddit.nl again!**

An overdue blog post about the finances and other news from the .world

Hello everyone, We unfortunately have to close the !lemmyshitpost community for the time being. We have been fighting the CSAM (Child Sexual Assault Material) posts all day but there is nothing we can do because they will just post from another instance since we changed our registration policy. We keep working on a solution, we have a few things in the works but that won't help us now. Thank you for your understanding and apologies to our users, moderators and admins of other instances who had to deal with this. Edit: [@Striker@lemmy.world](https://lemmy.world/u/Striker) the moderator of the affected community made a post apologizing for what happened. But this could not be stopped even with 10 moderators. And if it wasn't his community it would have been another one. And it is clear this could happen on any instance. But we will not give up. We are lucky to have a very dedicated team and we can hopefully make an announcement about what's next very soon. Edit 2: removed that bit about the moderator tools. That came out a bit harsher than how we meant it. It's been a long day and having to deal with this kind of stuff got some of us a bit salty to say the least. Remember we also had to deal with people posting scat not too long ago so this isn't the first time we felt helpless. Anyway, I hope we can announce something more positive soon.

Lemmy.world is temporarily disabling open signups and moving to an application-required signup process, due to ongoing issues with malicious bot accounts. We know this is a major step to take, but we believe that it’s the right one for both us and our community right now. We’re working on a better long-term technical solution to these bots, but that will take time to create, test, and verify that it doesn’t cause any problems with federation and how our users use our site, and we’d rather make sure we get it right than have a site that’s broken. We’re making this change on 28 Aug 2023, and don’t have a specific timeline for how long registrations will require an application, but we will post an update once our new anti-abuse measures are in place and working. Take care, LW Team

Hey everyone! So we've been trying our best to listen to members of the community on how we provide updates and information to you fine folks! To that end, we would like to welcome a new secondary, fedi-friendly avenue, Mastodon. https://mastodon.world/@LemmyWorld We will be posting updates here in ADDITION to our normal [!lemmyworld@lemmy.world](https://lemmy.world/c/lemmyworld) community. As both a supplement to our Discord server and a place for the community to directly interact with us via micro-blogging. We feel this opens up a few neat doors for sure to keep communication open and transparent. See you there 😉 - The LW Team

Hey everyone, so as I'm sure everyone is aware Lemmy.World has been experiencing several outages throughout the last few days. We have been investigating the root cause of these outages but believe that they are related to our current hosting provider (Hetzner) blocking access from ClouldFlare as (we think) they believe that our CDN is a DDoS'er, and is causing these disconnects to our backend server, problematic for sure. We've opened support tickets with our current provider and are awaiting a response. We have no issue with being as transparent as possible with downtime. Anyone that is curious, can feel free to check out https://status.lemmy.world and https://dash.lemmy.world for up to the minute outage information. We are also looking into other fediverse friendly methods of posting status and outage updates In the meantime, we are evaluating alternative hosting options and solutions to provide a high level of reliability to you, our users. Really, we want to say thanks to everyone for soldiering through all our technical growing pains. Cheers - LW Infra Team

Earlier, after review, we blocked and removed several communities that were providing assistance to access copyrighted/pirated material, which is currently not allowed per Rule #1 of our Code of Conduct. The communities that were removed due to this decision were: - !piracy@lemmy.dbzer0.com - !piracy@lemmy.ml - !steamdeckpirates@lemmy.dbzer0.com We took this action to protect lemmy.world, lemmy.world's users, and lemmy.world staff as the material posted in those communities could be problematic for us, because of potential legal issues around copyrighted material and services that provide access to or assistance in obtaining it. This decision is about liability and does not mean we are otherwise hostile to any of these communities or their users. As the Lemmyverse grows and instances get big, precautions may happen. We will keep monitoring the situation closely, and if in the future we deem it safe, we would gladly reallow these communities. The discussions that have happened in various threads on Lemmy make it very clear that removing the communites before we announced our intent to remove them is not the level of transparency the community expects, and that as stewards of this community we need to be extremely transparent before we do this again in the future as well as make sure that we get feedback around what the planned changes are, because lemmy.world is yours as much as it is ours.

Hello there! It has been a while since our last update, but it's about time to address the elephant in the room: downtimes. Lemmy.World has been having multiple downtimes a day for quite a while now. And we want to take the time to address some of the concerns and misconceptions that have been spread in chatrooms, memes and various comments in Lemmy communities. So let's go over some of these misconceptions together. **"Lemmy.World is too big and that is bad for the fediverse".** While one thing is true, we are the biggest Lemmy instance, we are far from the biggest in the Fediverse. If you want actual numbers you can have a look here: https://fedidb.org/network The entire Lemmy fediverse is still in its infancy and even though we don't like to compare ourselves to Reddit it gives you something comparable. The entire amount of Lemmy users on all instances combined is currently 444,876 which is still nothing compared to a medium sized subreddit. There are some points that can be made that it is better to spread the load of users and communities across other instances, but let us make it clear that this is not a technical problem. And even in a decentralised system, there will always be bigger and smaller blocks within; such would be the nature of any platform looking to be shaped by its members.  **"Lemmy.World should close down registrations"** Lemmy.World is being linked in a number of Reddit subreddits and in Lemmy apps. Imagine if new users land here and they have no way to sign up. We have to assume that most new users have no information on how the Fediverse works and making them read a full page of what's what would scare a lot of those people off. They probably wouldn't even take the time to read why registrations would be closed, move on and not join the Fediverse at all. What we want to do, however, is inform the users before they sign up, without closing registrations. The option is already built into Lemmy but only available on Lemmy.ml - so a ticket was created with the development team to make these available to other instance Admins. Here is the post on [Lemmy Github](https://github.com/LemmyNet/lemmy-ui/issues/2051). Which brings us to the third point: **"Lemmy.World can not handle the load, that's why the server is down all the time"** This is simply not true. There are no financial issues to upgrade the hardware, should that be required; but that is not the solution to this problem. The problem is that for a couple of hours every day we are under a DDOS attack. It's a never-ending game of whack-a-mole where we close one attack vector and they'll start using another one. Without going too much into detail and expose too much, there are some very 'expensive' sql queries in Lemmy - actions or features that take up seconds instead of milliseconds to execute. And by by executing them by the thousand a minute you can overload the database server. *So who is attacking us?* One thing that is clear is that those responsible of these attacks know the ins and outs of Lemmy. They know which database requests are the most taxing and they are always quick to find another as soon as we close one off. That's one of the only things we know for sure about our attackers. Being the biggest instance and having defederated with a couple of instances has made us a target.   **"Why do they need another sysop who works for free"** Everyone involved with LW works as a volunteer. The money that is donated goes to operational costs only - so hardware and infrastructure. And while we understand that working as a volunteer is not for everyone, nobody is forcing anyone to do anything. As a volunteer you decide how much of your free time you are willing to spend on this project, a service that is also being provided for free. We will leave this thread pinned locally for a while and we will try to reply to genuine questions or concerns as soon as we can.

Edit: Upgrade finished We will upgrade lemmy.world to v0.18.4 tomorrow at 20:00 UTC+2 ([Check what this isn in your timezone](https://www.timeanddate.com/worldclock/fixedtime.html?msg=Lemmy.world+upgrade+to+lemmy+18.4&iso=20230810T20&p1=16). Expect the site to be down for a few minutes. Release notes for 0.18.4 can be found here: https://github.com/LemmyNet/lemmy/blob/main/RELEASES.md

We added an extra UI for our users. Photon by Xylight is an interface with a sleek, modern look and has all the bells and whistles you would need. Moderator tools included! You can access the UI from https://photon.lemmy.world. Visit Photon's project page on [github](https://github.com/Xyphyn/photon) or get in touch with the developer in the [!photon@lemmy.xylight.dev](https://lemmy.xylight.dev/c/photon) community. If you want to use photon on other instances you can do so from https://phtn.app. Update: [@Xylight](https://lemmy.xylight.dev/u/Xylight) has set up a donation link so if you like photon as much as I do, show him some love! https://www.buymeacoffee.com/xylight

We've launced a public discord server at https://discord.gg/lemmyworld The reason for why we choose discord is because it was easier to moderate and manage than other options. Besides we also had a discord-bot guru by the name of Rooki who created a neat bot that allowed us to connect/verify discord users to their Lemmy World account. So if you are a moderator and you are looking for some extra hands to moderate your community, or if you need to contact anyone from the LW team, this is the most efficient way to do it! Come have a look!

Lemmy.World is looking for 4 new Systems operators to help with our growing community. Volunteers will assist our existing systems team with monitoring and maintenance. We’re ideally looking for chill folks that want to give back to their community and work on our back-end infrastructure. Must have 4+ years of professional experience working in systems administration. We are not looking for junior admins at this time. Please keep in mind that, while this is a volunteer gig, we would ask you to be able to help at least 5-10 hours a week. We also understand this is a hobby and that family and work comes first. Applicants must be okay with providing their CV and/or LinkedIn profile AND sitting for a video interview. This is due to the sensitivity of the infrastructure you will have access to. We are an international team that works from both North America EST time (-4) and Europe CEST (+2) so we would ask that candidates be flexible with their availability. If you are in AEST (+10) or JST (+9) please let us know, as we are looking for at least one Sysadmin to help out during our overnight. You may be asked to participate in an on-call pool. Please keep in mind that this is a round-robin style pool, so it's alright if you're busy as it will just move along the chain. If you're interested and want to apply, click [here](https://docs.google.com/forms/d/e/1FAIpQLScV4qVgpBeswsc4RdBkjdN1uhkf3PBz7HwrDH0z-PPj4SbzkA/viewform?usp=sf_link).

We recently received a message from a concerned Rammy user regarding their instance not having an active admin team. We have made attempts to contact the Rammy admins, which other instance admins have tried as well, to determine their current status. Due to their admins being absent and their unmoderated content growing in numbers, we will defederate from Rammy. If and when this situation changes, we will be happy to reevaluate our approach. It should be noted that **any** instances that have abandoned admin teams will be defederated.

There was another attack going on (as you might have noticed). We're working on a fix. In the meantime, we've blocked the listing of comments, so we at least aren't down, but it did break comments. Hope to have a fix in the next hour. Stay tuned! **Update** OK we've implemented a fix, again many thanks to [@sunaurus@lemm.ee](https://lemm.ee/u/sunaurus) for his assistance. This will prevent the outages we've seen last couple of days. Let's see what they will come up with next...

A few days ago I saw some cool [JoinLemmy stickers](https://www.etsy.com/listing/1532398821/place-2023sticker-packsmotivational?click_key=202669597a80d6f60b5afb9b21260113b41e3b90%3A1532398821&click_sum=dc8e01d4&ref=shop_home_active_33) created by [@cheeseblintzes@lemmy.world](https://lemmy.world/u/cheeseblintzes) . I asked her if she could also create lemmy.world stickers, and she did! You can see and order them [here](https://www.etsy.com/listing/1535729033/lemmyworld-stickers-motivational), also check the [other cool stickers in her shop](https://www.etsy.com/shop/thespookyfarmer). Thanks for creating them!

**Update**: The comments from this post will not be removed as to preserve the discussion around the announcement. Any continued discussions outside of this thread that violate server rules will be removed. We feel that everyone that has an opinion, and wanted to vent, has been heard. ————- **Original post:** Yesterday, we received information about the planned federation by Hexbear. The announcement thread can be found here: https://www.hexbear.net/post/280770. After reviewing the thread and the comments, it became evident that allowing Hexbear to federate would violate our rules. Our code of conduct and server rules can be found [here](https://lemmy.world/legal). The announcement included several concerning statements, as highlighted below: - “Please try to keep the dirtbag lib-dunking to hexbear itself. Do not follow the Chapo Rules of Posting, instead try to engage utilizing informed rhetoric with sources to **dismantle western propaganda**. Posting the western atrocity propaganda and pig poop balls is hilarious but will pretty quickly get you banned and if enough of us do it defederated.” - “The West's role in the world, through organizations such as NATO, the IMF, and the World Bank - among many others - are deeply harmful to the billions of people living both inside and outside of their imperial core.” - “These organizations constitute the modern imperial order, with the United States at its heart - we are not fooled by the term "rules-based international order." **It is in the Left's interest for these organizations to be demolished**. When and how this will occur, and what precisely comes after, is the cause of great debate and discussion on this site, but it is necessary for a better world.” The rhetoric and goal of Hexbar are clear based on their announcement: to "dismantle western propaganda" and "demolish organizations such as NATO” shows that Hexbar has no intention of "respecting the rules of the community instance in which they are posting/commenting.” It’s to push their beliefs and ideology. In addition, several comments from a Hexbear admin, demonstrate that instance rules will not be respected. Here are some examples: >“I can assure you there will be no lemmygrad brigades, that energy would be better funneled into the current war against liberalism on the wider fediverse.” >“All loyal, honest, active and upright Communists must unite to oppose the liberal tendencies shown by certain people among us, and set them on the right path. This is one of the tasks on our ideological front.” - https://lemmy.world/comment/121850 - https://lemmy.world/comment/1487168 - https://lemmy.world/comment/1476084 - https://lemmy.world/comment/171595 - https://www.hexbear.net/comment/3648500 Overall community comments: - https://www.hexbear.net/comment/3526128 - https://www.hexbear.net/comment/3526086 - https://www.hexbear.net/comment/3652828 To clarify, for those who have inquired about why Hexbear versus Lemmygrad, it should be noted that we are currently exploring the possibility of defederating from Lemmygrad as well based on similar comments Hexbear has made. - https://lemmygrad.ml/post/158656 - https://lemmygrad.ml/comment/882559 - https://lemmygrad.ml/comment/540170 - https://lemmygrad.ml/comment/446529 Defederation should only be considered as a last resort. However, based on their comments and behavior, no positive outcomes can be expected. We made the decision to preemptively defederate from Hexbear for these reasons. While we understand that not everyone may agree with our decision, we believe it is important to prioritize the best interests of our community.

Lemmy.world has been down between 02:00 UTC and 05:45 UTC. This was caused by the database spiking to 100% cpu (all 32 cores/64 threads!) due to inefficient queries been fired to the db very often. I’ve collected the logs and we’ll be checking how to prevent this. (And what caused this)

**Update** The upgrade was done, DB migrations took around 5 minutes. We'll keep an eye out for (new) issues but for now it seems to be OK. **Original message** We will upgrade lemmy.world to 0.18.3 today at 20:00 UTC+2 ([Check what this isn in your timezone](https://www.timeanddate.com/worldclock/fixedtime.html?msg=Lemmy.world+upgrade+to+lemmy+18.3&iso=20230730T20&p1=16)). Expect the site to be down for a few minutes. ""Edit"" I was warned it could be more than a few minutes. The database update might even take 30 minutes or longer. Release notes for 0.18.3 can be found here: https://github.com/LemmyNet/lemmy/blob/main/RELEASES.md (This is unrelated to the downtimes we experienced lately, those are caused by attacks that we're still looking into mitigating. Sorry for those)

We just added Alexandrite to the server, it's an alternative desktop UI for Lemmy created by Sheodox who worked tirelessly to make the necessary changes to we could host it ourselves here. So go to **https://a.lemmy.world** and have a look! He continues to update it constantly, you can follow the development on his [github](https://github.com/sheodox/alexandrite) page or in his [community](https://lemmy.world/c/alexandrite). If you like what you see and want to support him, why not [buy him a coffee](https://www.buymeacoffee.com/sheodox)? :) For those who don't have Lemmy World as their home instance and want to use Alexandrite, either ask your instance admins to add it or go to https://alexandrite.app! Edit: I should probably have mentioned that Alexandrite is meant for desktop!

Today, like the past few days, we have had some downtime. Apparently some script kids are enjoying themselves by targeting our server (and others). Sorry for the inconvenience. Most of these 'attacks' are targeted at the database, but some are more ddos-like and can be mitigated by using a CDN. Some other Lemmy servers are using Cloudflare, so we know that works. Therefore we have chosen Cloudflare as CDN / DDOS protection platform for now. We will look into other options, but we needed something to be implemented asap. For the other attacks, we are using them to investigate and implement measures like rate limiting etc.

As requested by some users: 'old' style now accessible via https://old.lemmy.world Code can be found here: https://github.com/rystaf/mlmym , created by [Ryan](https://github.com/rystaf) (Is he here?) (Yes he appears to be! [@nnrx@sh.itjust.works](https://sh.itjust.works/u/nnrx) ! Thanks for this awesome front-end!)

We have received numerous reports from users about the closure of the c/android community. While we fully support the original community owners' decision to move to another instance, it will eventually be necessary to open up the community on Lemmy.world. The beauty of the fediverse is that multiple communities on the same subject can exist in different instances. However, if you can no longer moderate a community on Lemmy for any reason, it is important to pass it on to individuals who are willing and able to do so. To ensure the best interests of our instance members, it is necessary to establish boundaries. Holding onto a community name cannot be a permanent arrangement. It's important to consider our users' ongoing interest in the community if they wish it to continue. While we acknowledge the objective of consolidating communities, current community members ultimately decide whether they wish to join the new community at lemdro.id. To ensure a smooth transition, we will keep the community locked for another week, providing ample time to inform the active user base about the move to the new instance at https://lemmy.world/c/android@lemdro.id.

I blogged about what happened in June, and the financial overview.

It's always the small things you overlook... The `docker-compose.yml` I copied from somewhere when setting up lemmy.world apparently was missing the external network for the pictrs container.. So pictrs was working, as long as it got the images via Lemmy. Getting the images via URL didn't work... Looks like it's working now. Looks a whole lot better with all the images :-) **Edit** For existing posts: Edit the post, then Save. (No need to change anything). This also fetches the image.

(Duplicate post :-) see https://lemmy.world/post/1375042)

The lemmy.world instance was just updated to version 0.18.2. The login issues that were being reported (for example, [here](https://lemmy.world/post/1364490)) are now resolved. For release notes: https://lemmy.world/post/1339018 Edit for those who still have issues logging in: - When using a browser: clear cookies and cache - When using an app: remove your lemmy.world account and add it again.

We've installed Voyager and it's reachable at https://m.lemmy.world, you can browse Lemmy, and login there (also if your account isn't on lemmy.world) **PS** Thanks go out to @stux[@stux@geddit.social](https://geddit.social/u/stux) , he came up with the idea (see https://m.geddit.social).

While I was asleep, apparently the site was hacked. Luckily, (big) part of the lemmy.world team is in US, and some early birds in EU also helped mitigate this. As I am told, this was the issue: - There is an vulnerability which was exploited - Several people had their JWT cookies leaked, including at least one admin - Attackers started changing site settings and posting fake announcements etc Our mitigations: - We removed the vulnerability - Deleted all comments and private messages that contained the exploit - Rotated JWT secret which invalidated all existing cookies The vulnerability will be fixed by the Lemmy devs. [Details of the vulnerability are here](https://lemmy.world/post/1293336) Many thanks for all that helped, and sorry for any inconvenience caused! **Update** While we believe the admins accounts were what they were after, it could be that other users accounts were compromised. Your cookie could have been 'stolen' and the hacker could have had access to your account, creating posts and comments under your name, and accessing/changing your settings (which shows your e-mail). For this, you would have had to be using lemmy.world at that time, and load a page that had the vulnerability in it.