Conversation

where were you when universal activitypub exploit

9
4
2
@julia making alan wake fortnite image edit
0
1
0

@julia

Extreme work day my patch will be delayed a few hours

0
1
0
@julia universal? what was the exploit? akkoma did not get an update
2
0
0

@noisytoot can’t disclose yet

idk if akkoma is affected

*oma isn’t real

1
0
1
@fiore @noisytoot @julia Only things that implement JSON-LD are affected, Pleroma doesn't so it and forks are fine.
0
0
2

@noisytoot I’ll just point to https://github.com/mastodon/mastodon/releases/tag/v4.5.10

Fix Linked-Data Signature bypass through JSON-LD graph restructuring features

@julia

0
0
0

@julia On Mastodon, where apparently we are apparently safe from this exploit and no admin action is necessary. neobot_this_is_fine /s

0
0
0

@julia at least it's not the linux kernel this time

0
0
0