where were you when universal activitypub exploit

@julia making alan wake fortnite image edit

@julia

Extreme work day my patch will be delayed a few hours

@julia IN BED OH NO

@julia universal? what was the exploit? akkoma did not get an update

@noisytoot can’t disclose yet

idk if akkoma is affected

*oma isn’t real

@julia activitypub is kill

@noisytoot @julia im pretty sure akkoma is ok

@fiore @noisytoot @julia Only things that implement JSON-LD are affected, Pleroma doesn't so it and forks are fine.

@noisytoot I’ll just point to https://github.com/mastodon/mastodon/releases/tag/v4.5.10

Fix Linked-Data Signature bypass through JSON-LD graph restructuring features

@julia

@julia On Mastodon, where apparently we are apparently safe from this exploit and no admin action is necessary. /s

@julia at jsonld factory

@julia I was eat din ..

@julia at least it's not the linux kernel this time