As an enjoyer of puns, I agree

I don’t buy cheap shit, stop assuming man. I have never met someone with such a chip on their shoulder Get help

So based on a subset of people who are entitled you are tarring everybody in existence with the same brush. Affordability, cost of living and wages are a whole other fucking issue related to CEO greed. Which is out of the scope of the discussion. The fact you are so bitter about this means it’s probably time to find a new job lmao

Are you serious? Where did I mention buying things cheap? That’s a funny looking straw man you built from nothing. Literal premium flagship phones like Apple/Samsung have planned obsolescence It isn’t about buying a cheap product when a lot of busineses follow such shitty practices

Why are you blaming the consumer for a problem businesses have created. Planned obsolescence, doesn’t matter how many $$$$ you put into a product. It has a shelf life. Especially with more tech

Even if they could invent self-repairing appliances/phones they wouldn’t do it… Because then they couldn’t sell you new thing

Hopefully, Since thread is the new cool thing I hope it survives long enough to do so

It’s the best and worst thing to happen to the internet.

Best because - Twitter is a toxic site, with toxic people and a system that encourages ragebaiting means it breeds it.

Worst because - These negative people need somewhere to go… And it will only force them onto alternatives and fester in new places. Potentially here.

Clicking the image isn’t the issue, scrolling by it will nab your Auth tokens. Resetting your password will reset the Auth tokens protecting your account. A sign out everywhere button would fix it but that isn’t an option yet. It really needs to be.

I used Firefox… So I definitely reset my password. Thing is I do not see an option for Lemmy where you can “sign out everywhere” which is the counter to Auth token stealing.

So I had to change it so that the Auth token would expire. Whilst I am not an admin I won’t take the chance. It could compromise other users and I do not want to take that risk.

That’s even worse, if Lemmy has a vulnerability like that it needs to get fixed ASAP… Also if that code actually works, I am going to have to secure my account.

Some information I have posted to Lemmy.World:

I am not a super code-literate person so bare with me on this… But. Still please becareful. There appears to be a vulnerability.

Users are posting images like the following:

https://imgur.com/a/RS4iAeI

And inside hidden is JavaScript code that when executed can take cookie information and send it to a URL address.

Among other things. At this time if you see an image please click the icon circled before clicking the link. DO NOT CLICK THE IMAGE. If you see anything suspicious, please report it immediately. It is better a false report than a missed one.

I have seen multiple posts by these people during the attack. It is most certainly related to JS.

As an Ace, I was more confused lol