There has been a shitty incident where someone intentionally posted CSAM to a Lemmy community that unfortunately someone in our instance was subscribed to. Due to federation, the images might have been copied over to our instance storage.

Because of that I’ve taken the following measures until we understand the problem better:

  1. I’ve defederated from lemmy.world and sh.itjust.works.
  2. I’ve deleted all images uploaded since 2023-08-27 00:00:00 GMT.
  3. I’ve disabled the image server.

I’ll post updates when I have them. Thanks for understanding.

  • ndguardian@lemmy.studio
    link
    fedilink
    English
    arrow-up
    8
    ·
    10 months ago

    Yeah, I was reading some posts about that. Fortunately I had work so I happened to not be online when all that was going on. Extremely unfortunate, but you do what you gotta do. Hopefully the assholes that did that get the boot and worse.

  • pnd@lemmy.studio
    link
    fedilink
    English
    arrow-up
    5
    ·
    10 months ago

    I didn’t see this post and was wondering why my subscribed communities are “dead”. Do you plan to refederate with lemmy.world at some point?

    • Beto@lemmy.studioOPM
      link
      fedilink
      English
      arrow-up
      6
      ·
      10 months ago

      That’s the plan! From what I understand there are some upcoming changes to pict-rs in 0.5 that should prevent this from happening (images getting copied to our instance). I’m just waiting for that. Sorry for the trouble, but we had another similar incident recently.

      • MistakenBear32@lemmy.studio
        link
        fedilink
        English
        arrow-up
        0
        ·
        7 months ago

        Maybe I’m mistaken but my understanding at the time was that CSAM wasn’t originally posted on lemmy.world but rather federated to lemmy.world and that they’d also taken action on it.

        Still waiting on that pict-rs update to refederate?

        • Beto@lemmy.studioOPM
          link
          fedilink
          English
          arrow-up
          0
          ·
          7 months ago

          From what I understood, since we had people on lemmy.studio that subscribed to the instances in lemmy.world where the CSAM was posted, if any of those people saw the posts accidentally the images would be copied automatically to lemmy.studio. After that incident there were a few more where people where posting CSAM to lemmy.world, which is why I decided to defederate.

          Lemy 0.19 is coming out soon, when I upgrade I’ll check what the status of pict-rs and if we can federate again.