me forcing crypto on Matty is basically rape so I'm going to rape him
anime graf mays 🛰️🪐
@graf@nerv.st
timeline terrorist
alt of @graf@poa.st
alt of @graf@poa.st
Posts
Latest notes
No posts yet.
waiting for the rest of our forensic mirroring on the main hardware then we will unrack the loaner and put in our new hardware and start assembling. ETA is still at least a week out but progress is being made
database is fully restored and intact to 2 hours prior to the attack so anyone who was deactivated during this time will already be reinstated but we are dropping the user tokens and writing a site-wide password reset into pleroma. Will submit a patch or PR upstream
the nitter GitHub has been unarchived and dozens of new instances have popped up. somebody is working on page with all the new ones
https://github.com/zedeus/nitter
https://github.com/zedeus/nitter
not going into details but the nitter project will be unarchived this morning
this isn't bad. considering
also @matty I'll send you some scratch for putting up with our users in a couple days. thank you friend
Tell Jean to get out of my notifications. I made the big leagues
I want to put a commercial style "we'll be right back" page on poast but I don't have time to make a static html page. Which one of you wants to do it?
need scrolling text and shit too bruv
>walk in my house
>hear a chirp
>norstrealist didn't notice or hear it
brothers
>hear a chirp
>norstrealist didn't notice or hear it
brothers
when you give me 500 dollars
yes we are aware and are working on this breach but from a cursory glance it looks like a race condition was exploited in the distro shipped version of openssh
Looks like they might have tried to wipe or zero out the root NVMe as the partition table is damaged, may be able to recover it otherwise I will just take this time to put us on the new hardware we bought but havent moved to yet
@mint yeah and I plan to drop all tokens as well for users
based on auth logs, api and lack of traffic anomalies in the last 14 days, no database information was exfiltrated. looks like just a public defacement specifically targetting me
@kirby @pwm @subnetter you can't use 2FA with adminFE so with shell access they can request a password reset via a mix task and log in on my account.
@kirby @pwm @mint @subnetter they changed the IPMI credentials on the hardware, they had root access to that server
@mint @pwm @kirby @subnetter pleroma's main box. they likely got the ssh info from shodan because it has an rDNS entry, it was not running on any IP post was federating to/from or hosting on