Hi db0, if I could make an additional suggestion.
Add detection of additional content appended or attached to media files. Pict-rs does not reprocess all media types on upload and it’s not hard to attach an entire .zip file or other media within an image (https://wiki.linuxquestions.org/wiki/Embed_a_zip_file_into_an_image)
Content is up but users are down. Take that as you will.
I’ve ruled out a good amount of leads but I have not had contact with the admin yet :(
These aren’t demands, but I can definitely see how they can come off that way. These are industry standard post cybersecurity incident review questions by defined by NIST (NIST SP 800-61 Rev 2 Section 3.4.1) slightly rephrased.
To add context to this. What I’ve been told is that a community running on a lemmy fork with 5 digit users had used this code for a while and backported(?) the code upstream when they federated back. I guessing there was an assumption of safety as they had been using the custom emojis code for quite a while without it being exploited.
While this is definitely a discussion to be had (I’ve created a few accounts on different instances). Posting that here is just adding onto the drama.
Yeah, specifically why I mentioned “affordable”.
They recently blocked a single instance due to the other instance breaking the law in the country vlemmy is hosted. I’m hoping all of this is just a database cleanup gone awry, I would have hoped @pyarra@vlemmy.net would have made a comment SOMEWHERE.
Ah, the u/spez r/programming approach. A classic.
Jokes on them. I already know what’s in my DMs. /j
Epoxy hotdog guy returns to reddit after a 5 year hiatus:
As @Starbuck@lemmy.world stated. They’re still valid image files, they just have extra data.