Most of us are Reddit refugees, and probably clicking more random links than we ever did before on websites we’ve never seen before. This whole experience feels like the old internet, but also throws up insane red flags with a modern internet perspective. What are the cybersecurity weaknesses we should all be looking for, and what are the best practices?

Here’s my reason for posting this. As I search for new communities across instances to follow, I sometimes end up clicking a link and I’m no longer logged in. In the corner, that could be a Sign In link or it could be phishing. It’s likely due to me not understanding how to properly navigate this system, but there’s nothing stopping someone from setting up a sight like this as far as I know.

Thoughts?

  • ShittyKopper [they/them]@lemmy.w.on-t.work
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    1 year ago

    There seems to be a fair bit of admins who just run the Lemmy Ansible installer expecting to magically have an instance, and having no idea what they’re getting themselves into.

    I wonder how many small Lemmy instances exist right now that have SSH password auth (or god forbid root login of any kind) enabled.

    • Scientician@waveform.socialOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      This is my fear. A huge wave of newbs (myself included) all out here trying to figure it out. I feels like a hacker playground.

      Does DEFCON have a fediverse hacking competition this year?