There has been a shitty incident where someone intentionally posted CSAM to a Lemmy community that unfortunately someone in our instance was subscribed to. Due to federation, the images might have been copied over to our instance storage.
Because of that I’ve taken the following measures until we understand the problem better:
- I’ve defederated from lemmy.world and sh.itjust.works.
- I’ve deleted all images uploaded since 2023-08-27 00:00:00 GMT.
- I’ve disabled the image server.
I’ll post updates when I have them. Thanks for understanding.
That’s the plan! From what I understand there are some upcoming changes to pict-rs in 0.5 that should prevent this from happening (images getting copied to our instance). I’m just waiting for that. Sorry for the trouble, but we had another similar incident recently.
Maybe I’m mistaken but my understanding at the time was that CSAM wasn’t originally posted on lemmy.world but rather federated to lemmy.world and that they’d also taken action on it.
Still waiting on that pict-rs update to refederate?
From what I understood, since we had people on lemmy.studio that subscribed to the instances in lemmy.world where the CSAM was posted, if any of those people saw the posts accidentally the images would be copied automatically to lemmy.studio. After that incident there were a few more where people where posting CSAM to lemmy.world, which is why I decided to defederate.
Lemy 0.19 is coming out soon, when I upgrade I’ll check what the status of pict-rs and if we can federate again.
Right on… Was just curious.
Thanks for the reply.