Lemmy.world is compromised - eviltoast

They been redirecting to lemon party and some weird video. Do not go to the website. This is the admin that been hacked:

EDIT: lemmy.blahaj.zone also compromised!

  • elscallr@kbin.social
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    Absolutely you can do no phone/email and MFA. It’s a TOTP thing like Google or Microsoft authenticator. The service doing the authentication has no idea how it’s done on the other side, it just makes sure the codes match.