You can read the official release annoucements here.

This is mainly a security release, but it fixes some important flaws in the frontend code. Thus while there are not many changes from a user perspective, it is still a quite significant improvement 👍

Search isn't showing me anything for the obvious terms.

I'd like a climbing-specific sublemmy(?), ideally, but I appreciate that's a bit niche! Just somewhere for chatting about general fitness would be cool. I'd start one myself, but it doesn't seem very solar-punky.

As you might have heard several Lemmy instances have been attacked via a security vulnerability in the browser frontend related to custom emoji.

While SLRPNK was vulnerable to it, we seem to have not been actively targeted and I took the instance down as a precaution as soon as I learned about it.

I have applied all the currently known mitigations, which means that everyone got logged out of their account and needs to log back in manually.

As of writing this the API is working again and can be used with apps like Jerboa safely.

I am still contemplating if I want to re-enable the web frontend now or wait for a release that fixes the issues found.

Edit: the main issue was fixed and I restarted the web ui with it.

cross-posted from: https://sh.itjust.works/post/923025

lemmy.world is a victim of an XSS attack right now and the hacker simply injected a JavaScript redirection into the sidebar.

It appears the Lemmy backend does not escape HTML in the main sidebar. Not sure if this is also true for community sidebars.

I updated to Lemmy version 0.18.1 yesterday which seems to have resolved quite a few issues in the UI and also made the site overall quite a bit more responsive. Very nice team work of all the people involved in bug fixing and performance optimisation of Lemmy 🥰

Edit: it might be necessary to force-reload your browser (Press CTRL+F5) to get the new Javascript files properly.

I also added the Hanubeki themes and enabled the mint version as the default. This is not meant as the final theme here, but just a quick change to have something other than the somewhat boring Lemmy default. But maybe people like it anyway.

I also played around with the new custom emojis a bit and they seem to mostly work.

For exampe:

So I guess we could start collecting some nice ones to be added for everyone to use.

Last but not least I pre-emtively blocked threads.net (the new Facebook service) as discussed here.

I just saw that lemmy.ml has pre-emptively defederated from threads. Are there any plans to do that here? I personally want nothing to do with Meta/Facebook, and I'm sure that's not an unpopular opinion around here.

edit: y'all, please pay attention to where you are when coming from all.

edit again: kbin really ought to make a post's home instance more clear.

Is it possible to use this instance in a dark mode when browsing from desktop?

I've been having issues today with the front page not loading content. Refreshing works sometimes, but not always. I've also had some posts show a loading icon indefinitely. When I leave and come back, they usually load. I'm not sure why, but I figure sharing this will help with troubleshooting.

Is there any bug submission process I should follow aside from posting in !meta?

Please join me to discuss how we can implement 15 minutes cities, experiments that are occurring on this front, and other topics that can help make this a reality.

when I’m logged in, a lot of communities are empty - but i can see loads of posts when logged out. does anyone know what the issue is?

I'm trying to browse !solarpunk@slrpnk.net from @lemmynsfw and it's not seeing most of the posted content. It sees no active users and only two posts (plus one I posted just now to see if I was possible to post).

On !meta@slrpnk.net I see just one post. I'm struggling to figure out what could cause this. Is this a defect, or possibly a setting based on the instance from which I'm connecting? I would've found it more understandable to be able to view nothing, but why these two particular posts and nothing else? Thanks for your help.

Hi! I'm a mod at r/solarpunk on reddit, and we're looking for a better platform on which to host the community. I've been browsing slrpnk.net and I really like it.

I'd like to start encouraging early adopters to register an account here. Any migration would certainly be gradual, but before I do anything I wanted to check and see how the current admin and other users feel about this plan.

How's the instance running? What rate do you think this instance could take on new users? How is your moderation capacity at the moment?

So for instance I'm interested in all communities in the aussie.zone instance, and I can't find a way to use the search function for that. I've tried searching for communities using the search string "aussie.zone" and I get nothing.

Then in the screenshot shown I tried searching for communities with just the string "aussie" and I got "Aussie Environment@aussie.zone", which is strange because all the community names there contain the substring "aussie" and I'd expect this search to find them.

Is this a bug? Am I doing it wrong? It would be nice if there was a way to browse all communities in a given instance easily, because when I find an instance I like, I want to be able to go through and find the communities I like just as if I was browsing local communities on this instance.

Also the copy-paste method, which is still extremely clunky, is broken for me. I it just has [email protection] which when clicked does nothing useful. I've tried the Lemmy Link addon but not only is that also a very slow and clunky method which still doesn't let me browse by server, it keeps slowing down firefox so I've had to uninstall it.

Others are not broken, such as !twoxchromosomes@slrpnk.net. .

It's not a general functionality problem with subscribing or blocking. If you go to any thread in a community, the buttons work from there. It also works to sub from the community list.

Hello to all new members. I've just created a Lunarpunk community for the darker / nightime aspects of Solarpunk that can be found at the link above or c/lunar_punk

https://slrpnk.net/c/lunar_punk

You might have noticed the interface having changed a bit. This is the new version 0.18 of Lemmy that changed a lot of the internals. So expect there to be some new bugs as well.

I am still ironing out some problems with it and it seems like the version of the Jerboa Android app from F-droid isn't fully compatible yet. Either wait for the update or install the latest .apk from the developer directly. Edit: the F-droid version works now.

I also re-enabled down-votes. The poll was less clear than I hoped, but there was a small majority for enabling down-votes in the end. But I will monitor the situation and if you feel there is negative vote-brigading going on, please use the report function.

Next on the plan is to look into custom themes to make this instance's look a bit more Solarpunkish.

I am also working on some hardware changes for the server. Basically I will transfer this instance to a smaller server that I can optimize better for the database use of Lemmy. This will also allow to quickly turn this smaller machine into a dedicated database server should the need for scaling up due to a new influx of users arise.

Currently there are 2-3 sign-ups per day (real users, not bots) and we crossed the 500 members earlier this week. So overall things are relatively calm and we see a slow, but nicely organic growth 😊

That seemed like a pretty valuable feature on reddit, and it seems even more valuable given that there can multiple communities with the same name on different servers.

So is it possible to crosspost?

or should I do it manually before posting photos I take for privacy?

So I'm trying to subscribe to the fountainpens community at sopilu.xyz and it seems I'm incapable of doing so.

I think the problem is that the name of their community in their own instance is not "/c/fountainpens", but "/c/fountainpens@sopuli.xyz", as you can see from their instance here, so when I look for "!fountainpens@sopuli.xyz" in our search bar, I get nothing. Even if I try typing on the browser searchbar "https://slrpnk.net/c/fountainpens@sopuli.xyz" or "https://slrpnk.net/c/fountainpens@sopuli.xyz@sopuli.xyz", I get nothing.

Am I making a mistake somewhere? And if not, is there a way to make this work, or do I have to have an account at sopuli.xyz to post in this community?

I've noticed there are some communities that aren't showing up from other instances, even though we are federated with them. Is this intentional? or just lemmy being lemmy. (specifically I was trying to join some sewing based communities so nothing I think would have been banned from here)

As you might have noticed, there is currently no option to down-vote posts here.

When Lemmy was much smaller there were some bad faith actors organizing down-votes on posts they didn't like and because a few down-votes already meant a lot this was quite effective (from their perspective) to shape the discourse to their liking.

These days our instance is bigger and we have also blocked the worst offenders (and will continue to do so), so I am wondering if we should re-enable down-votes?

Personally I think they are useful in some cases, but ideally the down-votes would not federate to other instances. This option however is not available in Lemmy, so it is either on or off.

I will make three comments below this, one you can up-vote if you are in favour of enabling down-votes again, one if you are against it and one if you abstain from making a decision on this.

Note to non-slrpnk.net members: please don't up-vote any of the below comments I make.

I'll leave this vote open for some days... and anyway: no decision is final and if it becomes a problem again it is easy to disable it.

Edit: If you have for some reason a strong objection and want to veto this, please comment below.

Edit: I enabled down-votes with the upgrade to Lemmy version 0.18. At the time of writing this it is 45 votes for enabling down-votes, 32 against enabling them, and 10 abstentions. Lets see how it goes.

!antidepressants

in case the link is not working https://slrpnk.net/c/antidepressants

I subscribed to !news at . . . well it probably does not matter. I receive the news the moderators are posting there, but also every single boosted comment anyone makes on the news stories as separate inane postings on my mastodon feed(!) That can't be the way to run a railroad! Can comment reposting be disabled by moderators or can it be suppressed by users? Because othewise, the news feed subscription is a poison pill to my fediverse-based feed.

Is following a lemmy user on a remote instance or any instance from ones lemmy account a thing?

Might be nice to give this instance more Solarpunk like colors. I am currently a bit short on time to work on this myself, but contributions are welcome.

A nice banner image would be cool as well.

The documentation on theming is not very detailed, but it seems to be mostly just Bootstrap 4: https://join-lemmy.org/docs/en/administration/theming.html (Edit: that docu might be outdated and it is actually Bootstrap 5 now)

An example for a instance with a custom theme is here: https://compuverse.uk/