Our server went down last night, after we received some messages from our provider that someone had uploaded illegal pornographic photos.
They stated that they had contacted us before ( they didn’t ) which would give us opportunity to remove them before the site going down.
The user and community where these pictures were located, we’d banned about a month ago, and it wouldn’t be possible to view them from lemmy itself, but we have yet to code purging dangling pictrs images automatically with user and community deletion, obviously now a priority for us.
We were able to trace things down and delete them, and bring the site up this morning.
Again sry for the site being down. If you find any pornographic materials on lemmy ( against our site rules ), let us know so we can remove them ASAP and keep lemmy running.
Just wanted to point out that Cloudflare has a CSAM feature that you can voluntarily turn on. It will search and automatically flag any child abuse content it finds and let you know in a timely way, so you can take care of it early. Also, it blocks anyone from accessing it of course.
Figured since everything here is publicly readable anyways, the data privacy part won’t be as much of a concern.
Please don’t mitm lemmy with cloudflare if possible! They wouldn’t only be able to see public stuff but also anyone’s browsing behaviour and passwords. Also they could inject malicious javascript and (non-javascript) csrf exploits.
Between the fire of the servers in France and this… That’s really bad luck, thanks for letting us know anyway, I was worried and kept reloading the page with F5 :')
Just wanted to point out that Cloudflare has a CSAM feature that you can voluntarily turn on. It will search and automatically flag any child abuse content it finds and let you know in a timely way, so you can take care of it early. Also, it blocks anyone from accessing it of course.
Figured since everything here is publicly readable anyways, the data privacy part won’t be as much of a concern.
Please don’t mitm lemmy with cloudflare if possible! They wouldn’t only be able to see public stuff but also anyone’s browsing behaviour and passwords. Also they could inject malicious javascript and (non-javascript) csrf exploits.
Between the fire of the servers in France and this… That’s really bad luck, thanks for letting us know anyway, I was worried and kept reloading the page with F5 :')