Indeed, Ruby had a couple of severe vulnerabilities in its regex engine that could result in remote code execution. It particularly impacted gitlab instances, leading to an attempted compromise on alpine linux's instance: alpinelinux.org/posts/GitLab...

Show Post

Wouldn't be from the PHP exploit because the AO3 runs on Ruby on Rails, not PHP. But there have been a LOT of new exploits discovered this month. en.wikipedia.org/wiki/Black_O...

Show Post

Not at all coincidental. There is an unprecedented amount of hacks going on throughout the world right now. If you use the same password across multiple accounts on ANY website, you should change them to strong, unique passwords ASAP

Show Post

I'm SUPER embarassed but my banking password was similar to my ao3 PW (not the same!), and I just got notifications that someone was trying to log in. Ofc, I changed my password, but everyone, please be careful! This may have been coincidental, but just in case!

Show Post

Thank you for all your hard work, and thank you for taking our security seriously! We appreciate all you do, and will be patient and understanding as possible. But seriously, if money would help, even if it's just buying the volunteers coffee and dinner, drop us a donation link, okay?

Show Post