Very, seems like great work.

First - really good summary and sounds like everyone is working hard.

Cross posting the below comment.

Under GDPR if you have had a data breach you have a legal obligation to assess whether you need to report it and you must make the report within 72 hours of discovering the breach.

There are other types of reportable breaches too, I only mention data as it sounds most likely. You may or may not be subject to PECR which may also have been breached although less likely. I don’t really have enough familiarity with the regulation to discuss that one.

If you are not sure if there has been a breach you may also need to discuss it with the relevant body or make a report.

Please can you update what action you have taken regarding this and if the incident was reportable or not and the reasons why. Edit - from that new information, it sounds like this is a reportable breach.

For a full understanding, it would be good to know if you had 2FA enabled on the compromised account particularly as it had admin privileges and if so how 2FA was circumvented with this exploit.

It would also be good to know what measures you have in place to prevent the same or other malicious attempts on your Open Collective and Patreon accounts as issues with those are potentially more serious. They may not be vulnerable to this, but it is going to be reassuring to know there is good security practice, 2FA protection etc enabled and you have robust procedures in place.

My favourite thing except the emoji is the new theme

Lemmy is awesome - I’m really enjoying it. Like the early days of Digg, even Fark, etc. Quality stuff happening!

Performance has improved, but many niche communities need more growth and engagement.

Duplicate communities across Lemmy instances are a bit of a nightmare in some ways - although by design, and also have advantages.

r/all on Reddit looks pretty different now, unless that’s just my perception. A lot of subs I’d never seen, more low quality stuff with less engagement.

I think it remains to be seen. The rapid growth of .world has been the first real production test of how the platform handles more users and content. Amazing work by the team, but there are a lot of rough edges and it is a new platform with a lot of unknowns.

The things that spring to mind for me are:

• Sign up needs to be streamlined and made more simple, and find a way to not overload individual servers without just randomly assigning people to instances.

• Live defects, bugs and things feeling rough around the edges.

• Back-end build and scaling.

• Duplicate communities across instances.

• Account migration between instances.

• Data retention past x period - how will various instances handle this with a large number of users.

• GDPR and data request compliance from individuals, governments, etc.

• Funding the costs and resources associated with rapid, large growth. How do people know what their money is going to fund? I think there needs to be real transparency, public roadmaps and backlogs and understand how / if admins are accountable.

• How the platform and users will respond to large corporations or even individual admins on instances adding adverts, using / selling user data in ways the userbase do not expect.