You are talking about the Ultra lifetime. Just ad free is $20 USD.

Dropping in to echo this sentiment. I am interested in blocking the instance itself due to the communities it has. I don’t want to block comments from the users on it though.

Home assistant

Plex

Jellyfin

Sonarr

Radarr

Prowlarr

Readarr

Organizr

Overseerr

SaBnzbd

Transmission

Calibre web

Homepage

Memos

Pwndrop

Picsur

Remotely

Youtube dl

Changedetection.io

Uptime Kuma

Kavita

Nginx

And a couple discord bots

Yea this is a pretty big issue for me. Gunna switch back to liftoff until it’s fixed.

Agree with the Synology recommendation for a simple starter. Though personally always recommend the 4 bay.

Learning to follow hashtags was a game changing moment for me on Mastodon. Went from not really using it at all to frequent user.

Seems to be working on connect with no issues. Just tried liftoff which had an issue but resolved after relogging.

I have done basically the same thing. With a few differences.

I setup Transmission and SaBnzbd on the NAS but offloaded sonarr/radar/prowlarr + jellyfin to my server so it’s not taking up resources from the NAS.

Found Usenet to download significantly faster overall and sonarr/radar get releases from them much quicker then torrents. Only about 1/15 downloads end up being torrents.

Also overseerr is an amazing tool that you should add into your system. I use it for myself but I also have made accounts for my family so instead of asking me to download something they can just press two buttons and it automatically does the rest.

Thank you for making a statement about it!

Yea. It has already been fixed now though.

It’s all public information.

Admins are shown on the front page

Modlog shows even when an admin is added or removed.

Blocked instances are shown in the instances list.

The JWT exploit bypasses 2FA requirements. It basically steals your active session and allows a third party to use it.

Thanks for the work. As a heads up it appears most of the block instances are back however I believe explodingheads is still missing which you may want to confirm.

EDIT: it has been added back to the block list.

They were modded 20 days ago.

I find it unlikely to be necessary because the MichelleG account shouldnt have needed database access and it appears the attack was troll related with basic XSS redirects. You can wait for an official response however it is always good policy for yourself to do so anyways.

Yep. MichelleG admin was added back and posted an update but it doesnt appear that her account was fully secured so they are probably still accessing it via her account.

Looks like its starting to be resolved.

Not that I am aware of at least.

MichelleG account it appears. Was removed from admin not long ago.

Admin account was compromised.