Sharkey

Sharkey, 3 months ago to random

⚠️IMPORTANT SECURITY UPDATE, PLEASE BOOST THIS POST⚠️

Please update your Sharkey to version 2024.3.2, there has been some security fixes to ensure validation of remote users and activities

this is a minor release mostly just for the security fixes

changes of this release:

• prohibited words are now correctly checked when creating notes
• notes with CW are no longer shown on the welcome page for non-logged-in users
• database migrations should no longer timeout
• docker image improvements
• important security fixes

Important Note for Users that do NOT use S3 and that USE Docker

There have been some improvements made to the Docker images that should fix some issues with that the container now runs as a seperate Sharkey user with id 991:991 so its required to change ownership of the files directory to do that run the following in the directory where your docker-compose.yml file is

# replace web with what ever you named the sharkey service if you changed the default docker compose file
docker compose exec --user=root web chown -R sharkey:sharkey /sharkey/files

Important Note for everyone
please update immediately there is a scheduled downtime on April 6th during that time the Sharkey docker images and repo might be unavailable for more than 2 hours

Sharkey, 4 months ago to random

Explaining Rumors about Sharkey, circulating right now.

for those that are to lazy to read the entire thing.
here is a TLDR:

yes, the lead dev marie has quit fedi as a whole but this shouldn't affect the project, as we have active contributors, and the other Project Lead @Amelia is still fully involved in the project.

Long Explanation:

Due to the recent drama sounding TransFem.social and the other dramas before it, marie former lead dev, has decided to quit fedi as a whole this includes leaving the Sharkey Project but she will stay and help out till the next release which is upcoming soon, after that @Amelia (Project Lead) and the other sharkey contributors will continue sharkey as usual, we have spent alot of time over the last month expanding the dev team behind sharkey and inviting more contributors, so the project is not dead, nor at risk of dying and will be developed as usual in the foreseeable future

PS: @Amelia is very dedicated towards the Sharkey Project, and has been in charge of managing the project and the servers / accounts since the beginning.

Sharkey, 4 months ago to random

The increased spam bots have show that misskey instances lack moderation tools to deal with massive spam campaigns, we will be looking into improving instance moderation tools in #sharkey, to maybe get them as powerful as Akkoma MRF or atleast close

Sharkey, 4 months ago to random

IMPORTANT SECURITY UPDATE, BOOST THIS POST
We have released a hot-fix that patches the recent Misskey vulnerability, that allows users to impersonate remote users
https://github.com/misskey-dev/misskey/security/advisories/GHSA-qqrm-9grj-6v32

Please update your instances to the latest stable release with the hotfix 2023.12.1 or if using develop to the lastest develop image or commit

thanks to @sugar for bringing this to our attention before everyone else

Sharkey, 4 months ago to random

We are currently investigating how much the recent mastodon cve is affecting sharkey instances.

Sharkey, 5 months ago to random

IMPORTANT UPDATE, BOOST THIS POST

A critical vulnerability has been found in Sharkey Twitter imports that can lead to arbitrary code execution, we urge all instance admins to IMMEDIATELY update or to disable Note Imports via roles for the time being, steps are being taken to prevent such events in the future.

NOTE:

this happened during our git migration please update your repos and docker images to the following to update to the latest version

Git Users:
run the following in the sharkey folder
git remote set-url origin https://activitypub.software/TransFem-org/Sharkey.git
then do a git pull
Docker Users:
replace the image: part of your docker compose with
image: registry.activitypub.software/transfem-org/sharkey:latest
Note replace latest with develop if u used that branch, also replace stable with latest if u used that tag

after this announcement was made the all affected docker images will be deleted to prevent users from using them and the old git repo will be redirected to the new one

Thanks to @ChaosKitsune and @sugar for Reporting and Fixing the issue

Sharkey, 5 months ago to random

We urge all users currently on our Sharkey Matrix rooms to leave and join the Discord

As the Matrix will be shutdown by 14th February due to lack of Matrix Mod tools and increased raids

Sharkey rooms might return on similar foss services in the future like xmpp tho that currently is up to debate

Sharkey, 6 months ago to random

Alright, I've been thinking. When life gives you Misskey, don't make a Misskey Fork - make life take the Misskey back! Get mad! I don't want your damn Misskey, what am I supposed to do with that? Demand to see life's manager. Make life rue the day it thought it could give Fedi Misskey. Do you know who I am? I'm the Network that's gonna burn your house down! With Misskey. I'm going to to get my engineers to invent combustible Misskey that burns your house down.