That headline is quite misleading … the malicious extension only had a few hundred installs, not millions. They just copied an existing extension that does have 7 millions installs. They did went quite far by registering a URL. Of course it is bad that stuff like this manages to get on the store, but as long as you check what you are installing, you should be fine.
I searched for a fish related video on PeerTube and put the URL (https://video.ploud.jp/w/ddbf542e-d4b6-4778-abed-8c51799188a4) in the search bar of my Lemmy instance, after a bit the video was available like here just as a regular Lemmy post. You should now be able to reply to it from Lemmy.
Users that have a profile icon generally appear with that icon on the web UI. Of course it is not as easy as building your own Snoo on Reddit, but it works fine for me in both the web ui and MLem
The Lemmy developers did adres it recently in a news post: Update from Lemmy after the Reddit blackout. But new people should probably find an instance that fits them better anyway. Most people join lemmy.world and joining smaller instances would even allow them to keep using Beehaw as well.
I agree that we need to focus on actual content. I’m trying to regularly post and engage in communities about things other then Lemmy and Reddit, but it isjust rough to get this started especially for topics that are less popular. You don’t just want to post without response.
I do keep my sorting by subscriptions and just subscribed to a whole bunch of communities. I noticed that for me more than half of all posts seem to come from Beehaw even though they are smaller than Lemmy.ml and Lemmy.world. It is a good idea to look outside the bounds of your instance.
I was playing a bit with the API today and yea it might even be a bit too easy at the moment. You can easily use that army of Lemmy bots to upvote all your posts.
We should probably make it very clear in tutorials and setup guides that no email verification and no captcha is very insecure.
I’m not sure what you tried to say, but your comment is empty (except for the tags that automatically appear when Mastodon users respond).
Join-Lemmy has actually a nice list of instances, and they do try to take the load a bit in mind. Many people seem to switch to lemmy.world now, but that could mean you could face more stability issues in the future gain.
Beehaw.org also looks like a nice instance. They host a lot of popular communities, but they do require an application to join. That would probably keep them safe from getting overloaded.
Ah it makes more sense that way, I didn’t read the title as if they were talking about all the extensions that they found summed together. This does make it really clear that you should always check extensions when installing them, and not just install extensions with a low install base from an unknown author.