This is just the new version of leaked AWS access/secret keys… bad guys dredge through any place a token could be disclosed (GitHub project, public log file, etc) and build a database of them for sale… pretty bad given chat history is retained and available via API. Article points out the potential of information disclosure, which seems pretty significant…

How did you solve this? I have my own Lemmy instance, but I’m unable to sign-in via the app…

The Fediverse seems like an interesting idea, but I hope it actually holds together.