The Internet Archive is under attack, with a popup claiming a ‘catastrophic’ breach - A popup message claims the online archive has suffered “a catastrophic security breach,” as its operators say the site has been DDOS’d for days.

  • 🐕 I am attempting to get the site runnning as fast as possible. If you are experiencing slow page load times, please report it.
Article
Archive

Screenshot 2024-10-09 at 4.58.52 PM.png
1728511287169.png

When visiting The Internet Archive (www.archive.org) on Wednesday afternoon, The Verge was greeted by a pop-up claiming the site had been hacked. After closing the message, the site loaded normally, albeit slowly.

However, as of 5:30PM ET, the popup was gone, but so was the rest of the site, leaving only a placeholder message saying “Internet Archive services are temporarily offline” and directing visitors to the site’s account on X for updates.

Here’s what the popup said:

“Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you on HIBP!”
HIBP refers to Have I Been Pwned?, a website where people can look up whether or not their information has been published in data leaked from cyber attacks. It’s unclear what is happening with the site, but attacks on services like TweetDeck have exploited XSS or cross-site scripting vulnerabilities with similar effects.

Jason Scott, an archivist and software curator of The Internet Archive, said the site was experiencing a DDoS attack, posting on Mastodon that “According to their twitter, they’re doing it just to do it. Just because they can. No statement, no idea, no demands.”

An account on X called SN_Blackmeta said it was behind the attack and implied that another attack was planned for tomorrow. The account also posted about DDoSing the Archive in May, and Scott has previously posted about attacks seemingly aimed at disrupting the Internet Archive.

We’ve reached out to the organization to learn more information.

----

Link to discussion regarding the breach on Hacker News
 
Last edited:
Did the skid post those pics? Does the IA have something he doesn't want anyone to find? Either way, this skid is hiding behind Gaza and Sudan, playing revolutionary so he can stay out of jail.

At least everyone's blasting him for being an obvious retard.
 
Last edited:
Reminder to change your passwords if you have an account on IA that's the first thing I did when I first saw the news
If I remember correctly, I created an account by associating it with a Google email. Isn't the password/hash used for IA different from the password of the Google account in this case?

While the leak isn't severe, since I didn't use my real name, it should be a lesson for me to delete unused accounts, since I can't trust sites to have good security.
 
Who watches the watchers, and who archives the archivers?

Unironically it won't be able to survive for long if the servers aren't moved to Russia or somesuch. Those sites are dangerous to political and corporate interests, like every time Google changes their TOS to fuck you in the ass a bit harder, to say nothing of copyrighted material per se, even if it lost media. I myself uploaded some of that there and I can totally see bumfuck Japanese companies DMCA'ing it.

Alas, this could very well be in anticipation of the election, in support of Israel and Ukraine etc. You can't allow people to see what the media was saying a day earlier. Oceania has always been at war with Eastasia.
 
I'd like to share with you Gwern's method of archiving URLs:
Very beautiful site and incredibly fluffy cats but I don't see how it proves the document wasn't fucked with to begin with.

There are some instances where it still may be extremely useful. You can protect creative works. You can (maybe) expose some suspicious cohencidences.

But, we're (mostly) talking the Farms here, where Null stores material that is inherently embarrassing to the subjects. They won't like it 20 years into the future and they don't like it now, and everyone understands this, the poasters understand this when they're poasting. It's not like Pocahontas's claim of feather indian ancestry that came to slightly nib her on the butt after decades. When Ethan Ralph runs for President in 12 years, he won't be able to say the gunted video is a 2036 hoax, but he will be able to say it's a 2021 hoax.

Right now, it's possible to make a list of up-and-coming lolyers not in pay of Soros, add fake quotes attributed to them into an existing "controversial" (pedophilic) NYT thinkpiece, save the hashes in the blockchain on the cheap, then surface them when necessary. It doesn't take a galaxy brain, xitter users have been doing it for years with series of private xeets "predicting" each possible outcome of a specific event, to then unprivate and make go viral the one that does occur.

I'm trying to imagine this but I'm just not seeing it. This dude is either a faggot, a tranny chaser, or a plain old incel.
So, friendly fire?
 
I am not happy about this. At all. And neither should you.

Internet Archive isn't just a static webpage archive like archive.today, they're basically a massive free file hosting website with no limits on upload size. Their storage space is in hundreds of petabytes, or thousands of terabytes, or simply put, millions of gigabytes. They have designed their own custom storage racks that can hold up to 1.4 petabytes of data per rack, and their server room generates so much heat it doubles as a building heater.
Internet Archive PetaBox
As of 2021 the IA reported that they held ~212PB of data, that would be 212 millions of gigabytes worth of data. There is no way to back this up. If it's gone, it's gone. The unaffiliated Archive Team once attempted to do just that only to realize how futile it was. And no, torrents will never be able to replace what the IA has. That's why they're so paranoid about keeping their systems safe after the breach, and I hope that they will manage to pull through.

They also aren't as politically motivated as most believe they are. They had absolutely zero issues hosting Johnny Rebel songs, Moonman covers, RAC discographies or even full MATI episodes that people uploaded there. Their administration doesn't go around playing whack-a-mole with anything they disagree with politically, kiwifarms.net getting excluded from the Wayback Machine was simply the result of the complaint volume during the peak of #DropKiwiFarms campaign.

It should be in everyone's best interest for the Internet Archive to survive and keep operating, and for them to have a more competent leadership. Ideally one that'll invest in their networking infrastructure for once since it was always their Achilles' heel.
 
I will admit I am retarded. With that out of the way, I have some questions. First, is this really a big deal for me if I have an IA account using a password unique to that site? I use the archive to upload some random stuff and save things to read and watch. And borrow books. Nothing personal there. Second, I am not understanding what the value in hacking the IA actually is. Just for attention?

Bonus. Why do some of you all say that archive services will be gone in 5 years? Why and how would that be?
 
I will admit I am retarded. With that out of the way, I have some questions. First, is this really a big deal for me if I have an IA account using a password unique to that site? I use the archive to upload some random stuff and save things to read and watch. And borrow books. Nothing personal there. Second, I am not understanding what the value in hacking the IA actually is. Just for attention?

Bonus. Why do some of you all say that archive services will be gone in 5 years? Why and how would that be?
Never underestimate the lengths that a skid will go to in a brazen attempt to get noticed by tech-industry-sempai. I also had a theory that Hollywood would scorch the internet as music and film industries went broke, given the breve of piracy havens in this medium.

Archives frequently come under attack by intellectual property firms/trolls and people with skeletons in their closet. It's just that transsexuals happen to have the most red of skeletons.
 
I will admit I am retarded. With that out of the way, I have some questions. First, is this really a big deal for me if I have an IA account using a password unique to that site? I use the archive to upload some random stuff and save things to read and watch. And borrow books. Nothing personal there. Second, I am not understanding what the value in hacking the IA actually is. Just for attention?

Bonus. Why do some of you all say that archive services will be gone in 5 years? Why and how would that be?
If your username/email wasn't unique as well expect that to be used in credential stuffing attacks where the cracked password is used in combination with username/email elsewhere. Might be a good idea to shore up security for any accounts that use the same leaked username/email. Upgrade weak passwords, add two-factor auth and login alerts to the important stuff (primary email, bank accounts).
 
As of 2021 the IA reported that they held ~212PB of data, that would be 212 millions of gigabytes worth of data. There is no way to back this up. If it's gone, it's gone. The unaffiliated Archive Team once attempted to do just that only to realize how futile it was. And no, torrents will never be able to replace what the IA has. That's why they're so paranoid about keeping their systems safe after the breach, and I hope that they will manage to pull through.
I honestly don't think the actual glowies want IA to go anywhere. They use it themselves.
 
Back