Live data from Hacker News

Internet Archive: Security breach alert

theverge.com

51–60 of 648 posts

Re: Internet Archive: Security breach alert

#51
post #26

Earlier quoted context omitted.

yes, " https://polyfill.archive.org/v3/polyfill.min.js?features=fet... " is the URL with the malicious code

It looks like it is running the service that was part of the supply chain attacker earlier this year. https://github.com/polyfillpolyfill/polyfill-service/issues/...

Yeah I'm getting this exact response from the above URL now:

https://sourcegraph.com/github.com/polyfillpolyfill/polyfill...

Seems like they self hosted that service

Re: Internet Archive: Security breach alert

#52
post #2

Just noticed the site now alerts this: > Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you on HIBP!

Jokes on them... I'm already on HIBP countless of times...

Re: Internet Archive: Security breach alert

#53
post #39

Earlier quoted context omitted.

But was that code placed there by IA or by the malicious party?

Verge reports someone has taken credit for an ongoing DDOS against IA. "An account on X called SN_Blackmeta said it was behind the attack and implied that another attack was planned for tomorrow" https://www.theverge.com/2024/10/9/24266419/internet-archive...

Ok, let's switch to that link. Thanks!

Submitted URL was https://archive.org/.

Re: Internet Archive: Security breach alert

#57
post #2

Just noticed the site now alerts this: > Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you on HIBP!

Jokes on them... I'm already on HIBP countless of times...

It's all good, as long as you're not in that recent AI Girlfriend breach which exposed a ton of users who were trying to coax it into generating CSAM images.

https://x.com/troyhunt/status/1843788319785939422

Re: Internet Archive: Security breach alert

#60
post #50
post #34

That's a shame. We need not one but many internet archives. Just one and we will repeat the outcome of the Library of Alexandria.

The Library of Alexandria wasn't that significant and likely wasn't destroyed in one cataclysmic event, but rather centuries of neglect.

The metaphor takes precedence over the fact.
Post reply on HN