Live data from Hacker News

Internet Archive: Security breach alert

theverge.com

191–200 of 648 posts

Re: Internet Archive: Security breach alert

#191
post #151

Earlier quoted context omitted.

> The data will soon be added to HIBP My unique-to-archive.org email address is not there yet.

I just checked and my unique-to-archive.org email is showing up in the breach as of 2024-08-09.

Mine isn't, but I've created my account only a week ago, so maybe I've created the account after the breach.

EDIT: Should've read TFA more thoroughly, it says the breach happened before the 30th September. And I created my account around the 2nd October

Re: Internet Archive: Security breach alert

#192

“According to their twitter, they’re doing it just to do it. Just because they can. No statement, no idea, no demands.” A special place in Hell…

100% the result of boredom. Visit website, notice its design is old and crusty and you start to dig deeper. That's all it takes. Funny how we just expect hackers to have a manifesto now.

Re: Internet Archive: Security breach alert

#193
post #87
post #65

Earlier quoted context omitted.

50 PB * $0.014/GB = $0.7M. $0.014/GB is from[1], bare drive cost without chassis, power, or redundancy. 1: https://www.backblaze.com/blog/hard-drive-cost-per-gigabyte/

How long does an average hard drive last? You'd have to spend that 700k every that many years (plus the extra bits you mentioned). Quite an operation actually

Backblaze keeps good stats. https://www.backblaze.com/cloud-storage/resources/hard-drive...

1.71% a year failure rate if you care for the hardware as much as they do.

Re: Internet Archive: Security breach alert

#194
post #140

A few minutes ago (22:48 UTC), I got three emails from HIBP about accounts of mine breached on the Internet Archive. Troy is quick! And I'm surprised the author of that alert() actually had the data as well as followed through Bit of a shame the emails contain an ad for a password manager, saying there's two easy steps to become more secure: Step 1: use our password manager (fair enough), "Step 2: Enable 2 factor aut…

I think it is safer to have 2FA in your password manager than not using 2FA at all. Because even if they got your password, if they don't have access to your password manager they can't login.

If you protect your password manager with a yubikey or any other hardware key, then your 2FA inside your password manager is quite secure and convenient. But this is very individual, what your threat model is and how secure you want/need to be.

Re: Internet Archive: Security breach alert

#195
post #177
post #87

Earlier quoted context omitted.

How long does an average hard drive last? You'd have to spend that 700k every that many years (plus the extra bits you mentioned). Quite an operation actually

> How long does an average hard drive last? You'd have to spend that 700k every that many years (plus the extra bits you mentioned). Quite an operation actually You'd have to spend a lot more, because with that many drives, you need redundancy now .

True, that would be an up front cost. At the same time, the IA is still live. This initial expense can be softened by building up redundancy over some years rather than trying to do everything at once

Re: Internet Archive: Security breach alert

#196

More details here about the data breach. Stolen database contains 31 million records. https://www.bleepingcomputer.com/news/security/internet-arch...

> the Have I Been Pwned data breach notification service created by Troy Hunt, with whom threat actors commonly share stolen data to be added to the service

Do they? Why?

Re: Internet Archive: Security breach alert

#197
post #164

More details here about the data breach. Stolen database contains 31 million records. https://www.bleepingcomputer.com/news/security/internet-arch...

Friendly reminder to generate a unique password for every account you create so database leaks like this one don't bother you (besides on the site they're used).

https://xkcd.com/2176/

Re: Internet Archive: Security breach alert

#198
post #87
post #65

Earlier quoted context omitted.

50 PB * $0.014/GB = $0.7M. $0.014/GB is from[1], bare drive cost without chassis, power, or redundancy. 1: https://www.backblaze.com/blog/hard-drive-cost-per-gigabyte/

How long does an average hard drive last? You'd have to spend that 700k every that many years (plus the extra bits you mentioned). Quite an operation actually

For that purpose you might want to use magnetic tape like they use in long term archival services

They are cheaper per Gio, and last significantly longer

Re: Internet Archive: Security breach alert

#200

Well this should be fun. Now I'll have to dig through my IA account and remember if I donated to them directly via credit card (and if they stored it), or if it was through PayPal.

Even if you paid by credit card, there's zero chance they processed the payment themselves.
Post reply on HN