They use bcrypt and I always use a really long password so I’m not gonna freak out over this one for once.
Internet Archive: Security breach alert
381–390 of 648 posts
Re: Internet Archive: Security breach alert
#382solution: MFA
Re: Internet Archive: Security breach alert
#383Earlier quoted context omitted.
It's quite trivial. 1. Buy a domain. About $10/year for a .com 2. Buy a /24 ipv4 block with good reputation (maybe like $10k) 3. Get a rack in a nearby datacenter, rack up a BGP-capable router and your servers for redundancy to run email. Takes about $30k initial setup costs if you buy all new, and about $5k initial setup costs if you cut corners and buy used. It'll be $2k/mo after that, so less than the cost of 1 $1…
Hold on. Why do you need a dc rackspace and a /24 just to have your email ?
This is hacker news, we're all either founders who have 2 billion dollars in (illiquid) stock options, or FAANG employees making 600k/year, what else are we going to do if we want email?
Sure, you could pay fastmail $40/year for this, but that's not really the hacker news spirit, and no one on this site knows how to count as low as $40.
The real justifications you can give yourself:
Shared VPS hosting pretty much all bans email, AWS, DO, etc all have ToS that say "no email" as anti-spam measures.
Shared IP space will go straight to spam due to people having spammed on it in the past. Buy a /24 to ensure you don't go straight to spam.
Rackspace ensures you actually own your email, at least moreso than with other shared hosting, and owning your email is important.
Re: Internet Archive: Security breach alert
#384Earlier quoted context omitted.
It's quite trivial. 1. Buy a domain. About $10/year for a .com 2. Buy a /24 ipv4 block with good reputation (maybe like $10k) 3. Get a rack in a nearby datacenter, rack up a BGP-capable router and your servers for redundancy to run email. Takes about $30k initial setup costs if you buy all new, and about $5k initial setup costs if you cut corners and buy used. It'll be $2k/mo after that, so less than the cost of 1 $1…
Hold on. Why do you need a dc rackspace and a /24 just to have your email ?
It’s a joke ! You can run an email server off your phone
Re: Internet Archive: Security breach alert
#385Earlier quoted context omitted.
> The data will soon be added to HIBP My unique-to-archive.org email address is not there yet.
Out of curiosity, do you use a unique email address for every single service?
Yes, without exception. I want to know who is leaking/selling my address, and usually stop doing business with those who do. It also makes filtering really easy. People sometimes have strange reactions when I verbally give them an email address with their company name in it, especially when I'm a new customer.
All you need is a domain and an email provider that allows catch-all addresses, both of which are easy and cheap.
Re: Internet Archive: Security breach alert
#386Earlier quoted context omitted.
Troy Hunt's tweet mentions the IA getting breached, defaced AND DDoSed. Here it is, in case you don't want to use that site: >>> Let me share more on the chronology of this: 30 Sep: Someone sends me the breach, but I'm travelling and didn't realise the significance 5 Oct: I get a chance to look at it - whoa! 6 Oct: I get in contact with someone at IA and send the data, advising it's our goal to load within 72 hours 7…
> The timing on the last point seems to be entirely coincidental. It may also be multiple parties involved and when we're talking breach + defacement + DDoS, it's clearly not just one attack. It could also be that the attacker has compromised IA communication channels and timed it for maximum dramatic effect and confusion.
very likely compromised comms.
this was coordinated. several archive services hit around the same date. ddosecrets was the first to be hacked, as far as i can tell. span of one week.
here's list of suspects i guess https://en.m.wikipedia.org/wiki/List_of_material_published_b...
Re: Internet Archive: Security breach alert
#387Earlier quoted context omitted.
It's quite trivial. 1. Buy a domain. About $10/year for a .com 2. Buy a /24 ipv4 block with good reputation (maybe like $10k) 3. Get a rack in a nearby datacenter, rack up a BGP-capable router and your servers for redundancy to run email. Takes about $30k initial setup costs if you buy all new, and about $5k initial setup costs if you cut corners and buy used. It'll be $2k/mo after that, so less than the cost of 1 $1…
Hold on. Why do you need a dc rackspace and a /24 just to have your email ?
[deleted]
Re: Internet Archive: Security breach alert
#388Earlier quoted context omitted.
People are pirating comic books and cookbooks from the 30s; there are a lot of people in this world, if something goes on the web and you tell everyone you put it there, it's pretty much preserved. It's only law enforcement that kills free availability of everything all the time online, for better or for worse. With copyright, as individuals we get to trade all of the wonderful stuff already made (and long paid for)…
I never thought about UBI and copyright - but as soon as you say that, it is immediately obvious to me that when we have some kind of UBI, copyright should be dramatically reduced.
Copyright should be reduced in general. 20 years was already excessive for exclusive control over culture, 200 is just absurd.
Re: Internet Archive: Security breach alert
#389Earlier quoted context omitted.
Proxy address ie user@gmail.com you would use ia+user@gmail.com and have rules to match that
It’s user+ia@gmail.com, and it’s a poor substitute for a dedicated domain. For one, every attacker knows about plus addressing and that those addresses are really all the same email account.
They still don't know what you put after the "+" to log into another service.
Re: Internet Archive: Security breach alert
#390Earlier quoted context omitted.
Not even in the 10th % for the area per https://www.levels.fyi/heatmap/
It says it's remote though, so doesn't seem too bad?
Right in most southern states in rural areas that would be pretty good and you could enjoy fresh air and nature while working from your back porch and scanning a few acres of land and wildlife, sipping on sweet tea.