Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Internet Archive breached again through stolen access tokens

bleepingcomputer.com

Post reply on HN
Print view View original

191–200 of 376 posts

Re: Internet Archive breached again through stolen access tokens

#191

Post by bigiain »

NelsonMinar wrote: post #182
trompetenaccoun wrote: post #5

We need archives built on decentralized storage. Don't get me wrong, I really like and support the work Internet Archive is doing, but preserving history is too important to entrust it solely to singular entities, which means singular points of failure.

Is anyone using ArchiveBox regularly? It's a self-hosted archiving solution. Not the ambitious decentralized system I think this comment is thinking of but a practical way for someone to run an archive for themselves. https://archivebox.io/

@nikisweeting the dev of archivebox was active in a thread about out here last week.

https://news.ycombinator.com/item?id=41860909

I'd never heard of it, but their responses to question and comments in that thread were really really good (and I now have "install and configure archivebox on the media server" on my upcoming weekend projects list).

Re: Internet Archive breached again through stolen access tokens

#192

Post by bigiain »

tourmalinetaco wrote: post #178
TechSquidTV wrote: post #92

Earlier quoted context omitted.

This has really shown that the be true. I am stuck in a situation right now where I have some lost media I want to upload but they have been down for over a week. I plan to create a torrent in the meantime but that means relying on my personal network connection for the vast majority of downloads up front. I looked into CloudFlare R2, not terrible but not free either. I was looking into using R2 as a web seed for the…

Why not subscribe to a seedbox? They’re about $5/2TB/mo. It protects your IP, you can buy for only the month, and since seedboxes are hosted in DMCA-resistant data centers you can download riskier torrents lightning fast, meaning you’re not just spending money for others, you can get something out of it too.

Any hints or recommendations on how to find a decent seedbox vendor? (working email in profile if you'd rather not name any in public)

Re: Internet Archive breached again through stolen access tokens

#193

Post by jonhohle »

John_Cena wrote: post #160
ranger_danger wrote: post #153

Earlier quoted context omitted.

To me this is like saying you shouldn't use a knife because they are also used by criminals.

This kind of talk is simply modern politik-speak. I can't stand it and the people who fall for their deception. Stretch the truth to disarm the constituents

In what way? Torrents are used all over for content delivery. Battle.net uses a proprietary version of BitTorrent. It’s now owned by Microsoft. There’s many more legitimate uses as commented by many others.

Criminals using tools does not make the tools criminal.

Re: Internet Archive breached again through stolen access tokens

#194

Post by db48x »

bombcar wrote: post #106
db48x wrote: post #82

Earlier quoted context omitted.

I worked there for a short while.

So if the Internet Archive accidentally archived child porn, they wouldn’t delete it? I suspect they DO delete some things.

Don't be asinine; of course there are exceptions. But the general rule is that nothing is deleted. Even if you have a fancy expensive lawyer send them a C&D letter asking them to delete something or else, they’ll just hide it. You can’t tell the difference from the outside. In fact there are monitoring alarms that are triggered if something _is_ deleted.

Re: Internet Archive breached again through stolen access tokens

#195

Post by boplicity »

userbinator wrote: post #105
sirolimus wrote: post #47

It’s incredibly sad to see threat actors attack something as altruistic as an internet library. Truly demoralizing to see such degeneracy.

When there are plenty of people who are steeped in the dogma of Imaginary Property, and whose lives depend on it, it's not too surprising.

FYI: "Money" is imaginary property. Not sure you want to call people supporting "imaginary property" dogmatic. It's what our society is built on.

Re: Internet Archive breached again through stolen access tokens

#196

Post by vundercind »

tourmalinetaco wrote: post #171
dawnerd wrote: post #119

Earlier quoted context omitted.

You already can, they have torrents for everything.

Their torrents suck and IME don’t update to changes in the archive.

This is accurate, their torrent-generating system is basically broken to the point of being useless.

Re: Internet Archive breached again through stolen access tokens

#197

Post by jonhohle »

__MatrixMan__ wrote: post #70
trompetenaccoun wrote: post #5

We need archives built on decentralized storage. Don't get me wrong, I really like and support the work Internet Archive is doing, but preserving history is too important to entrust it solely to singular entities, which means singular points of failure.

To make the web distributed-archive-friendly I think we need to start referencing things by hash and not by a path which some server has implied it will serve consistently but which actually shows you different data at different times for a million different reasons. If different data always gets a different reference, it's easy to know if you have enough backups of it. If the same name gets you a pile of snapshots t…

There was a startup called Space Monkey that sold NAS drives where you got a portion of the space and the rest was used for copies of other people’s content (encrypted). The idea was you could lose your device, plug in a new one and restore from the cloud. They ended up folding before any of their resilience claims could be tested (at least by me).

Would be people be willing to buy an IA box that hosted a shard of random content along with the things they wanted themselves?

Re: Internet Archive breached again through stolen access tokens

#198

Post by ycombinatrix »

briandear wrote: post #95
TZubiri wrote: post #63

Earlier quoted context omitted.

This is literally torrents. Just give up

The problem with torrents is they have a bad reputation since people use it to steal and redistribute other people’s content without their consent.

The problem with websites is they have a bad reputation since people use it to steal and redistribute other people’s content without their consent.

Re: Internet Archive breached again through stolen access tokens

#199

Post by arresin »

> "It's dispiriting to see that even after being made aware of the breach weeks ago, IA has still not done the due diligence of rotating many of the API keys that were exposed in their gitlab secrets," reads an email from the threat actor.

With everything that’s going on, it’s highly suspicious that this is happening right after they upset some very rich rent seekers.

Re: Internet Archive breached again through stolen access tokens

#200

Post by MathMonkeyMan »

dokyun wrote: post #158
gweinberg wrote: post #52

Does anyone know who is targeting the Internet Archive, and why? I get the impression the attacks are too sophisticated for it to just be vandal punks.

The group that claimed to be responsible for the first hack was said to be Russian-based, anti-U.S., pro-Palestine, and their reasoning for the attack was because of IA's violation of copyright.... I think you should draw your own more informed conclusions, but it smells a lot like feds to me.

What do Palestine, Russia, and the U.S. have to do with the Internet Archive? The Internet Archive is a supremely boring target politically.
Post reply on HN