Live data from Hacker News

Internet Archive breached again through stolen access tokens

bleepingcomputer.com

301–310 of 376 posts

Re: Internet Archive breached again through stolen access tokens

#301

> "It's dispiriting to see that even after being made aware of the breach weeks ago, IA has still not done the due diligence of rotating many of the API keys that were exposed in their gitlab secrets," reads an email from the threat actor. With everything that’s going on, it’s highly suspicious that this is happening right after they upset some very rich rent seekers.

> they upset some very rich rent seekers

Who are "they"? And who are the "very rich rent seekers"?

Re: Internet Archive breached again through stolen access tokens

#303

It’s incredibly sad to see threat actors attack something as altruistic as an internet library. Truly demoralizing to see such degeneracy.

When there are plenty of people who are steeped in the dogma of Imaginary Property, and whose lives depend on it, it's not too surprising.

Was the hacker motivated by IP? The article appears to say no.

Re: Internet Archive breached again through stolen access tokens

#304

A genuine question to commenters asking to "put a grownup in charge of the thing" and saying that "Kahle shouldn't be running things": he built the thing, why exactly he can't run it the way he sees fit?

He can run it the way he sees, but the way he sees is intentionally self-defeating; Instead of prioritizing keeping the archive as viable and complete as possible, he favors an all-or-nothing approach where either the Archive has accumulated and made obsolete all other knowledge bases in the world, or the Archive has been destroyed utterly by external threats. He would rather be burned to death as the last curator of the library at Alexandria than try to save anything.

Re: Internet Archive breached again through stolen access tokens

#305
post #296
post #238

Earlier quoted context omitted.

Copyright only regulates the distribution of copies of copyrighted works. Possessing copies and distributing copies to other people are two different things. If you were photocopying a textbook and giving it to your classmates, the publisher could have their lawyer send you a Cease and Desist letter telling you to stop (or else). But if they told you to burn your copy of the textbook then they would be overreaching,…

I'm not going to look up legal precedent, hire a lawyer if you want that. You are wrong, copyright specifically prohibits copying, not distribution. They can get a cease and desist that requests you destroy property and they ca get a court order backing that which will put you into contempt of court if you fail to do so. Proving damages is easier with distribution, but that is a civil matter not a criminal matter.

They’re not making copies either.

Re: Internet Archive breached again through stolen access tokens

#306

Earlier quoted context omitted.

It's a matter of numbers, if tens of thousands of criminals use tech X, and it has few genuine uses, it's going to be restricted. This has precedent in illegal drug categorization, it's not just about the damage, but its ratio of noxious to helpful use.

This precedent is problematic I think. It seems like the populist way of addressing issues. Always just following the biggest outcry instead of the symptoms. Just because there are currently more illegitimate users for a a thing we shouldn't prevent legitimate uses I think. The ratio might just be skewed because in the legitimate world you grow your audience with marketing investing tons of capital, while for illegit…

That's how most countries work, if enough people raise a big enough fuss, it's restricted like dangerous drugs.

Re: Internet Archive breached again through stolen access tokens

#307

Earlier quoted context omitted.

[flagged]

> Absolutely moronic and unbased implication. The "rent-seekers" won their case and have zero interest in being implicated in dumb palace-intrigue style hacking. I mean, fuck those guys, but to bring up allegations like that is big stupid. That makes no sense. The fact that they won their case gives even greater cause in ensuring that what they want goes through. Doesn't mean they have to be classy about it, or that…

> The fact that they won their case gives even greater cause in ensuring that what they want goes through.

Which is why they will continue their attack through the court system until they get everything they want, up to and including shutting down the archive for good. There's zero reason for them to risk being implicated in a crime when their opponent is already down for the count.

Re: Internet Archive breached again through stolen access tokens

#308
post #158

Does anyone know who is targeting the Internet Archive, and why? I get the impression the attacks are too sophisticated for it to just be vandal punks.

The group that claimed to be responsible for the first hack was said to be Russian-based, anti-U.S., pro-Palestine, and their reasoning for the attack was because of IA's violation of copyright.... I think you should draw your own more informed conclusions, but it smells a lot like feds to me.

The people who DDoSed Internet Archive never claimed to be behind the breach. That was some media companies who misreported this.

The breach happened over a week before the DDoS attack, according to Troy Hunt.

Stop looking for conspiracy theories.

Re: Internet Archive breached again through stolen access tokens

#310
post #21

Earlier quoted context omitted.

This seems to get brought at least once in the comments for every one of these articles that pops up. The IA has tried distributing their stores, but nowhere near enough people actually put their storage where their mouths are.

Nearly every entry in the library has a torrent file (which is a distributed storage system), but with the index pages down, they're not accessible.

Maybe there needs to be a torrentable offline-first HTML file (only goes online to tell you if there's a new torrent whatsoever with more files), that lets you look through for more torrents (Magnet links are really tiny).

I miss when TPB used to have a CSV of all their magnet links, their new UI is trash. I can't even find anything like the old days, pretty much TPB is a dying old relic.

Post reply on HN