Earlier quoted context omitted.
It's a literal window.alert()
But was that code placed there by IA or by the malicious party?
Sounds snarky to me. I'll bet it was the malicious party.
Internet Archive: Security breach alert
41–50 of 648 posts
Re: Internet Archive: Security breach alert
#42Earlier quoted context omitted.
yes, " https://polyfill.archive.org/v3/polyfill.min.js?features=fet... " is the URL with the malicious code
It looks like it is running the service that was part of the supply chain attacker earlier this year. https://github.com/polyfillpolyfill/polyfill-service/issues/...
That was a DNS hack of polyfill.io though right? This looks like it was/is self hosted.
Re: Internet Archive: Security breach alert
#43Re: Internet Archive: Security breach alert
#44Maybe this will make Google reconsider relying on them for cached versions of webpages.
Re: Internet Archive: Security breach alert
#45Earlier quoted context omitted.
It's a literal window.alert()
But was that code placed there by IA or by the malicious party?
Verge reports someone has taken credit for an ongoing DDOS against IA.
"An account on X called SN_Blackmeta said it was behind the attack and implied that another attack was planned for tomorrow"
https://www.theverge.com/2024/10/9/24266419/internet-archive...
Re: Internet Archive: Security breach alert
#46Earlier quoted context omitted.
yes, " https://polyfill.archive.org/v3/polyfill.min.js?features=fet... " is the URL with the malicious code
It looks like it is running the service that was part of the supply chain attacker earlier this year. https://github.com/polyfillpolyfill/polyfill-service/issues/...
The service was fine, it was the "official" hosted instance of the service which was compromised. IA appears to be running their own instance.
Re: Internet Archive: Security breach alert
#47What an asshole, honestly this is a good public service they offer.
Re: Internet Archive: Security breach alert
#48Should we be linking to the site that is very likely to be breached? Could start to host any type of malware until the access can be definitively revoked
This - dang/mods is there a policy for this?
Verge article as possible replacement: https://www.theverge.com/2024/10/9/24266419/internet-archive...
Re: Internet Archive: Security breach alert
#49Why go for the Internet Archive go for something else not the fucking archive!
We all need our easily accessible decentralized archive of some sort...
Re: Internet Archive: Security breach alert
#50That's a shame. We need not one but many internet archives. Just one and we will repeat the outcome of the Library of Alexandria.
The Library of Alexandria wasn't that significant and likely wasn't destroyed in one cataclysmic event, but rather centuries of neglect.