Earlier quoted context omitted.
It's a literal window.alert()
But was that code placed there by IA or by the malicious party?
it wouldn’t be a window.alert if it were IA
Internet Archive: Security breach alert
551–560 of 648 posts
Re: Internet Archive: Security breach alert
#552Earlier quoted context omitted.
This raises an interesting question: should email addresses be private? Addresses of buildings aren't private, and they're somewhat analogous as with many computing concepts. (Aside: Before spam filters were quite good, it was typical to avoid scraping of addresses by mild obfuscation, but I think those days are gone, and this is distinct from privacy anyway.) If someone wants to upload and never be found out, then t…
Whether the email is considered private or not is completely orthogonal to whether you are allowed / should tie an action to your email. And then again completely orthogonal whether you can/should make that connection public. Even if your email is public information and even if what is uploaded is public information that doesn't imply that the email address behind the account that uploaded that information should be…
The same exact thing goes for physical addresses too. The fact that I live at my address is public knowledge. But the presence of my address in any particular database, mailing list, etc. is not and should not be public knowledge.
Re: Internet Archive: Security breach alert
#553Earlier quoted context omitted.
This raises an interesting question: should email addresses be private? Addresses of buildings aren't private, and they're somewhat analogous as with many computing concepts. (Aside: Before spam filters were quite good, it was typical to avoid scraping of addresses by mild obfuscation, but I think those days are gone, and this is distinct from privacy anyway.) If someone wants to upload and never be found out, then t…
There is software which is intended to e.g. locate the GitHub profiles of people working at companies, then scrape all public repositories they've contributed to for their email address and the emails of their coworkers - to enable targeted advertising to those individuals. Very common in enterprise sales. With ChatGPT, this can be extended to create emails that look very personal - as if someone has followed all of…
Personally I've been using an email aliasing service (simplelogin) and try to use a different alias for every purpose. I don't use it for my git commits but I find that email aliasing services are something to look into not just for privacy concerns but also spam mitigation
Re: Internet Archive: Security breach alert
#554Just in terms of privacy, it's worth noting that anyone who has uploaded something on IA already has their email address publicly viewable. This isn't something that commonly known (even judging by comments here) but in the publicly viewable metadata of every upload it contains the uploader's IA account email address. So from a security perspective it's bad but from a privacy perspective a lot of users probably weren…
This is bad enough. This alone is a privacy bug/data leak.
Theoretically, someone could scrape the pages and compile a list of exposed email addresses.
Re: Internet Archive: Security breach alert
#555A pulled an old friends website down from Internet Archive. He's moved on the next stage, but I was glad I was able to put his site back up. It'll be a shame if IA goes down permanently, but we need a decentralized solution anyway. Having a single mega organization in charge of our collective heritage isn't a good idea.
I have always thought about this. It would be interesting to have users actually store small amounts of redundant info on a device connected to the internet. Very similarly to what a torrent does but with more peers (more data shards than full copies) and less seeds. And try and keep a huge database for everyone. Obviously open source and it would end up something like tor where they just assist the network with secu…
[deleted]
Re: Internet Archive: Security breach alert
#556Earlier quoted context omitted.
> should email addresses be private? I dunno. Should your personal phone number be private? Or your home address? Would you be okay if I knew it and shared it with a stranger? Or would you rather be asked permission to share it first? Seems pretty cut and dry to me. Yeah, there's going to be someone out there (there always is) who doesn't care, but I'd wager the majority would be pretty ticked off if you gave those p…
We used to get these big books delivered to our doorsteps that had your name, your address and your personal phone number. You could pay to opt out.
If I published a list of all name and addresses, that's still different than "here is harywikle's full name and address". I imagine you wouldn't be too pleased?
Re: Internet Archive: Security breach alert
#557Earlier quoted context omitted.
This raises an interesting question: should email addresses be private? Addresses of buildings aren't private, and they're somewhat analogous as with many computing concepts. (Aside: Before spam filters were quite good, it was typical to avoid scraping of addresses by mild obfuscation, but I think those days are gone, and this is distinct from privacy anyway.) If someone wants to upload and never be found out, then t…
In a world where email costs ten cents to send (per receiver) email addresses need not be private. In our world? They kinda need to for sanity.
even 1/100 of a cent would solve the problem - but create a bunch more!
Re: Internet Archive: Security breach alert
#558Re: Internet Archive: Security breach alert
#559Earlier quoted context omitted.
nah. its politically motivated hacktivists that are pro Palestinian. See their Twitter https://x.com/Sn_darkmeta could also just be RU larping under another flag.
> nah. its politically motivated hacktivists that are pro Palestinian. This is... the most obvious false flag I've ever seen
We've seen it happen with RU flying under other flags with their Anonymous Sudan campaign. This could be a new campaign like this by them.
Re: Internet Archive: Security breach alert
#560A pulled an old friends website down from Internet Archive. He's moved on the next stage, but I was glad I was able to put his site back up. It'll be a shame if IA goes down permanently, but we need a decentralized solution anyway. Having a single mega organization in charge of our collective heritage isn't a good idea.
This is why BitTorrent and other P2P solutions were invented, but alas:
A. The RIAA, MPAA, and ESA have given these technologies a terrible reputation.
B. Nobody likes to seed. Some kind of seeding-based crypto would have been a great incentive if cryptocurrency wasn't also demonized by now.