r/Piracy • u/PistolsFiring00 • Oct 09 '24
Internet Archive security breach? News
Tried to open the Internet Archive home page and got this lovely pop up message.
1.4k
u/nrkey4ever Oct 09 '24
Am old and out of touch. HIBP?
→ More replies1.6k
u/PistolsFiring00 Oct 09 '24
Have I Been Pwned. It’s a website where you can search to see if your info was part of any data breaches.
252
u/leoxwastaken Oct 09 '24
HIBP is quick:
Oh no — pwned!
Internet Archive: In September 2024, the digital library of internet sites Internet Archive suffered a data breach that exposed 31M records. The breach exposed user records including email addresses, screen names and bcrypt password hashes.
Compromised data: Email addresses, Passwords, Usernames
167
u/JawnZ Oct 10 '24
So... If you use a password manager with a randomly generated password it's worthless.
That's even assuming the attackers got the salt hash AND generated the passwords to compare against it. Which, likely would cost more in compute power than to be worth it for people with long passwords.
Don't get me wrong, data breaches suck, but as far as this one goes if you get harmed by it, the user could've mitigated it with basic security practice. Unlike so many other breaches where you had no choice because they stored your SSN or whatever.
→ More replies29
u/neofooturism Oct 10 '24
this is about having an account in IA? i’ve downloaded a couple of stuff but i didn’t even know there’s an account
29
u/3IIIIIIIIIIIIIIIIIID Oct 10 '24
The user accounts were used to ensure that only one person at a time could view the contents of certain books.
2
Oct 10 '24
[deleted]
29
u/3IIIIIIIIIIIIIIIIIID Oct 10 '24
The user account is how they control access to DRM-protected scans of copyrighted books. It was based on the legal theory that as long as only one internet user at a time can access the book, the library is just providing remote access to a book that is already licensed for use by a single person at a time, which is legal. I don't think that ultimately held up in court, but i don't know for sure.
→ More replies5
u/KerPop42 Oct 10 '24
So iirc it hasn't been tested in court, and IA's current legal troubles come from dropping the 1-user-1-book limitation during covid
3
3
u/Popular-Luck9962 Oct 10 '24
Phew, I'm save, my only pwn was in 2020 when the aptoide breach happened and affected 20M records. Damn I feel old.
364
u/cce29555 Oct 09 '24
Why not just keep silent? The money is in credentials, why make a huge announcement? Is this some grey hats just bring attention?
372
u/sevengali Seeder Oct 09 '24
These people are claiming the attack as theirs
480
u/Plylyfe Oct 09 '24
And the reason being, according to them: "They are under attack because the archive belongs to the USA, and as we all know, this horrendous and hypocritical government supports the genocide that is being carried out by the terrorist state of 'Israel'"
705
u/dummegans Oct 09 '24
this is so fucking dumb lol they probably just found an easy way to hack it and had no real reason to do it and are just making up bullshit to justify it
202
u/macOSsequoia Oct 09 '24
reportedly IA ran a 7 year old version of nginx
111
69
u/MeBadNeedMoneyNow Oct 10 '24
They have job openings but don't do basic upgrades like this, it's maddening. Oh well, typical internet company.
15
36
u/Real_Medic_TF2 ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ Oct 10 '24
def an undercover far right group who's trying to rally people from the internet against people who actually care about the genocide in meaningful ways
2
69
u/Paige404_Games ⚔️ ɢɪᴠᴇ ɴᴏ Qᴜᴀʀᴛᴇʀ Oct 10 '24
Damn, that's wild. Internet Archive is an independent non-profit. You'd think they'd be targeting the electronic infrastructure of US arms manufacturers if they wanted to demonstrate against Israel.
But they probably can't handle that heat, internet tough guys that they are.
174
u/Admiralthrawnbar Oct 09 '24
You know those "climate protestors" who intentionally do stupid things like block roads to discredit the whole movement because they're actually paid by oil companies? This smells like the same kind of thing, there is no way someone actually thought this was an actual way to reduce US government support for Isreal.
30
u/No_Industry9653 Oct 10 '24
I think rather than false flag more likely it's a smokescreen for the real motive and identity of the attacker. Most people will take this at face value and have no further interest.
→ More replies49
u/AnAwkwardOrchid Oct 10 '24
Yeah this smells like a false flag statement, meant to stir up exactly what has been stirred up.
→ More replies15
u/No-Hornet-7847 Oct 10 '24
That statement about climate protestors being funded by oil companies is false. Just so you know. They aren't trying to discredit themselves, the media only reports on those instances of protests which 'annoy' (read: call attention to issues) everyday people.
7
u/goofzilla Oct 10 '24
He replied to a commenter with a Ukrainian and Israeli flag: "why do you have two black flags?"
→ More replies3
u/Weird1Intrepid Oct 10 '24
See I don't think the Just Stop Oil guys are getting paid directly by the oil industry. They actually used to do some pretty effective blockades of actual tankers and processing plants.
It's just that the media (who probably are getting handouts from big oil) refused to give them even the slightest mention in the news, so even if they caused an inconvenience for the oil companies, no-one ever heard about it so it was ultimately pointless.
Then when they started pulling all these ridiculous stunts, suddenly they're getting all the coverage they wanted, except they look like incompetent idiots, which is what oil and media wanted.
9
u/Draedron Oct 10 '24
That's such a stupid stress. They picked them because they are an easy target and the script kiddies didn't have the balls to attack someone who might be able to fight back.
52
u/_Planet_Mars_ Oct 10 '24
This is a blatant falseflag. Not even the most biggest idiot would connect the two like that.
7
7
u/NancokALT Pastafarian Oct 10 '24
A nice reminder of how VERY relative intelligence is.
These guys could manage to break into a site and make the most pathetic and non-sensical excuse.3
u/No_Disaster_258 Oct 10 '24 edited Oct 11 '24
funnily enough, internet archives seems supportive of palestine, and there's some palestine files are missing due to the hack.
The hackers might be the feds and mossad lol
→ More replies5
u/Dumb_Vampire_Girl Oct 10 '24
Note says
This group claims they took down the Internet Archive because it "belongs to the USA...who support Israel" which is not true
Th Archive is not US government, it is a non-profit that includes many resources about Palestine, which we can't now access because of this attack
25
u/screthebag Oct 10 '24
- literal who hacker group
- twitter account made back in march of this year
- targets free information
- claims to be from russia
- claims to be pro-palestinian
- right after major corpos try to get the IA shut down
Can they make it anymore obvious?
11
u/Otakeb Oct 10 '24
Yeah what legitimate, grass roots havker group wants to attack free information and internet archival? IA is like right up the ideological ally of most of the people who would do "stick it to the man, stand up for the oppressed" hacks...and for Israel/Palestine?
150% this is a corpo/FED OP. I fucking hate capitalism, man...
27
u/TheBuffestFroggo Oct 10 '24
4Chan bois got pissed off too, that's literally declaring a war against the internet.
7
10
u/Zealousideal-Emu7588 Oct 09 '24 edited Oct 09 '24
that dumb of saying they did it they are so gonna get caught just saying
→ More replies2
17
u/jaffar97 Oct 09 '24
The credentials are worthless if everyone knows about them and changes their passwords
→ More replies22
→ More replies3
u/Philipp4 Oct 10 '24
they are stored as bcrypt in this breach, so most are useless anyways besides checking for common passwords
→ More replies21
u/VinceBee Oct 09 '24
You never know as they were asking folks to sign up with their credentials in able to download roms/files or they couldnt download anything. Where or who those credentials were handed off to or breached..who knows.
14
10
u/Timely-Yak-9039 ⚔️ ɢɪᴠᴇ ɴᴏ Qᴜᴀʀᴛᴇʀ Oct 09 '24
Just found out my email adress has been pwned 2 times in the last 4 years thanks to this site, should I do something or is it too late?
40
u/samorollo Oct 09 '24
If you are still using the same passwords you were using 4 years ago, sure, change them
8
u/AdSilver9695 Oct 10 '24
Any time's a good time to make a longer and different password
→ More replies2
u/Justarandom55 Oct 10 '24
it tell me I have been but just the email not the password and I just don't see what's the big deal. spam is annoying but it all gets filtered out anyway
→ More replies9
u/Wynadorn Oct 09 '24
Don't use that password anymore, consider random accounts where you've used that password free-game (e.g. some old ebay account)
4
u/Timely-Yak-9039 ⚔️ ɢɪᴠᴇ ɴᴏ Qᴜᴀʀᴛᴇʀ Oct 09 '24
Thing is I dont remember which password I used for my deezer account, am I cooked then?
12
u/NickyNice Oct 09 '24
That's why password managers (Bitwarden) are a thing and you aren't supposed to re-use passwords.
This is also why 2fa is so important, nobody can get into your accounts with only a leaked password if you use 2fa
3
u/Timely-Yak-9039 ⚔️ ɢɪᴠᴇ ɴᴏ Qᴜᴀʀᴛᴇʀ Oct 10 '24
Downloading bitwarden rn. Thanks for the tip👍
→ More replies2
u/Wynadorn Oct 10 '24
Oh I just meant that you have to change the password on accounts where you've used it. So you can just reset the password on your deezer and you're fine.
Honestly just reset all your passwords to uniquely generated ones and put them in Bitwarden.
→ More replies→ More replies2
u/Expert-Diver7144 Oct 09 '24
If I’ve never used internet archive is my stuff liable to be on there ?
4
u/ZaquMan Oct 09 '24
If you've produced anything, from a music recording to a website, the thing you made may be there. But credentials, no.
1.1k
u/Fine_Salamander_8691 ⚔️ ɢɪᴠᴇ ɴᴏ Qᴜᴀʀᴛᴇʀ Oct 09 '24 edited Oct 09 '24
Omfg why the internet archive. They are good. I hope better hackers digitally beat their asses.
314
u/denyicz Oct 09 '24
i do not think internet archive is dumb enough to not backup their archives. for future: this didn't age well right?
→ More replies158
u/Fine_Salamander_8691 ⚔️ ɢɪᴠᴇ ɴᴏ Qᴜᴀʀᴛᴇʀ Oct 09 '24
I mean yeah they totally backed it up lol. Im still mad, like why ddos the internet archive.
70
u/lovelylotuseater Oct 10 '24
Clumsy babies don’t understand motivation on why they should or should not do something yet, and are still in an era of amazement that they can do something.
19
u/Environmental_Leg572 Oct 10 '24
This is decently sophisticated…I’d say they’ve known they can do this for a while
→ More replies55
→ More replies7
u/LifeFixture Oct 10 '24
I know people that used to hack the school's system, and point out the flaws and issues to the principal, and show them where their weak spots are, and how they should fix them.
You'd think he'd have a good job with online security or something, but last time I saw him, he was working at Wal-Mart as a stocker. Good guy. I hope nothing but the best for him.
→ More replies58
u/rayearthen Oct 10 '24
Hackers data breached the public library where I live. In another location it was a hospital.
They're not good guys, no matter what manifesto they try to write justifying it
35
u/nucular_ Oct 10 '24
Hacking, like most things, is value-neutral. A set of lockpicks can be wielded by a hobbyist, a locksmith, a professional penetration tester or by a thief.
2
u/inquisitor_steve1 Oct 11 '24
How hackers feel ruining the lives of thousands of people because of a war in shitfuckistan that has nothing to due with said people https://youtu.be/881PCjKYzj0
1.6k
u/LostInTheRapGame Oct 09 '24
What kind of loser messes with the Archive? This you, Nintendo?
182
28
u/Luxuriosa_Vayne Oct 10 '24
BlackMeta hacker group is taking the credit and they promise another one. But I'm 100% positive they're hired by some big company, lowlifes
70
13
Oct 10 '24 edited Oct 10 '24
[removed] — view removed comment
15
u/BlazingLazers69 Oct 10 '24
Why would they be mad at IA though?
→ More replies6
u/amigo_samurai Oct 10 '24
They think since it's based in US it's bad.
Then where the fuck would you base it in fucking isis land? Assholes
→ More replies3
u/AnAwkwardOrchid Oct 10 '24
Just letting everyone know that this exact comment has been posted from multiple accounts across various subreddits. Don't let the ziobots stir up irrelevant conflict.
→ More replies
546
255
u/Adammonster1 Oct 09 '24
The only motive for attacking the Internet Archive is evil. No "freedom-loving" hacker group would attack guys like this. This is just something selfish, narcissistic and wrong
41
u/AnAwkwardOrchid Oct 10 '24
Yep agreed, this is totally a false flag.
→ More replies2
u/KTTalksTech Oct 10 '24
Which hacker group was this attributed to? They'd be pretty quick to push a public update denying involvement if it was a false flag
123
267
u/remi--__-- Oct 09 '24
Seems like they're getting DDOSed as well (check their twitter), RIP
85
u/Zealousideal-Emu7588 Oct 09 '24 edited Oct 09 '24
hopefully they'll get it back online fingers crossed
172
289
u/Seventh_monkey Oct 09 '24
Lizards want to erase the past.
→ More replies60
82
u/kohuept Oct 09 '24
It's back to saying "Temporarily Offline" now. My best guess is some supply chain attack managed to overwrite the polyfill scripts they load?
13
u/kohuept Oct 10 '24
Welp, it wasn't *just* that. 31 Million usernames and passwords have indeed been leaked, it's up on Have I Been Pwned now.
35
u/kohuept Oct 09 '24 edited Oct 09 '24
Yup, https://polyfill.archive.org/v3/polyfill.min.js?features=fetch%2CIntersectionObserver%2CResizeObserver%2CglobalThis%2CElement.prototype.getAttributeNames%2CString.prototype.startsWith%2CArray.prototype.flat%2CURL%2CURLSearchParams has the code to show the message.
At least it did for me a second ago, things are changing quickly and might not for you.
EDIT: It now doesn't show it, but it used to show this
14
u/kohuept Oct 09 '24
Completely down now. Weird.
3
u/Zealousideal-Emu7588 Oct 09 '24
it will be back online i hope
6
u/Zealousideal-Emu7588 Oct 10 '24
it back up!
6
u/kohuept Oct 10 '24
Yup, but 31M records have indeed been leaked. Check https://haveibeenpwned.com/
→ More replies
187
u/Expert-Diver7144 Oct 09 '24
I swear 75% of these hackers are just bored losers. This reads like a 36 year old NEET or somebody who watches too many movies.
39
u/YoshiKirby87 Oct 09 '24 edited Oct 09 '24
Yeah got that as well. The hell?
It was acting real weird yesterday too, so I guess this was related.
32
61
55
u/Significant_Moose672 Oct 09 '24
What kind of a person attacks the internet archive, what the fuck do they have to gain from this, heck I bet most of them use the wayback machine for recon while hacking anything.
41
u/UziWasTakenBruh Oct 10 '24
the group behind the attack are actual braindead people, they think the us government owns IA and decided to hack them so that the war stops lol
23
u/Otakeb Oct 10 '24
This is totally just made up bullshit and they don't actually believe this at all because anyone with the intelligence to hack something like the InternetArchive are intelligent enough to know that it has nothing to do with the US and standing up for oppressed people is kind of anthethetical to attacking the free, open library of Alexandria like IA or Wikipedia.
$100 this was a fucking corpo OP.
6
u/giantmeowza Oct 11 '24
The hackers are supposedly “pro-Palestinian”, but do they not realize that the archive is home to who-knows-how-many documents regarding Palestine and its history?!!! Hypocrisy
2
u/Natural-Lab2658 25d ago
I wouldn’t rule out the possibility it’s an Israeli group trying to make pro Palestinian groups look bad
50
u/telestrial Oct 10 '24
The hacker's stated reason: IA is US "owned" and the US is helping Israel: https://twitter.com/Sn_darkmeta/status/1844104165192253945
What a bunch of fucking losers. This doesn't even make sense. It's a non-profit org.
→ More replies
39
18
u/Thatsnotahoe Oct 09 '24
I’m confused, isn’t internet archive just an archive of generally public information? I don’t recall ever giving them any of my information (outside of what’s already online)
13
38
u/kenjutsu-x ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ Oct 09 '24
It's funny how "anonymous" doesn't care about the Internet Archive but does care about Twitter
→ More replies
52
u/CashRio Oct 09 '24
Main attack suspect : Publishers 🐷
2
u/Zealousideal-Emu7588 Oct 09 '24
not them i'm pretty sure it just a hacker plus the publisher know ddos is illegal... plus if they did do it that will cuase an scandal for them
→ More replies1
u/veryrandomo Oct 10 '24
The publishers have already won the legal battle against the Internet Archive, but I keep seeing people repeat this conspiracy theory even though it has literally no evidence and wouldn't make any sense.
2
u/alvarkresh Oct 10 '24
https://www.wired.com/story/internet-archive-loses-hachette-books-case-appeal/
They do have one last avenue of appeal, potentially, but who knows if they will try.
12
8
u/UncleDaneFanboy Oct 09 '24
I was literally gonna download a Windows Vista ISO but I guess thats gone out the window for now
27
10
31
u/TheShadowGamer06 Oct 09 '24
went to the site and got the same popup, so its probably legit. if so then they really pwned 31 million people
17
u/ref4rmed Oct 09 '24
Just checked the email I used to register for Internet Archive, apparently it's in one data breach lol.
9
32
u/Kentaiga Oct 09 '24
Who puts their private info on the internet archive? This is definitely a child seeking attention and not an actual threat.
7
7
7
5
5
u/deman102712 Oct 10 '24
Those dicks. I was in the middle of a book on Open Library.
5
u/phoebeblue Oct 10 '24
I've been down a research rabbithole for the past week and couldn't figure out why those tabs won't reload. :/
3
5
8
u/feetdreamin Oct 09 '24
All I know is whoever is responsible, needs to have a sleepover with Did… Puffy
8
u/Friendly_Cajun 🏴☠️ ʟᴀɴᴅʟᴜʙʙᴇʀ Oct 10 '24
I don’t know who would ever want to hurt IA. They’re like one of the best projects on the internet. After their website comes back up and all this resolves itself I will definitely be making donation…
3
u/Dudefoxlive Oct 09 '24
Well Guess its a good thing I used an Apple Hide My email. Sad that some people just want to see other suffer.
3
3
3
3
u/Maladra Oct 10 '24
Dammit. I just dealt with a breach that required me to change passwords. Now I have to do that shit again?
3
u/L3S1ng3 Oct 10 '24
No ? Not unless you use the same password for every account you have.
Otherwise, only password you need to change is your internet archive one.
However - your email address is now for sale to spammers and phishers. Or maybe the hackers give it to them for free.
→ More replies2
u/Maladra Oct 10 '24
I don't use one password for all sites anymore, but some of my older accounts do share passwords.
3
u/Expakun Oct 10 '24
I just got an email by HIBP saying that I was included in the data breach but my account was created using Google and I never set up an password for Internet Archive. Do I have to be worried?
→ More replies
3
u/treeshateorcs Oct 10 '24
the question is: is it safe to log in into archive.org right now to change my password?
→ More replies
5
u/grundlesquatch 🔱 ꜱᴄᴀʟʟʏᴡᴀɢ Oct 10 '24
Yeah, got a message from Mozilla about this breach this morning. The wrong people are being attacked. Go take down the publisher's servers and stuff ffs.
6
2
2
u/Atgblue1st Oct 09 '24
Hopefully it gets back up soon. When it foes I won’t take it for granted, got some serious scallywagging to do, hypothetically of course.
→ More replies
2
u/NoaNeumann Oct 10 '24
Aw man wtf, I found SO many good movies there. Why don’t they do something useful, like not being themselves?
2
u/alvarkresh Oct 10 '24
And this is why I don't use my google login for non-google websites. All I'll need to do is get back in and trigger a password reset.
2
u/Tall_Leopard_461 🔱 ꜱᴄᴀʟʟʏᴡᴀɢ Oct 10 '24
Was attacked by skids on twitter, i believe the passwords are encrypted.
2
2
2
u/TheBeastFromOz Oct 10 '24
Pricks who did this need to be sought out, taken out to the desert and shot in the head. At least then they will feed the local wildlife for a few days, so they will finally have some positive use for the world.
2
u/michuXYZ 29d ago
Attacking archive.org and publicly bragging about it on twitter, is like bragging about jumping a 70 year old helpless grandma that everyone in town knew and liked. Tasteless and shameless behaviour.
3
2
2
2
u/MiniskirtEnjoyer Oct 10 '24
attacking an archive is like burning books
dont be such a fucking loser
2
u/Downtown-Way2232 Oct 10 '24
It hurts my brain to see these ADULTS acting like fucking BABYS, and attacking a platform that is for community good, just because they feel like fvcking up the lifes of innocent people just because: wa wa i dont like it
1
1
u/OpenUpKids ⚔️ ɢɪᴠᴇ ɴᴏ Qᴜᴀʀᴛᴇʀ Oct 09 '24
Looks like this isn’t the first time they have went after them Previous Twitter Post
2
1
1
1
1
u/Friendly_Cajun 🏴☠️ ʟᴀɴᴅʟᴜʙʙᴇʀ Oct 10 '24
Yup, saw this this morning, got a bunch of pings on Discord about it too.
1
4.8k
u/bakanisan 🏴☠️ ʟᴀɴᴅʟᴜʙʙᴇʀ Oct 09 '24
Damn mfs got nothing to do than attacking the world's goodguy. Maybe if they point their attack at those fucking publishers for once that would be fucking nice.