Email or username:

Password:

Forgot your password?
internetarchive

"Why kick the cat?" - @brewsterkahle, speaking to Daniel Wu of the Washington Post about the attacks against the Internet Archive ➡️ wapo.st/4f998w2

5 comments
Sean O 🎃✂️

@internetarchive @brewsterkahle Hey, Internet Achive, maybe you could Wayback Machine the article without the scammy “gift paywall”?

Tik

@internetarchive I think I read some where the Pentagon, CIA, MOSSAD, NSA, DHS, etc where trying to pin their hack on Palestinian "terrorist".

Dekkia

@internetarchive @brewsterkahle

Why didn't the fucking cat rotate their leaked API keys?

Also: correct me if I'm wrong, but stuff from their GitLab getting leaked is new information. Previously, news outlets only reported about stolen user credentials.

An email that looks like it has been sent from the Internet Archive Team on October 20th 2024 at 01:09 CDT with the following content:

It's dispiriting to see that even after being made aware of the breach 2 weeks ago, IA has still not done the due diligence of rotating many of the API keys that were exposed in their gitlab secrets.

As demonstrated by this message, this includes a Zendesk token with perms to access 800K+ support tickets sent to info@archive.org since 2018.

Whether you were trying to ask a general question, or requesting the removal of your site from the Wayback Machine—your data is now in the hands of some random guy. If not me, it'd be someone else.

Here's hoping that they'll get their shit together now.
Go Up