@internetarchive @brewsterkahle Why didn't the fucking... | Dekkia

internetarchive's posts Post Back to profile

@internetarchive @brewsterkahle

Why didn't the fucking cat rotate their leaked API keys?

Also: correct me if I'm wrong, but stuff from their GitLab getting leaked is new information. Previously, news outlets only reported about stolen user credentials.

An email that looks like it has been sent from the Internet Archive Team on October 20th 2024 at 01:09 CDT with the following content:

It's dispiriting to see that even after being made aware of the breach 2 weeks ago, IA has still not done the due diligence of rotating many of the API keys that were exposed in their gitlab secrets.

As demonstrated by this message, this includes a Zendesk token with perms to access 800K+ support tickets sent to info@archive.org since 2018.

Whether you were trying to ask a general question, or requesting the removal of your site from the Wayback Machine—your data is now in the hands of some random guy. If not me, it'd be someone else.

Here's hoping that they'll get their shit together now.

Like 20 October at 7:32 | Wall-to-wall | Open on dekkia.com

No comments