11 ms·
Internet Archive is suffering from a DDoS attack
- jacquesm 10y agoThat's the online equivalent of bombing a church. Assholes.
- ghayes 10y agoI mean, somewhat literally. Here's Internet Archive's HQ (and where the servers live): https://en.wikipedia.org/wiki/Internet_Archive#/media/File:Christian_science_church122908_02.jpg https://en.wikipedia.org/wiki/Internet_Archive#/media/File:C...
- Retr0spectrum 10y agoMore like bombing a museum.
- runn1ng 10y agoYes, it's bad, but archive.org is terrible at deleting ISIS propaganda. Archive.org is the website where jihadis are uploading their videos.
- joepie91_ 10y agoWhy should it have to delete it in the first place? There's just so much wrong with that reasoning, it's hard to know where to start. If Archive.org deletes it, it will simply be uploaded elsewhere. You cannot prevent uploads internet-wide. It's simply not possible. And why are you even trying to remove it at all? Why are you not investing effort into educating people on why it is propaganda, and why it is false? Your real problem isn't that the materials exist, it's that people believe them! With these two problems combined, it's not that hard to understand that by removing the materials, you lose your chance at actual damage control. You just push it deeper into the darker corners of the internet, where you have no ability to educate users at all, and where you completely lose control over it. Why have people still not learned this?
- runn1ng 10y agoYou cannot prevent this, but you can and should make it harder. There is a certain group of things that should be hard to share (not to mention illegal, but execution videos and calls to kill infidels are already illegal to share), and archive makes it easier to share. You can and should educate people, of course, but you should make the propaganda (again, all the war videos, all the execution videos, all the cut heads and shot disbelievers) harder to get. The widely shared IS propaganda has been cited as a factor why ISIS is so popular lately. Why so many people are radicalising. The lenient approach archive.org is having to this is helping them and they have big role in destabilizing the current world, if only indirectly. Yes they are deleting some of the videos but don't delete copies that are uploaded seconds later with the same names. YouTube and others are much more proactive with deleting jihadi propaganda. Archive.org is jihadi youtube. I don't like it personally. But yeah DDoS is not the solution I guess
- wyager 10y agoWell I'm glad you have the objective viewpoint on which kinds of propaganda are OK and which aren't. If ISIS recruiting materials shouldn't be hosted, then neither should military recruiting materials from any other nation or political group. Of course, the real solution here is to not try to police political speech on the internet and let people decide what they believe for themselves. If people are deciding to join ISIS, our job is to communicate why we think ISIS is wrong, not to subject the internet to moral censorship.
- joepie91_ 10y agoHave you actually read the comment you're responding to? You cannot both remove the content and educate users. You have to pick one of the two, and "removing the content" isn't going to solve the problem. You are completely missing the point, and just repeating what you said before. EDIT: > The widely shared IS propaganda has been cited as a factor why ISIS is so popular lately. Why so many people are radicalising. The lenient approach archive.org is having to this is helping them and they have big role in destabilizing the current world, if only indirectly. This is horseshit. As I've already said, the problem isn't that the propaganda exists. It's that people unquestioningly believe it. I'm sure that it "has been cited as a factor", because that's a far easier way to look like you're dealing with the problem, than to actually try and solve it. That doesn't make it correct in the slightest.
- koolba 10y ago> That's the online equivalent of bombing a church. Assholes. Well that does align with ISIL modus operandi.
- me_again 10y agoI'm guessing the archive includes some ISIS sites that this person finds objectionable? Idiots.
- deleted 10y ago[deleted]
- runn1ng 10y agoNope. Archive.org has a part where you can upload videos, it is separate from web archive. ISIS uses archive.org almost exclusively for sharing their propaganda videos (all the executions, war videos, etc.). It's not the web archive they are using for this, it's the video archives. I am not sure why are they doing that; probably because the barrier for using it is low and they don't delete the ISIS propaganda so much as other websites (like youtube). Other website jihadists love to use is justpaste.it for text
- jf 10y agoOfficial announcement from the Internet Archive's Twitter account: https://twitter.com/internetarchive/status/743165363072884736 https://twitter.com/internetarchive/status/74316536307288473...
- szupie 10y agoAnother comment from them: "Site is down for hosting a mayor [sic] amount of ISIS stuff."[1] They also tweeted about bringing down several other supposedly ISIS-related sites. I'm guessing they're not aware of what the Internet Archive does... [1] https://twitter.com/AttackNodes/status/743170229426094080 https://twitter.com/AttackNodes/status/743170229426094080
- rmdoss 10y agoSurprised they are not using a DDoS mitigation provider yet. With companies like Sucuri and CloudFlare providing it at $20 per month, seems a non-brainer.
- pfg 10y agoMost of these services have some kind of fair-use policy. Nothing that you would notice as a small to medium-sized user, but if you push the kind of bandwidth that I imagine the Internet Archive would, or if you're suffering from a large-scale, targeted DDoS, I'm pretty sure you'd be "encouraged" to switch to the Enterprise plan, which starts at $3k/month if the numbers posted in various discussions on this topic can be trusted.
- rmdoss 10y agoTrue, good point. In their case, Sucuri actually offered to help for free via twitter, which is nice. CloudFlare has project Galileo, which they could apply for and get free DDoS help. The importance of the Internet Archive is such that we can not allow it to ever go down. thanks,
- mynewtb 10y agoI guess control over their user's privacy and the integrity of their connections is more important to them and I like that.
- greglindahl 10y agoA typical attack mitigation service involves HTTPS termination, and yeah, that's a privacy issue.
- rmdoss 10y agoI see a lot of reasons not to use these providers, but privacy and integrity is not one (and I find it a bad argument against them). Every traffic passes through so many hops, routers and networks that adding a secure, well tested and privacy-paranoid provider, like CloudFlare will not affect the privacy or integrity of your connection. Yes, they have to SSL terminate your connection, but does so every proxy that they decide to use (nginx, elb, whatever). Plus, the security that a company like CloudFlare has to protect that data is a lot higher and more strict than the majority of sites out there (including the Internet Archive). It is also frustrating that people would downvote me above for suggesting to use them, when in fact it is the only way to handle a large scale DDoS uness you have an insane pipe with hundreds of G of uplink.
- swasheck 10y ago... hey ... doesn't isis do that?
- toomuchtodo 10y agoUnchecked vigilantism is no different than terrorism.
- FunctionalMan 10y agoGood point. I've always said that "change.org" is the largest Internet Bullying site.
- rbanffy 10y agoWell... DDoS's, at least, kill less people... But attacking the IA is so wrong on so many ways it's appalling.
- krapp 10y agoYes... and the US, meanwhile, just looks the other way while the museum gets looted after bombing the entire city.
- dang 10y agoWe detached this subthread from https://news.ycombinator.com/item?id=11912460 https://news.ycombinator.com/item?id=11912460 and marked it off-topic.
- pfg 10y agoThis might be a good opportunity to mention IA.BAK[1], an effort to back up the Internet Archive. Currently, the entire Internet Archive is stored in one physical space. IA.BAK allows users to store copies of the archive which can be used as a source for data recovery in case of a disaster at this location. [1]: http://archiveteam.org/index.php?title=INTERNETARCHIVE.BAK http://archiveteam.org/index.php?title=INTERNETARCHIVE.BAK
- mynewtb 10y ago'Only' the completely public parts of it though. The archives behind the wayback machine are not publically available, 'just' through their interface. I wish I had the money to host some tens of terabytes for this effort, it's a great idea.
- pfg 10y agoGood point. Future versions of the project could theoretically work with encrypted blobs, with the keys (which are significantly easier to keep in multiple physical locations) only known to the Internet Archive. This would probably require some architectural changes to the Archive and might be harder to scale, plus one of the goals of IA.BAK is to not be dependent on any Internet Archive resources other than the actual files. Definitely something to think about down the road, but in the meantime there are plenty of public datasets to back up.
- NelsonMinar 10y agoToday may be a good day for you to donate to the Internet Archive. If you rely on the Wayback Machine or enjoy the game archives or simply appreciate the amazing preservation work the non-profit is doing, kick them a few bucks. Naturally their own donate page is offline right now, but you can donate yourself via check or wait for the site to come back. Internet Archive 300 Funston Avenue San Francisco, CA 94118 TIN: 94-3242767 https://archive.org/donate/ https://archive.org/donate/ http://archive.is/UBX0Z#selection-2697.1-2701.24 http://archive.is/UBX0Z#selection-2697.1-2701.24
- heavenlyhash 10y agoI had the privilege and joy of meeting several of the team at the Internet Archive who actively police for this kind of content as best they can, while maintaining the openness of their service. They're cheerful, honest, hardworking and energetic people. There's few groups I'd feel so happy to support. Maintaining an open and freedom-loving service in the face of abuses is incredibly hard. It's an incredible disgrace how badly these attackers have misunderstood their targeting.
- inanity 10y agoTo you who are encouraging a proliferation of ignorance and punishing the innocent many for the crimes of a guilty few: this is their goal and you are helping to realize it.
- kyledrake 10y agoDDoS is making it so small players (and very large ones like the IA) can't run web sites anymore. It's time to stop bullshitting this problem and pretending it's going to go away or that you can sign up for a magic cheap plan somewhere and all the problems stop happening. We really, really need to start getting active about solving this problem. That means building DDoS protection into the nature of the web and all hosting by default (AWS and GCS I'm looking at you), and that means actively prosecuting DDoS attackers. That also means, if you're a cloud DDoS provider, not helping to protect the sites where these attacks are marketed.
- hartator 10y agoHow do you do that? The nature of DDOS is to send multiple requests from multiple locations. It's not easy to counter this if you can't scale up as big as the DDOS is. If you start banning IPs, you are going to also ban legitimate users. (search for "tor and cloudflare")
- kyledrake 10y agoDDoS attacks are not the result of millions of people individually attacking a site, they are almost always the result of small criminal organizations that are controlling botnets that do the attack on compromised systems for-profit. They offer these attack services via market web sites. It's highly likely that this person used one of these markets to execute the attack against the Internet Archive. It's not easy to go after them, but neither is it easy to go after CP peddlers, and yet we still go after them and arrests are made. It's one part of a many-faceted strategy that will be needed to get some control over a problem that is clearly getting worse.
- jacquesm 10y ago> That means building DDoS protection into the nature of the web No, you'd have to build it into the nature of the internet, specifically into all the users of insecure machines and all the builders of core routers. One good thing that could be done is to have an organized response to any DDOS and to make it so easy to trigger this response that victims will lose very little in terms of downtime. Commercial responses to DDOS (CloudFlare for instance) are useful, but only as a stop-gap measure, essentially the fact that there is a business opportunity here documents a huge flaw in the way the internet currently works. Remember that hosting providers are as much (or even more) on the receiving end of these (for instance: when a customer of a hosting provider gets DDOS'd all the other customers will suffer too), and signaling they are part of the problem is akin to victim blaming.
- powertower 10y agoWhen things don't make sense, often it is because information is missing and/or misdirection is in play. For example - This could be a cover for an operation that Internet Archive is not aware of, that is possibly tied to the Internet Archive truck theft (and recovery) that happened a few months back. The truck's contents (drives, network gear, h/w's firmware, etc) was the way to get a payload into the internal network. And the DDoS attack is now covering whatever is really happening with lots of noise. This is pure speculation on my part, but is much more reasonable than the pretense that someone would be stupid enough to DDoS the Way Back Machine because a few sites it auto-archived had some links to terrorists. In combination with someone also being stupid enough to steal a flaming truck (https://blog.archive.org/2016/04/20/truck-and-back-again-the-internet-archive-truck-takes-a-detour/ https://blog.archive.org/2016/04/20/truck-and-back-again-the...).
- PhasmaFelis 10y agoI think you're vastly underestimating the arrogance and stupidity of internet vigilantes. Remember when Reddit fingered some random dude for the Boston Marathon bombing, leading to massive harassment of the family of a guy who, it turned out, had killed himself a month previous?
- greglindahl 10y agoWTF. The truck had a bicycle in it when stolen, and was returned empty.
- burnt1ce 10y agoI think they are bringing down Internet Archive because ISIS are abusing it to spread their propaganda. Does this justify their actions? I don't know and probably not. But it totally changes your perception about why they are attacking Internet Archive.
- zbyte64 10y agoNo it doesn't change my perspective. They might as well torch the internet while they are at it because ISIS is abusing that as well.
- mark_l_watson 10y agoI donated last month, time to donate again. I was at the Internet Archive building last week for the Decentralized Web Summit. Good folks there.