14 ms·
The Internet Archive is under a DDoS attack
- elelelel 2y ago[dead]
- whatsakandr 2y agoClicking this link isn't helping them with their current situation. You'd just be contributing to the ddos.
- bhk 2y agoCui bono?
- niek_pas 2y agoThe guy from U2, I think
- MobiusHorizons 2y agolol, thanks for the good laugh :)
- mitchbob 2y agoPublishers.
- Simon_ORourke 2y agoWhy, what's the point in doing such nonsense? Unless it's someone with lots of money, contacts in the dark web, and some historic Barbara Streisand type chip on the shoulder.
- Joel_Mckay 2y agoMy thoughts exactly, what is the point of attacking a library... so lame... =/
- dxdm 2y agoMaybe it's a form of advertising certain capabilities and services.
- neilv 2y agoIIUC, that's always a good theory for unexplained DDoS. Though, even if they have only profit motivations, I'm a little surprised when they don't seem to let ideology influence their selection of targets for demos. For the sake of argument (maybe not true), let's say that all techies are aware of archive.org, and consider it beneficial, probably using it themselves. Why don't they instead demo against a target that will be proof of capability, and one that someone won't pay them to do (no freebies), yet one that they perceive as bad or deserving in some way? Probably improper to suggest "better" targets here, but I really wonder what's going on when some relative do-gooder gets attacked. Similarly, ransomware attack on a children's hospital, of all places? Doesn't that get you uninvited to criminal mastermind dinner parties? As Omar of "The Wire" told us, a man's gotta have a code.
- floam 2y agoOne thing to keep in mind m about LockBit ransomeware was it was SaaS — errr RaaS — and there is a good chance the target was picked by an insider there, or it was at least some opportunistic hacker not really associated with those who provided the service, besides signing up as an affiliate. LockBit was so successful partly because they didn’t have to hack anyone themselves. It was basically something advertised “Got SSH or RDP access? Let’s make a bunch of money.” This attracted hackers who might not trust themselves to do the extortion part safely, as well as people who didn’t actually hack anything but hated their boss, wanted a payday.
- pixxel 2y ago> Sorry to say, archive.org is under a ddos attack. The data is not affected, but most services are unavailable. We are working on it & will post updates in comments.
- boomboomsubban 2y agoDupe https://news.ycombinator.com/item?id=40492076 https://news.ycombinator.com/item?id=40492076
- rzr 2y agoso is purl.org
- zxxh 2y agoLooks like someone at Amazon is trying juke those remainded servers again. When is the IRS gonna catch up with this? They are worse OpenAI at abusing their non-profit status.
- gbnvc 2y ago“AWS has been losing money, quick dump more old stuff to IA. So we can write it off!” - Amazon now.
- tetris11 2y agoWho's their biggest enemy at the moment
- btbuildem 2y agoPaywalled sites?
- ysofunny 2y agolet me go further: the whole of the copyrighted industry including all media conglomerates (obviously) and all scientific, literary, etc, publishing houses. also, there's a global war, so it well may be a fog-of-war technique or like somebody else also mentioned: someone needs something to stay quite for a little bit as part of some larger operation
- markus_zhang 2y agoThe establishment always gets the most advanced technology, attack and defense because they have the big bucks. That's why I never believed that technological advancement promotes individualism, distributed X (whatever X is, money, power, whatever). Eventually it always points to a more centralized world because the elites are able to control more with each technological advancement.
- genidoi 2y agoDoubt this is coordinated - more likely a singular (m/b)illionaire wanted a post/photo/video, or multiple of, deleted for good, perhaps for suppression of legal evidence, and this was one way of bringing some firepower to a… library. One of the internets biggest libraries too. Odd.
- brokenmachine 2y agoBut a ddos doesn't remove the page...
- 2y ago
- freitzkriesler2 2y agoThis is like an arsonist lighting an orphanage or library on fire. Why would you do something like that?
- jedberg 2y agoTo sell your services as an arsonist. Being able to point to a big successful attack helps professional DDoSers sell their services.
- ysofunny 2y agomore cynically, to sell fire-safety insurance
- freitzkriesler2 2y agoI always wondered if the NSA and Cloud flare do stuff like this with websites not behind cloud flares umbrella. "Make em offer they can't refuse."
- kmeisthax 2y agoMost DDoS for hire services are on CloudFlare and they refuse to drop them. You're at least in the right ZIP code.
- aprilthird2021 2y agoBut wouldn't they need to telegraph the attack in advance to customers? Taking credit after the fact is risky as many competitors will also take credit
- jedberg 2y agoYes, that is part of it. They tell potential clients, "On May 27th, I'm going to take down the Internet Archive". Then they do it, and then go back to their clients and say, "now that you've seen my work, do you want to pay me?".
- ffhhj 2y ago[flagged]
- deleted 2y ago[deleted]
- ChrisArchitect 2y ago[dupe] https://news.ycombinator.com/item?id=40492076 https://news.ycombinator.com/item?id=40492076
- Tao3300 2y agoMeta dupe! https://news.ycombinator.com/item?id=40492670 https://news.ycombinator.com/item?id=40492670
- pmarreck 2y agoIs there any way to know who is responsible?
- pixelpoet 2y agoI think "follow the money" is a decent heuristic here. Why else would anyone do it?
- markus_zhang 2y agoIs it possible for archive.org to trace back the IP addresses? I assume maybe the attackers used a lot of IoT devices or VMs in cloud?
- fmajid 2y agoBotnets usually, sometimes amplification attacks against NTP or DNS, although the Chinese government’s Great Firewall also has offensive capabilities known as the Great Cannon, although they are generally used against GitHub because it hosts censorship-circumvention software like VPNs.
- markus_zhang 2y agoAre botnets usually hosted on personal computers or servers or IoT? I'm thinking maybe archive.org can block a whole range of IPs if needed.
- 0xcde4c3db 2y agoResistance to that kind of simple countermeasure is exactly what distinguishes a DDoS attack from a non-distributed DoS attack. The traffic basically comes from "everywhere". Not literally every IP block and route, but widespread enough that it's difficult to separate from legitimate users without actually processing the traffic (which is what you're trying to avoid by e.g. blocking an IP range).
- truth323321 2y ago[flagged]
- truth322321 2y ago[flagged]
- dang 2y agoUrl changed from https://bsky.app/profile/archive.org/post/3ktiatctiqm2r https://bsky.app/profile/archive.org/post/3ktiatctiqm2r, which points to this.
- swyx 2y agoits probably fine now but maaaybe not great policy when ddos is involved
- markus_zhang 2y agoHow much $$ does archive.org spend on infra and such? How much does one need to endure the most damaging DDOS? I remember seeing from somewhere that Google went through some huge DDOS attack without going down. Given its benefit to the lay persons I recommend everyone who use their services give a small amount once for a while. I already did so but if not for family issues I'd donate way more.
- mike_d 2y agoDDoS attacks are usually volumetric attack. Send more bits than the pipe the website has to the internet. To combat this you need to buy enough pipes to the internet for your regular internet traffic, as well as an extra 500 Gbps or so. That is a lot of unused bandwidth to be paying for every month. Then once the packets arrive at your datacenter you still need to buy dedicated appliances to scrub out the bad and let the good flow. Google is constantly under attack, but their normal daily traffic volume (multiple Tbps) is large enough that just the extra capacity they keep on hand to deal with traffic spikes the World Cup or a popular YouTube video is larger than what most attackers can muster.
- OutOfHere 2y agoWhat are the ways to manage a DDoS attack, preferably using open source? Don't say Cloudflare because they're an extortionist firm.
- Capricorn2481 2y agoI have asked this a few times and never gotten an answer beyond "One day they could turn evil." What is the reason Cloudflare is an extortionist firm? I am way more concerned about Amazon than Cloudflare.
- remram 2y agoThere was a recent anonymous critic of Cloudflare on the front page: https://news.ycombinator.com/item?id=40481808 https://news.ycombinator.com/item?id=40481808
- tripletao 2y agoBeyond the upselling under duress, I've also seen complaints that Cloudflare protects the client-facing websites of DDoS-as-service operators. This enables them to sell their service, which then creates demand for Cloudflare's service from their targets. Cloudflare describes that policy as a commitment to content neutrality rather than extortion, and I think that's more or less sincere (since they've protected many other unpopular sites that didn't give them such a benefit, with a few high-profile exceptions). It does work out very conveniently for them, though.
- fortran77 2y ago> Cloudflare describes that policy as a commitment to content neutrality rather than extortion But we know that's not true. Point out problems with a very controversial blogger and they'll cancel your service.
- ClassyJacket 2y ago"What is the reason Cloudflare is an extortionist firm?" Because they are a publicly traded company
- 1vuio0pswjnm7 2y agoarchive-it.org is still working
- 1vuio0pswjnm7 2y ago#!/bin/sh read x; tnftp -4o/dev/stdout http://wayback.archive-it.org/all/20250000000000/$x http://wayback.archive-it.org/all/20250000000000/$x # (TLS forward proxy listening on port 80) Example: https://wayback.archive-it.org/all/20240506083041/https://archive.org/details/software https://wayback.archive-it.org/all/20240506083041/https://ar...
- 1vuio0pswjnm7 2y agoExample: https://wayback.archive-it.org/all/20240513230248/http://cr.yp.to/ https://wayback.archive-it.org/all/20240513230248/http://cr....
- sans_souse 2y agoIt's those damn record labels throwing a cog in the wheel, isn't it
- Lammy 2y agoThis is why I’ve gotten into the habit of maintaining my own WWW archive of sites I find interesting. Probably have around 1 TiB now, and One Of These Days I’d like to set my network up so it can serve arbitrary sites directly from local archive to revive any site I want. I have a `wget-mirror` shell function invoking wget with all the trimmings that takes care of 99% of sites. I’ll edit the full command into this comment when I get home if anybody else wants to start doing the same :)
- JKCalhoun 2y agoSame. I've been scraping PDF'ed magazines, etc. and keeping them locally. In addition to feeding my byte-hoarding tendencies, I like the idea I could be off-grid in my van/RV somewhere and reading a "Popular Electronics" magazine from 1972 on my laptop. (Oh, never mind YouTube videos that I once added to playlists ... that later disappear leaving only holes in my playlists.)
- jasonfarnon 2y agoMy problem with this approach is that the stuff I want to look at in 10 yrs time is never the stuff I think of saving right now. In the 2000s there were browser extensions I've forgotten the names of (shelf? slogger?) that would automatically save local copies of every webpage on page load. But I don't think they're around anymore and have no idea how you could achieve similar functionality with dynamic pages anyway.
- rightbyte 2y ago> But I don't think they're around anymore and have no idea how you could achieve similar functionality with dynamic pages anyway. It is probably easiest to save the render as a picture and then store text separately for searchability?
- disqard 2y agoThere's a way to get "the best of both worlds" (tbh, works most of the time): print to pdf.
- 1vuio0pswjnm7 2y ago1716850657 Internet Archive is now working for me
- amatecha 2y agoSeems to be back online. For now, anyway! https://mastodon.archive.org/@brewsterkahle/112514176498845289 https://mastodon.archive.org/@brewsterkahle/1125141764988452... @internetarchive is back up! this is a back-and-forth with attackers. Sees weekends and holidays are popular. we made adjustments, but we will see. at least Happy Memorial Day!
- Uptrenda 2y agoIf anyone from the archive.org team read this: love the website, by the way. You've saved so much rare content its really awesome.
- swyx 2y agowould a decentralized internet archive make sense? impossible to ddos.
- Uptrenda 2y agoI'd love to work on something like this. But the internet archive themselves don't seem too interested in it I guess.
- jazzyjackson 2y agothey literally organize an annual conference called "Dweb Camp" to support a community of distributed web nerds and have a partnership with Filecoin to mirror content to IPFS. They opened up a Vancouver headquarters to start acting as a mirror - they are very interested in removing themselves as a single point of failure
- immibis 2y agoThat exists and it's called Arweave. You even collect imaginary brownie points for maintaining the archive.
- swyx 2y ago> Arweave looks a bit more broad than i wanted. as is its like a thin wrapper for IPFS.
- immibis 2y agoIt's a fake brownie point scheme (i.e. cryptocurrency) to let the people who archive the most stuff decide what goes into the archive. There's also IPFS but that has absolutely no way to decide what gets archived.
- Animats 2y agoSeems to have stopped or been stopped.
- pockmockchock 2y agothey are trying to make their case for BGP regulation.
- anthk 2y agoIt's where I get all my PD movies, among Jamendo's dump for music albums. This is really bad for CC media.
- keploy 2y agoPeople who want to get rid of data history should be considered the enemy of humanity. I hope the archive is fine after all this.
- keploy 2y agoIt's an attack on human progress. Attack on our ability to build and grow over the past.
- deleted 2y ago[deleted]