5 ms·

Tangential: Archive.org is giving alert popup "Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastr

Tangential: Archive.org is giving alert popup "Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you on HIBP!"

consumer451 2y ago
Wow, I'm seeing that as well. Earlier today, I was seeing reports on Bluesky that it was down for a lot of people.
- stebalien 2y ago
  Possible supply-chain "attack" (or demonstration, from what I can tell) on wherever they get their polyfill library? It's coming from: https://polyfill.archive.org/v3/polyfill.min.js?features=fetch%2CIntersectionObserver%2CResizeObserver%2CglobalThis%2CElement.prototype.getAttributeNames%2CString.prototype.startsWith%2CArray.prototype.flat%2CURL%2CURLSearchParams https://polyfill.archive.org/v3/polyfill.min.js?features=fet...
  - TZubiri 2y ago
    Possibly unrelated. How can they elevate from a script injected in the frontend to the database of all users? Also, the vulnerability seems to be a domain overtake. But Archive is self hosting a static version of the dependency?
    - jszymborski 2y ago
      One way would might be to capture credentials for admin accounts if they have a "god mode".
deleted 2y ago
[deleted]
renewiltord 2y ago
Related DDoS at the moment as well https://x.com/brewster_kahle/status/1844133492453671192 https://x.com/brewster_kahle/status/1844133492453671192
justinclift 2y ago
Yeah, it's this: https://news.ycombinator.com/item?id=41792500 https://news.ycombinator.com/item?id=41792500