Change your passwords: Attackers claim a 'catastrophic security breach' of the Internet Archive, with 31 million emails and hashed passwords captured
www.pcgamer.com
"See 31 million of you on HIBP!"
  • ArbitraryValue@sh.itjust.works
    46·
    16 days ago

    Why would Internet Archive have people’s passwords stored?

    The bad news is that you have an Internet Archive account, your username and email could well have been captured by the site’s attackers.

    Oh so it’s not a problem for anyone without an Internet Archive login?

    • Showroom7561@lemmy.ca
      261·
      16 days ago

      Oh so it’s not a problem for anyone without an Internet Archive login?

      TIL, that you can have an account for the Internet Archive. I guess I use it differently than most people, but it’s often a one-and-done use case when I visit.

      • Max-P@lemmy.max-p.me
        10·
        16 days ago

        You need an account to upload stuff. The Internet Archive isn’t just archiving websites, you can also upload book scans to them, rips of old floppies and discs for old software, even old TV shows and movies. For example, the entirety of the Computer Chronicles series is available for download there.

      • BCsven@lemmy.ca
        4·
        16 days ago

        If you want to borrow a digitized bok from their library you need a login.

  • over_clox@lemmy.world
    16·
    16 days ago

    I guess I get to have a little chuckle over this one. I have terabytes of stuff stored on the archive, but I have no account or password there haha! Pretty neat what one can do with the snapshot feature.

    For real though, that sucks for everyone with an account.

    • makyo@lemmy.world
      2·
      16 days ago

      Wait really?!

      I never really thought about it I guess - I’ve got a bunch of stuff I’m archiving locally that I always felt like it’d be a shame if it disappeared. Would be nice to have a real place for it.

      • over_clox@lemmy.world
        2·
        16 days ago

        My method is a bit cumbersome, but basically you upload the file to one of the temporary file sharing sites, then get and copy the full download link, but don’t actually download it.

        Take the copied full link, and use the archive’s snapshot feature. Your mileage may vary, not all temp sharing sites allow archiving.

  • Moog Muskie@lemmy.zip
    111·
    14 days ago

    I can’t change the password because the site is still down. Although my password is randomly generated and different to any of my others.

    Update 2 days later: Yep, I’m one of the 31M affected users. Still waiting for the site to go up so I can change the password. Check if you’ve been affected on https://haveibeenpwned.com/

    • The Octonaut@mander.xyz
      7·
      16 days ago

      The idea is to change your passwords on other sites if they shared the same password (which is why you shouldn’t do this).

      • psud@aussie.zone
        1·
        16 days ago

        The real advice is to use a password manager to generate random passwords and store them for you, so no two passwords are the same, and the only password you need to remember is the one to unlock the password manager

        I use keePass as it’s open source and available on all operating systems. Also you can move the camel case in your head to make it keepAss.

    • floofloof@lemmy.ca
      91·
      16 days ago

      I managed to get in and change mine last night. So you just have to keep hammering that refresh button until you overcome whoever this asshole is that’s DOSing the site. Maybe even do it on several computers, and write a script to help.

      Edit: Joke, don’t do.