Supposedly 31 million accounts/passwords stolen. If you had an account and used that password for absolutely any other thing CHANGE IT NOW.

It's official now:

https://www.bleepingcomputer.com/news/securit … -million-users/

Internet Archive's "The Wayback Machine" has suffered a data breach after a threat actor compromised the website and stole a user authentication database containing 31 million unique records.

Do what BitWrangler says and change your password if you used it anywhere else. And if you did, seriously consider using password managers with random password generators (like Bitwarden or the inbuilt browser password managers of Firefox and Chrome) in the future.

Looks like the site is back up.

Great. I literally created an account a few weeks ago because they suddenly started requiring log ins for downloading "popular" items. Ah well, that account had a unique password which I never used anywhere else.

But this still sucks, because an exposed email address means more spam. There's also the possibility of it getting abused for websites that require an email address for registration, but don't use any kind of verification to confirm that you're actually the owner of that email account.

thanks for the heads up!
I changed my password as well

My old deleted account is included in the hack as well as my current (recent) one. Just be aware if you ever had an account the credentials might be out there now.

Passwords is Bcrypt-hashed

Apparently the site was unavailable because of a DDOS attack.

https://www.theregister.com/2024/10/10/intern … ddos_data_leak/

I never created an account at IA since I rarely download from there so all good here.

Makes me wonder who would benefit from making the site unavailable ... besides copyright holders, that is.

Rawit wrote on 2024-10-10, 07:24:

My old deleted account is included in the hack as well as my current (recent) one. Just be aware if you ever had an account the credentials might be out there now.

Couldn't even reset my password 'cause it got offline before I even received my password reset mail. Yay

Robbbert wrote on 2024-10-10, 14:28:

Makes me wonder who would benefit from making the site unavailable ... besides copyright holders, that is.

Since it is kind of a senseless target which would only bring bad publicity and rage against those blamed for it, probably not who is getting blamed for it.

MAZter wrote on 2024-10-10, 12:30:

Passwords is Bcrypt-hashed

Thanks for sharing! There's a small error in the cell of "8 characters, upper and lower case": should be 2.4 "years" instead of "days" as it should be safer than either 7 characters of the same method (cell above, 16.2 days) or 8 characters with lower case only (cell to the left, 4 days).

Also, the cracking times are just an estimate. It might be that they happen to guess your password on the first try. That's why you need to make it as long and complex as you can, to reduce the chance of that happening.

They are facing big lawsuits right now, mostly related to the book "lending" service.
The prospect of losing archive.org (including the web archive) is hard to accept but, I think we should prepare ourselves.

it would be a huge loss if the archive is gone... for me it is still down

To be honest I'm surprised they're still around. There's terabytes of copyrighted software being hosted there. How DMCA hasn't shut them down a long time ago is astounding.

It would be a huge loss if archive.org went down permanently. Mostly because of The Wayback Machine, which holds a lot of information that's no longer available anywhere else. Such as Creative's EAX Featured Games list and developer interviews. Also, archived support pages of motherboard manufacturers that are no longer in business, which are sometimes complete with BIOS images and release notes.

I couldn't care less about copyrighted games or whatever being removed from there, but not having access to the archived driver CDs and BIOS files for retro motherboards and GPUs would be a pretty big issue for me.

It's the election. The whole internet has gone to shit the last couple of years because of this damn election. It's not just the Internet Archive, but also Youtube, google, reddit. They've all become unusable. (Similar shit happened in the lead up to 2020, but not as bad as this.)

Hopefully we will get usable internet back once this damn election is out of the way.

dormcat wrote on 2024-10-11, 02:59:

Thanks for sharing! There's a small error in the cell of "8 characters, upper and lower case": should be 2.4 "years" instead of "days" as it should be safer than either 7 characters of the same method (cell above, 16.2 days) or 8 characters with lower case only (cell to the left, 4 days).

Correct, 🤣.

“Update: @internetarchive’s data has not been corrupted. Services are currently stopped to upgrade internal systems. We are working to restore services as quickly and safely as possible. Sorry for this disruption.”