The FBI sleeps when libraries burn

  • jwiggler@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    240
    arrow-down
    9
    ·
    2 months ago

    Hackers acting as if they’re doing a public service by bringing down a free publicly accessible tool is a new level of assbackwardness.

    If the goal really was to force IA to increase their security, they would’ve tried to consult with them. This is more about notoriety and chaos and the hackers have no moral ground to stand on.

    • zante@lemmy.wtf
      link
      fedilink
      English
      arrow-up
      98
      arrow-down
      1
      ·
      2 months ago

      Yeah look at me flexing on and underfunded non profit.

      Not at all hackers are criminals, but many are idiots.

    • Varyk@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      61
      arrow-down
      3
      ·
      2 months ago

      was that their stated reason for attacking the internet archive?

      to bring awareness to the security breaches?

      little fucks.

      “I stole your wallet because pockets are so vulnerable. I’m helping.”

      • far_university190
        link
        fedilink
        English
        arrow-up
        49
        ·
        2 months ago

        nobody know true reason

        one group claim responsibility on twitter for ddos, reason they are us company and us support genocide in gaza. but from all us company they chose ia? sound like bullshit.

        • just_an_average_joe@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          9
          ·
          2 months ago

          You know what would be good place to archive and show the coming generations how corpos were deaf to the GAZA’s plight? Internet Fucking Archive

          I just get the feel that they either are lazy for mentioning gaza or malicious to muddy the reputation of the protesters.

          • Comment105@lemm.ee
            link
            fedilink
            English
            arrow-up
            4
            arrow-down
            1
            ·
            edit-2
            2 months ago

            You see, some NATO members have been known to use the internet. Artifacts of that usage may have been archived, like their statements and voting choices. For example, if IA stored a page where Jens Stoltenberg called a polandball comic “funny and accurate” in 2019. That would be bad for Gaza.

    • switchboard_pete@fedia.io
      link
      fedilink
      arrow-up
      20
      ·
      2 months ago

      Hackers acting as if they’re doing a public service by bringing down a free publicly accessible tool is a new level of assbackwardness.

      are the zendesk hackers the same as the ones who brought down the website initially?

      • Ajen@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 months ago

        No. And it’s hard to call the zendesk one a hack, even. They just used the same credentials that were leaked a couple weeks before.

    • openrain502r@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      10
      ·
      edit-2
      2 months ago

      iirc some group on twitter claiming that they were the ones behind the attack mentioned it had to do with Palestine or something like that? bruh the internet archive is a non profit organisation.

      then when people pointed it out, they mentioned that since they were incorporated in the USA they were still guilty or something like that? dude wtf

    • 1984@lemmy.today
      link
      fedilink
      English
      arrow-up
      9
      arrow-down
      1
      ·
      edit-2
      2 months ago

      Their emotional maturity is close to zero.

      They go after internet archive, such a lame move.

    • umbrella@lemmy.ml
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      5
      ·
      2 months ago

      those hackers are probably paid by the corporations wanting to bring it down

      • UnrepententProcrastinator@lemmy.ca
        link
        fedilink
        English
        arrow-up
        8
        arrow-down
        2
        ·
        2 months ago

        As much as I probably ideologically stand with you, let’s not confirmation bias ourselves into a belief we have no evidence for.

    • apotheotic (she/her)@beehaw.org
      link
      fedilink
      English
      arrow-up
      53
      arrow-down
      6
      ·
      2 months ago

      I mean this person seems to be not doing it maliciously. As they say, if it wasn’t them, it would be someone else. Pushing archive to improve their security is great for everyone. As long as this person doesn’t do anything actually malicious, they’re in the clear as far as I’m concerned.

    • huginn@feddit.it
      link
      fedilink
      English
      arrow-up
      68
      arrow-down
      27
      ·
      2 months ago

      This guy is outing the archive for terrible security posture by bringing attention to it because they received disclosures and did not fix them.

      Don’t get shit twisted - he’s the hero here. IA fucked up and has been vulnerable to manipulation by any number of corporate or national actors this entire time.

      • ComradeSharkfucker@lemmy.ml
        link
        fedilink
        English
        arrow-up
        56
        arrow-down
        2
        ·
        2 months ago

        If this was genuinely done out of love I could understand but due to the legal battles the internet archive is currently being dragged through, I harbor suspicion of their intent.

      • Zagorath@aussie.zone
        link
        fedilink
        English
        arrow-up
        50
        arrow-down
        4
        ·
        2 months ago

        If they were really “the hero”, they’d follow the bare minimum of responsible disclosure best practices, and allow 90 days between privately alerting them of the issue and going public with it. Two weeks is absurd.

          • Zagorath@aussie.zone
            link
            fedilink
            English
            arrow-up
            8
            ·
            2 months ago

            90 days is just the standard timeframe for responsible disclosure. And normally that’s just a baseline with additional time being given if there’s genuine communication going on and signs they’re addressing the problem.

            • ITGuyLevi@programming.dev
              link
              fedilink
              English
              arrow-up
              5
              ·
              2 months ago

              90 days is standard for “you’re code is fucked when someone presses this…”; if the issue is Dave left the keys in the parking lot and someone copied them, two weeks is more than enough time for them to recieve the notice, create a ticket to rotate the keys and a ticket to trigger an investigation (gotta document anytime an org fucks up so it doesn’t happen again, right?). Maybe I’m over simplifying it though, I don’t know how their org operates.

              • Zagorath@aussie.zone
                link
                fedilink
                English
                arrow-up
                1
                ·
                2 months ago

                I agree in general, but

                Maybe I’m over simplifying it though, I don’t know how their org operates.

                This is exactly why just sticking to the 90 day standard is better. For the supposed security researcher it’s a CYA move at worst.

  • orca@orcas.enjoying.yachts
    link
    fedilink
    English
    arrow-up
    55
    arrow-down
    10
    ·
    2 months ago

    This strikes me as state-funded or state adjacent hacking. Kind of like how the destruction of Twitter eliminated a source of on-the-ground, 24/7 information for the working class on all of the events our governments would prefer we not see so that their propaganda can be produced more lazily. Destroying the Internet Archive acts as another hindrance to the working class when it comes to staying informed and enriched.

    • B0rax
      link
      fedilink
      English
      arrow-up
      29
      ·
      2 months ago

      This message here in particular is not looking state funded if you ask me. Gaining access to zendesk tickets is a vulnerability which was published a few weeks/months ago and is not difficult at all.

      • 0x4E4F@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 months ago

        Yes, and IA was super prompt at patching that, because they have such a big team, who also get paid corporate wages and get all sorts of benefits. And, of course, all of them have nothing better to do… because maintaining that infrastructure and code is a piece of cake and is super easy.

  • Nexy@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    37
    arrow-down
    2
    ·
    2 months ago

    Why they don’t try to ddos and hack ChatGPT instead or something?

    • zarkanian@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      2
      ·
      2 months ago

      Hey, instead of picking on that little kid, why don’t you go harass that huge bodybuilder guy with all the knives attached to his belt?

  • Arcturus@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    23
    arrow-down
    2
    ·
    2 months ago

    The FBI sleeps when libraries burn

    This dumbass is probably being paid by them in the first place lol

  • BonerMan@ani.social
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    6
    ·
    2 months ago

    Doesn’t seem to be ill intended, not a good way to point out a problem, but the problem is there.