Cover Image for The Time Machine was hacked and the reaction on the internet is negative.
Fri Oct 11 2024

The Time Machine was hacked and the reaction on the internet is negative.

The Internet Archive Wayback Machine has been subjected to two types of attacks, resulting in the exposure of 31 million unique records.

Recently, the Internet Archive has been the target of a significant cyberattack that has generated a lot of buzz on social media platforms. This incident has been so shocking that some users have compared it to the destruction of the Library of Alexandria. The organization, known for its Wayback Machine that acts as a digital archive of the internet, has experienced a data breach in which 31 million emails, passwords, and usernames have been compromised.

The alleged authorship of the attack falls on the hacking group SN_Blackmeta, who, according to sources, carried out the intrusion on September 28, 2024. Users were informed of the incident through a pop-up message referring to the vulnerability in the Internet Archive's security system. The situation was confirmed when Troy Hunt, creator of the Have I Been Pwned service, indicated that the attackers had shared the authentication database.

This database, which contains sensitive information such as passwords hashed with Bcrypt and timestamps of password changes, is 6.4GB in size and is named "ia_users.sql." It is expected that the stolen data will be added to the HIBP platform so that users can check for potential compromises of their personal information.

In addition to the data breach, Brewster Kahle, the owner of the Internet Archive, reported a Distributed Denial of Service (DDoS) attack that has affected the site's functionality. This type of attack floods the page with malicious traffic, which can lead to slowdowns or inoperability. According to Kahle, the first DDoS attack occurred on October 8, followed by another attempt on October 10.

In summary, the Internet Archive is dealing with two types of attacks: the data breach and the DDoS, although no connection between the two has been established so far. As of now, the site remains inoperable, while the attacks persist, and warnings of possible future attempts by the hackers are raised.