←back to thread

Internet Archive breached again through stolen access tokens

(www.bleepingcomputer.com)
492 points vladyslavfox | 9 comments | 20 Oct 24 15:00 UTC | HN request time: 0.536s | source | bottom
1. kleiba ◴[20 Oct 24 19:34 UTC] No.41897898[source]▶
People with solid info sec knowledge: this is a good opportunity to offer your expertise pro-bono for a good cause!
replies(4): >>41897975 #>>41898107 #>>41898250 #>>41899290 #
2. ◴[20 Oct 24 19:53 UTC] No.41898024[source]▶
3. ◴[20 Oct 24 20:05 UTC] No.41898107[source]▶
4. kyleyeats ◴[20 Oct 24 20:33 UTC] No.41898250[source]▶
They're buried in these offers right now.
replies(1): >>41898415 #
5. op00to ◴[20 Oct 24 21:01 UTC] No.41898415[source]▶
I wonder how many offers are legitimate.
replies(1): >>41898631 #
6. TZubiri ◴[20 Oct 24 21:29 UTC] No.41898631{3}[source]▶
An org amidst an attack might not be the most open to giving credentials and access to strangers.
replies(2): >>41898699 #>>41899447 #
7. ◴[20 Oct 24 21:38 UTC] No.41898699{4}[source]▶
8. 5jh5j56 ◴[20 Oct 24 23:15 UTC] No.41899290[source]▶
At this point they should consider a rewirte from scratch. I bet they are running a tech stack from 1992.
9. TZubiri ◴[21 Oct 24 01:47 UTC] No.41900022{5}[source]▶
To one (or two) attackers, it can always be worse.