↓ Skip to main content

“Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you on HIBP!”

Wes Davistheverge.com ↗

Troy Hunt had the file nine days before the defacement and contacted the Archive on October 6th. It held email addresses, screen names and Bcrypt-hashed passwords for 31 million unique addresses. The attackers defaced the site through a JavaScript library and knocked it offline with a DDoS at the same time. The library of the internet kept its own front door unlocked.