Hacker News new | past | comments | ask | show | jobs | submit login
Tell HN: Someone just abused API to reply to 2 year old Internet Archive ticket
7 points by ohmygodscary 5 months ago | hide | past | favorite | 2 comments
2 years ago I opened a ticket with the internet archive.

The ticket was made because I was being bullied and harassed on a website, and I wanted the specific page to not be archived anymore.

The internet archive never replied.

Until today. Except it wasn't them who sent it.

> FROM The Internet Archive Team (Internet Archive) <support@archivesupport.zendesk.com>>

> TO <redacted>

> SUBJECT Re: <redacted>

> The Internet Archive Team (Internet Archive)

> Oct 20, 2024, 05:28 CDT

> ##- Please type your reply above this line -##

> It's dispiriting to see that even after being made aware of the breach 2 weeks ago, IA has still not done the due diligence of rotating many of the API keys that were exposed in their gitlab secrets.

> As demonstrated by this message, this includes a Zendesk token with perms to access 800K+ support tickets sent to info@archive.org since 2018.

> Whether you were trying to ask a general question, or requesting the removal of your site from the Wayback Machine—your data is now in the hands of some random guy. If not me, it'd be someone else.

> Here's hoping that they'll get their shit together now.

> This email is a service from Internet Archive. Delivered by Zendesk





I just got the same email




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: