Federal Judge Says Internet Archive's Wayback Machine a Legit Source of Evidence

Re:Federal Judge Says Internet Archive's Wayback Machine a L... by ikeboy on Thursday May 19, 2016 @10:43AM (#11730593)

How hard is it to mitm the IA over http, thus producing fake evidence that a site said something once?

[ Parent | on HN ]

Re:Federal Judge Says Internet Archive's Wayback Machine a L... by throwaway7767 on Thursday May 19, 2016 @11:18AM (#11730862)

It's the same difficulty as any other MITM - if you control a point in the routing chain, or if you can affect the routing chain through e.g. BGP, you can do it.

The crawls will probably originate from random AWS addresses, but you can target by User-Agent, since they identify themselves there.

[ Parent | on HN ]

Re:Federal Judge Says Internet Archive's Wayback Machine a L... by thatcat on Thursday May 19, 2016 @10:56AM (#11730698)

I wonder if they save the IP address for each scraping session

[ Parent | on HN ]

Re:Federal Judge Says Internet Archive's Wayback Machine a L... by ikeboy on Thursday May 19, 2016 @11:01AM (#11730744)

I also wonder if they respect HSTS and HPKP for a given site, making this attack only possible against sites without such protection.

[ Parent | on HN ]