News for hackers. Stuff that matters.

A comment on Internet Archive: Security breach alert. Parent comment

Re:Internet Archive: Security breach alert by Aachen on Wednesday October 09, 2024 @07:16PM (#41793841)
Voluntary sharing, since afaik they don't pay the criminals to get the data. Either the criminals share it directly (fat chance, usually), or someone else bought it and shared it either publicly, privately with HIBP, or privately with someone who then reported it to HIBP

How this specific instance unfolded, time will have to tell. The leak may have occurred in 2020 for all we know at this point

[ Parent | on HN ]
Re:Internet Archive: Security breach alert by steffanA on Wednesday October 09, 2024 @07:34PM (#41793954)
There is a strange dynamic between the threat actors who conduct these breaches and researchers.

When not used for extortion and for "status" in the hacking community, they share them with researchers (commonly HIBP) to warn people about a site's security and so that site is forced to fix things.

Definitely a strange dynamic.

[ Parent | on HN ]
Re:Internet Archive: Security breach alert by lazide on Wednesday October 09, 2024 @11:16PM (#41795142)
A form of ‘counting coup’ I imagine. [https://en.m.wikipedia.org/wiki/Counting_coup]
[ Parent | on HN ]
Re:Internet Archive: Security breach alert by crtasm on Wednesday October 09, 2024 @08:02PM (#41794155)
"Breach date: 28 September 2024" - I'm assuming they've checked with some recent signups to confirm the timeframe.

https://haveibeenpwned.com/PwnedWebsites#InternetArchive

[ Parent | on HN ]