News for hackers. Stuff that matters.
Re:Internet Archive breached again through stolen access tokens by trompetenaccoun on Sunday October 20, 2024 @11:33AM (#41895988)
We need archives built on decentralized storage. Don't get me wrong, I really like and support the work Internet Archive is doing, but preserving history is too important to entrust it solely to singular entities, which means singular points of failure.
Re:Internet Archive breached again through stolen access tokens by jdiff on Sunday October 20, 2024 @12:19PM (#41896411)
This seems to get brought at least once in the comments for every one of these articles that pops up.

The IA has tried distributing their stores, but nowhere near enough people actually put their storage where their mouths are.

Re:Internet Archive breached again through stolen access tokens by zelphirkalt on Sunday October 20, 2024 @03:02PM (#41897685)
Perhaps one idea is to let people choose what they want to protect. This way people wanting to support it can have their mission.
Re:Internet Archive breached again through stolen access tokens by card_zero on Sunday October 20, 2024 @03:42PM (#41897959)
I want it to protect all sorts of random obscure documents, mostly kind of crappy, that I can't predict in advance, so I can pursue my hobby of answering random obscure questions. For instance:

* What is a "bird famine", and did one happen in 1880?

* Did any astrologer ever claim that the constellations "remember" the areas of the sky, and hence zodiac signs, that they belonged to in ancient times before precession shifted them around?

* Who first said "psychology is pulling habits out rats", and in what context? (That one's on Wikiquote now, but only because I put it there after research on IA.)

Or consider the recently rediscovered Bram Stoker short story. That was found in an actual library, but only because the library kept copies of old Irish newspapers instead of lining cupboards with them.

The necessary documents to answer highly specific questions are very boring, and nobody has any reason to like them.

Re:Internet Archive breached again through stolen access tokens by oxygen_crisis on Sunday October 20, 2024 @07:34PM (#41899422)
You could let users choose what to mirror, and one of those choices could be a big bucket of all the least available stuff, for pure preservationists who don't want to focus on particular segments of the data.

Sort of like the bittorrent algorithm that favors retrieving and sharing the least-available chunks if you haven't assigned any priority to certain parts.

Re:Internet Archive breached again through stolen access tokens by deafpolygon on Monday October 21, 2024 @12:06AM (#41900601)
My favorite question is: whether or not Bowser took the princess to another castle.
Re:Internet Archive breached again through stolen access tokens by card_zero on Monday October 21, 2024 @12:31AM (#41900695)
Since the IA had a collection of emulators (some of them running online*), and old ROMs and floppies and such, it could probably help with that one too.

* Strictly speaking, running in-browser, but that sounded like "Bowser" so I wrote online instead.

Re:Internet Archive breached again through stolen access tokens by dawnerd on Sunday October 20, 2024 @03:57PM (#41898049)
You already can, they have torrents for everything.
Re:Internet Archive breached again through stolen access tokens by diggan on Sunday October 20, 2024 @05:19PM (#41898563)
> they have torrents for everything

Including the index itself? That would be awesome.

Re:Internet Archive breached again through stolen access tokens by tourmalinetaco on Sunday October 20, 2024 @06:10PM (#41898902)
Their torrents suck and IME don’t update to changes in the archive.
Re:Internet Archive breached again through stolen access tokens by vundercind on Sunday October 20, 2024 @07:53PM (#41899505)
This is accurate, their torrent-generating system is basically broken to the point of being useless.
Re:Internet Archive breached again through stolen access tokens by addandsubtract on Sunday October 20, 2024 @09:09PM (#41899843)
Aren't torrents terrible at handling updates in general? If you want to make a change to the data, or even just add our remove data, you have to create a new torrent and somehow get people to update their torrent and data as well.
Re:Internet Archive breached again through stolen access tokens by macawfish on Sunday October 20, 2024 @09:39PM (#41899975)
There's a mutable torrent extension (BEP-46) but unfortunately I don't think it's widely supported. I think IPFS/IPNS is the more likely direction.
Re:Internet Archive breached again through stolen access tokens by tourmalinetaco on Monday October 21, 2024 @01:41AM (#41900988)
Which IA has moved into and hasn’t found much luck in, unfortunately.
Re:Internet Archive breached again through stolen access tokens by jpk on Monday October 21, 2024 @02:43AM (#41901320)
How come?
Re:Internet Archive breached again through stolen access tokens by rbanffy on Monday October 21, 2024 @04:19AM (#41901865)
Torrents are immutable in principle, which is good for preserving things. A new version of a set of files should be a new torrent.
Re:Internet Archive breached again through stolen access tokens by diggan on Monday October 21, 2024 @06:48AM (#41902743)
> Torrents are immutable in principle

In practice, that's mostly how they're being used.

But the protocol does support mutation. The BEP describing the behavior even has archive.org as an example...

> The intention is to allow publishers to serve content that might change over time in a more decentralized fashion. Consumers interested in the publisher's content only need to know their public key + optional salt. For instance, entities like Archive.org could publish their database dumps, and benefit from not having to maintain a central HTTP feed server to notify consumers about updates.

http://www.bittorrent.org/beps/bep_0046.html

Re:Internet Archive breached again through stolen access tokens by account42 on Monday October 21, 2024 @10:54AM (#41904861)
Specs are nice but does any client actually implement this?
Re:Internet Archive breached again through stolen access tokens by zelphirkalt on Monday October 21, 2024 @05:15AM (#41902160)
How would preservationists go about automatically updating the torrent and data they seed? Or would they need to manually regularly check, if they are still seeding the up-to-date content?
Re:Internet Archive breached again through stolen access tokens by creer on Sunday October 20, 2024 @02:30PM (#41897450)
And it's guaranteed not to happen if the efforts don't continue.
Re:Internet Archive breached again through stolen access tokens by acdha on Sunday October 20, 2024 @05:17PM (#41898545)
You could say the same thing about perpetual motion. Being realistic about why past efforts have failed is key to doing better in the future: for example, people won’t mirror content which could get them in trouble and most people want to feel some kind of benefit or thanks. People should be thinking about how to change dynamics like those rather than burning out volunteers trying more ideas which don’t change the underlying game.
Re:Internet Archive breached again through stolen access tokens by creer on Monday October 21, 2024 @12:50AM (#41900777)
There are certainly research questions and cost questions and practicality and subsetting and whatnot. Addressed by some ideas and not by others.

What there isn't is a currently maintained and advertised client and plan. That I can find. Clunky or not, incomplete or not.

There are other systems that have a rough plan for duplication and local copy and backup. You can easily contribute to them, run them, or make local copies. But not IA. (I mean you can try and cook up your own duplication method. And you can use a personal solution to mirror locally everything you visit and such.) No duplication or backup client or plan. No sister mirrored institution that you might fund. Nothing.

Re:Internet Archive breached again through stolen access tokens by WarOnPrivacy on Sunday October 20, 2024 @02:00PM (#41897206)
> nowhere near enough people actually put their storage where their mouths are.

Typically because most people who have the upload, don't know that they can. And if they come to the notion on their own, they won't know how.

If they put the notion to a search engine, the keywords they come up with probably don't return the needed ELI5 page.

As in: How do I [?] for the Internet Archive?, most folks won't know what [?] needs to be.

Re:Internet Archive breached again through stolen access tokens by TZubiri on Sunday October 20, 2024 @02:16PM (#41897342)
This is literally torrents. Just give up
Re:Internet Archive breached again through stolen access tokens by briandear on Sunday October 20, 2024 @03:11PM (#41897746)
The problem with torrents is they have a bad reputation since people use it to steal and redistribute other people’s content without their consent.
Re:Internet Archive breached again through stolen access tokens by card_zero on Sunday October 20, 2024 @03:47PM (#41897984)
Is there any form of torrent where you can do a full text search? That, to me, is the more important problem with torrents.
Re:Internet Archive breached again through stolen access tokens by TZubiri on Sunday October 20, 2024 @05:30PM (#41898641)
But internet archive doesn't do this? It's a key based search (url keys)
Re:Internet Archive breached again through stolen access tokens by card_zero on Sunday October 20, 2024 @11:57PM (#41900551)
Internet archive allows full text search of books, newspapers, etc.. Or anyway it did, before being breached.
Re:Internet Archive breached again through stolen access tokens by TZubiri on Monday October 21, 2024 @01:36PM (#41906380)
It does transcribe books (through imperfect OCR) so I guess that's possible. Never relied on it as I search by title and author.

But anyways not the case for the wayback product which is the unique core to IA.

Re:Internet Archive breached again through stolen access tokens by card_zero on Monday October 21, 2024 @03:07PM (#41907315)
That's not unique, not a product, and not the part I use most.

Well, OK, maybe other webpage archives don't work as well, I haven't tried them, but there are others. And they're newer, so don't have such extensive historical pages.

Large numbers of Wikipedia references (which relied on IA to prevent link rot) must be completely broken now.

Re:Internet Archive breached again through stolen access tokens by AlienRobot on Sunday October 20, 2024 @03:51PM (#41898015)
Give it a good reputation then.

What are some legal torrent trackers?

Re:Internet Archive breached again through stolen access tokens by unleaded on Sunday October 20, 2024 @04:18PM (#41898194)
archive.org to name one
Re:Internet Archive breached again through stolen access tokens by boomboomsubban on Sunday October 20, 2024 @04:53PM (#41898369)
That's debatable. Most of their torrents are for things under copyright, though any other decentralized archive would have the same problem.
Re:Internet Archive breached again through stolen access tokens by tourmalinetaco on Sunday October 20, 2024 @06:27PM (#41899007)
That’s a copyright problem. 99% of things made in the last 100 years fall under copyright.
Re:Internet Archive breached again through stolen access tokens by trod123 on Sunday October 20, 2024 @09:17PM (#41899874)
and a good number of things that were going to pass into copyright were further extended to 2053.
Re:Internet Archive breached again through stolen access tokens by ranger_danger on Sunday October 20, 2024 @09:27PM (#41899925)
Except when their own employees publicly tell people not to worry about copyright and just upload stuff anyway, they make it their own problem.
Re:Internet Archive breached again through stolen access tokens by ranger_danger on Sunday October 20, 2024 @05:30PM (#41898642)
What is your definition of a legal torrent tracker? I was not aware there were even any illegal ones.
Re:Internet Archive breached again through stolen access tokens by mikae1 on Sunday October 20, 2024 @05:53PM (#41898792)
> I was not aware there were even any illegal ones.

Depends on the jurisdiction. Remember what happened in the The Pirate Bay trial?

Re:Internet Archive breached again through stolen access tokens by ranger_danger on Sunday October 20, 2024 @09:22PM (#41899902)
My understanding is that that court case did not show that operating a torrent tracker is illegal, but specifically operating a (any) service with the explicit intent of violating copyright... huge difference IMO.

To me that's not even related to it being a torrent tracker, just that they were "aiding and abetting" copyright infringement.

Re:Internet Archive breached again through stolen access tokens by TZubiri on Sunday October 20, 2024 @09:49PM (#41900035)
Ok. But what is the case law in hosting illegal content? Sure you may operate a torrent, but if your client is distributing child porn, in my view, you bear responsibility.
Re:Internet Archive breached again through stolen access tokens by defrost on Sunday October 20, 2024 @10:38PM (#41900224)
I'm backing ranger_danger here.

In Law the technicalities matter.

Trackers generally do not host any content, just hashcodes and (sometimes) meta data descriptions of content.

If "your" (ie let's say _you_ TZubiri) client is distributing child pornography content because you have a partially downloaded CP file then that's on _you_ and not on the tracker.

The "tracker" has unique hashcode signatures of tens of millions of torrents - it literaly just puts clients (such as the one that you might be running yourself on your machine in the example above) in touch with other clients who are "just asking" about the same unique hashcode signature.

Some tracker affiliated websites (eg: TPB) might host searchable indexes of metadata associated with specific torrents (and still not host the torrents themselves) but "pure" trackers can literally operate with zero knowledge of any content - just arrange handshakes between clients looking for matching hashes - whether that's UbuntuLatest or DonkeyNotKong

Re:Internet Archive breached again through stolen access tokens by TZubiri on Sunday October 20, 2024 @11:41PM (#41900486)
We agree in that if my client distributes illegal content, I am responsible, at least in part.

On the other hand I also believe that a tracker that hosts hashes of illegal content, provides search facilities for and facilitates their download, is responsible, in a big way. That's my personal opinion and I think it's backed in cases like the pirate bay and sci hub.

That 0 knowledge tracker is interesting, my first reaction is that it's going to end up in very nasty places like Tor, onion, etc..

Re:Internet Archive breached again through stolen access tokens by defrost on Monday October 21, 2024 @12:22AM (#41900676)
> That 0 knowledge tracker is interesting,

Most actual trackers are zero knowledge.

A tracker (bit of central software that handles 100+ thousand connections/second) is not a "torrent site" such as TPB, EZTV, etc.

A tracker handshakes torrent clients and introduces peers to each other, it has no idea nor needs an idea that "SomeName 1080p DSPN" maps to D23F5C5AAE3D5C361476108C97557F200327718A

All it needs is to store IP addresses that are interested in that hash and to pass handfuls of interested IP addresses to other interested parties (and some other bookkeeping).

From an actual tracker PoV the content is irrelevant and there's no means of telling one thing from another other than size - it's how trackers have operated for 20+ years now.

Here are some actual tracker addresses and ports

    udp://tracker.opentrackr.org:1337/announce
    udp://p4p.arenabg.com:1337/announce
    udp://tracker.torrent.eu.org:451/announce
    udp://tracker.dler.org:6969/announce
    udp://open.stealth.si:80/announce
    udp://ipv4.tracker.harry.lu:80/announce
    https://opentracker.i2p.rocks:443/announce
Here's the bittorrent protocol: http://bittorrent.org/beps/bep_0052.html

Trackers can hand out .torrent files if asked (bencoded dictionaries that describe filenames, sizes, checksums, directory structures of a torrents contents) but they don't have to; mostly they hand out peer lists of other clients .. peers can also answer requests for .torrent files.

A .torrent file isn't enough to determine illegal content.

Pornography can be contained in files labelled "BeautifulSunset.mkv" and Rick Astley parody videos can frequently be found in files labelled "DirtyFilthyRepubicanFootTappingNudeAfrica.avi"

Given that it's not clear how trackers could effectively filter by content that never actually traverses their servers.

Re:Internet Archive breached again through stolen access tokens by TZubiri on Monday October 21, 2024 @12:58AM (#41900814)
Oh ok, it seems to be a misconception of mine then.

Mathematically a tracker would offer a function that given a hash, it returns you a list of peers with that file.

While a "torrent site" like TPB or SH, would offer a search mechanism, whereby they would host an index, content hashes and english descriptors, along with a search engine.

A user would then need to first use the "torrent site" to enter their search terms, and find the hash, then they would need to give the hash to a tracker, which would return the list of peers?

Is that right?

In any case, each party in the transaction shares liability. If we were analyzing a drug case or a people trafficking case, each distributor, wholesaler or retailer would bear liability and face criminal charges. A legal defense of the type "I just connected buyers with sellers I never exchanged the drug" would not have much chance of succeding, although it is a common method to obstruct justice by complicating evidence gathering. (One member collects the money, the other gives the drugs.)

Re:Internet Archive breached again through stolen access tokens by defrost on Monday October 21, 2024 @01:35AM (#41900954)
> A user would then need to first use the "torrent site" to enter their search terms, and find the hash, then they would need to give the hash to a tracker, which would return the list of peers?

> Is that right?

More or less.

> In any case, each party in the transaction shares liability.

That's exactly right Bob. Just as a telephone exchange shares liability for connecting drug sellers to drug buyers when given a phone number.

Clearly the telephone exchange should know by the number that the parties intend to discuss sharing child pornography rather than public access to free to air documentaries.

How do you propose that a telephone exchange vet phone numbers to ensure drugs are not discussed?

Bear in mind that in the case of a tracker the 'call' is NOT routed through the exchange.

With a proper telephone exchange the call data (voices) pass through the exchange equipment, with a tracker no actual file content passes through the trackers hardware.

The tracker, given a number, tells interested parties about each other .. they then talk directly to each other; be it about The Sky at Night -s2024e07- 2024-10-07 Question Time or about Debbie Does Donkeys.

Also keep in mind that trackers juggle a vast volume of connections of which a very small amount would be (say) child abuse related.

Re:Internet Archive breached again through stolen access tokens by TZubiri on Monday October 21, 2024 @11:36AM (#41905303)
Interesting. That's a good point.

I'll restate the principle of good usage to bad usage ratio, telephone providers are a well established service with millions of legitimate users and uses. Furthermore they are a recognized service in law, they are regulated, and they can comply with law enforcement.

They are closer to the ISP, which according to my theory has some liability as well.

It's just a matter of the liability being small and the service to society being useful and necessary.

To take a spin to a similar but newer tech, consider crypto. My position is that its legality and liability for illegal usage of users (considering that of exchanges and online wallets, since the network is often not a legal entity) will depend on the ratio of legitimate to ilegitimate use that will be given to it.

There's definitely a second system effect, were undesirables go to the second system, so it might be a semantical difference unrelated to the technical protocols. Maybe if one system came first, or if by chance it were the most popular, the tables would be turned.

But I feel more strongly that there's design features that make law compliance, traceability and accountability difficult. In the case of trackers perhaps the microservice/object is a simple key-value store, but it is semantically associated with other protocols which have 'noxious' features described above AND are semantically associates with illegal material.

Re:Internet Archive breached again through stolen access tokens by defrost on Monday October 21, 2024 @08:54PM (#41910135)
> I'll restate the principle of good usage to bad usage ratio, telephone providers are a well established service with millions of legitimate users and uses

Ditto trackers.

Have a look at the graphs here: https://opentrackr.org/

Over 10 million torrents tracked daily, on the order of 300 thousand connections per second, handshaking between some 200 million peers per week.

That's material from the Internet Archive, software releases, pooled filesharing, legitimate content sharing via embedded clients that use torrents to share load, and a lot of TV and movies that have variable copyright status

( One of the largest TV|Movie sharing sites for decades recent closed down after the sole operator stopped bearing the cost and didn't want to take on dubious revenue sources; that was housed in a country that had no copyright agreements with the US or UK and was entirely legal on its home soil.

Another "club" MVGroup only rip documentaries that are "free to air" in the US, the UK, Japan, Australia, etc. and in 20 years of publicaly sharing publicaly funded content haven't had any real issues )

> the ISP, which according to my theory has some liability as well.

The world's a big place.

The US MPA (Motion Picture Association - the big five) backed an Australian mini-me group AFACT (Australian Federation Against Copyright Theft) to establish ISP liability in a G20 country as a beach head bit of legislation.

That did not go well: Roadshow Films Pty Ltd v iiNet Ltd decided in the High Court of Australia (2012) https://en.wikipedia.org/wiki/Roadshow_Films_Pty_Ltd_v_iiNet...

    The alliance of 34 companies unsuccessfully claimed that iiNet authorised primary copyright infringement by failing to take reasonable steps to prevent its customers from downloading and sharing infringing copies of films and television programs using BitTorrent.
That was a three strikes total face plant:

    The trial court delivered judgment on 4 February 2010, dismissing the application and awarding costs to iiNet.

    An appeal to the Full Court of the Federal Court was dismissed.

    A subsequent appeal to the High Court was unanimously dismissed on 20 April 2012.
It set a legal precedent:

    This case is important in copyright law of Australia because it tests copyright law changes required in the Australia–United States Free Trade Agreement, and set a precedent for future law suits about the responsibility of Australian Internet service providers with regards to copyright infringement via their services.
It's also now part of Crown Law .. ie. not directly part of the core British Law body, but a recognised bit of Commonwealth High Court Law that can be referenced for consideration in the UK, Canada, etc.

> but it is semantically associated with other protocols which have 'noxious' features described above AND are semantically associates with illegal material.

Gosh, semantics hey. Some people feel in their waters that this is a protocol used by criminals and must therefore by banned or policed into non existance?

Is that a legal argument?

Re:Internet Archive breached again through stolen access tokens by GoblinSlayer on Monday October 21, 2024 @01:10PM (#41906150)
Are you sure open.stealth.si is a zero knowledge tracker? Some trackers reject unregistered torrents.
Re:Internet Archive breached again through stolen access tokens by defrost on Monday October 21, 2024 @09:01PM (#41910175)
The list I gave was of some public trackers, I made no claim that they were zero knowledge trackers, I simply made a statement that trackers needn't be aware of .torrent file manifests in order to share peer lists.

I also indicated above that having knowledge of .torrent manifests is problematic as that doesn't provide real actual knowledge of file contents just knowledge of file names ... LatestActionMovie.mkv might be a rootkit virus and HappyBunnyRabbits.avi might be the worst most exploitative underage pornography you can think of.

Some trackers are also private and require membership keys to access.

I was skating a lot as TZubiri seems unaware of many of the actual details and legitimate use cases, existing law, etc.

Re:Internet Archive breached again through stolen access tokens by ranger_danger on Sunday October 20, 2024 @10:19PM (#41900161)
I don't think TPB ever hosted any copyrighted content, even indirectly by its users. Torrent peers do not ever send any file contents through the tracker.
Re:Internet Archive breached again through stolen access tokens by AlienRobot on Sunday October 20, 2024 @05:36PM (#41898680)
A tracker that only tracks legal torrents, e.g. free software, OCRemix content, etc.
Re:Internet Archive breached again through stolen access tokens by boomboomsubban on Sunday October 20, 2024 @05:49PM (#41898765)
Re:Internet Archive breached again through stolen access tokens by TZubiri on Sunday October 20, 2024 @05:43PM (#41898730)
How would you keep the definition of legality without a centralizing authority?
Re:Internet Archive breached again through stolen access tokens by AlienRobot on Sunday October 20, 2024 @07:36PM (#41899432)
A tracker is a centralized authority.
Re:Internet Archive breached again through stolen access tokens by master-lincoln on Monday October 21, 2024 @07:54AM (#41903150)
But legality doesn't have a central authority. What is illegal in one jurisdiction is ok in another
Re:Internet Archive breached again through stolen access tokens by AlienRobot on Monday October 21, 2024 @12:57PM (#41906044)
Just track things that are legal everywhere or in most jurisdictions then.
Re:Internet Archive breached again through stolen access tokens by ranger_danger on Sunday October 20, 2024 @09:26PM (#41899921)
I don't see how that would be enforceable. Policy perhaps, but it would be impossible to absolutely prevent it from being used for that purpose IMO.
Re:Internet Archive breached again through stolen access tokens by seam_carver on Sunday October 20, 2024 @06:06PM (#41898870)
Humble Bundle. Various Linux iso
Re:Internet Archive breached again through stolen access tokens by ranger_danger on Sunday October 20, 2024 @05:30PM (#41898634)
To me this is like saying you shouldn't use a knife because they are also used by criminals.
Re:Internet Archive breached again through stolen access tokens by John_Cena on Sunday October 20, 2024 @05:37PM (#41898690)
This kind of talk is simply modern politik-speak. I can't stand it and the people who fall for their deception. Stretch the truth to disarm the constituents
Re:Internet Archive breached again through stolen access tokens by jonhohle on Sunday October 20, 2024 @07:51PM (#41899501)
In what way? Torrents are used all over for content delivery. Battle.net uses a proprietary version of BitTorrent. It’s now owned by Microsoft. There’s many more legitimate uses as commented by many others.

Criminals using tools does not make the tools criminal.

Re:Internet Archive breached again through stolen access tokens by TZubiri on Sunday October 20, 2024 @09:52PM (#41900052)
It's a matter of numbers, if tens of thousands of criminals use tech X, and it has few genuine uses, it's going to be restricted.

This has precedent in illegal drug categorization, it's not just about the damage, but its ratio of noxious to helpful use.

Re:Internet Archive breached again through stolen access tokens by Kerb_ on Sunday October 20, 2024 @10:35PM (#41900213)
That precedent was and still is legally used to federally regulate marijuana harsher than fentanyl, a precedent I strongly disagree with, so you'll have to forgive me for believing that the degree to which something causes harm matters more than the amount of misuse
Re:Internet Archive breached again through stolen access tokens by TZubiri on Monday October 21, 2024 @10:08AM (#41904339)
Marihuana ruins millions of young minds.
Re:Internet Archive breached again through stolen access tokens by master-lincoln on Monday October 21, 2024 @08:06AM (#41903245)
This precedent is problematic I think. It seems like the populist way of addressing issues. Always just following the biggest outcry instead of the symptoms. Just because there are currently more illegitimate users for a a thing we shouldn't prevent legitimate uses I think. The ratio might just be skewed because in the legitimate world you grow your audience with marketing investing tons of capital, while for illegitimate use cases, the marketing is often just word of mouth because of features.
Re:Internet Archive breached again through stolen access tokens by MichaelZuo on Monday October 21, 2024 @09:13AM (#41903814)
That's how most countries work, if enough people raise a big enough fuss, it's restricted like dangerous drugs.
Re:Internet Archive breached again through stolen access tokens by jonhohle on Monday October 21, 2024 @07:04PM (#41909475)
Literally millions of people use it (whether they know it or not).

Societies should criminalize behavior and then (shocker!) enforce the laws! Let tools be tools.

Re:Internet Archive breached again through stolen access tokens by thwarted on Sunday October 20, 2024 @05:57PM (#41898817)
The problem with file transfer is they have a bad reputation since people use it to [insert illegal or immoral activity here].

Then rename it from "torrent" to something else.

Re:Internet Archive breached again through stolen access tokens by TZubiri on Sunday October 20, 2024 @06:33PM (#41899049)
I'm not sure what the argumentative line is here. But file uploading and downloading needs to have accountability for hosting, which p2p obscures.

The bad reputation is inherent to the tech, not a random quirk.

Re:Internet Archive breached again through stolen access tokens by komali2 on Sunday October 20, 2024 @11:43PM (#41900495)
It doesn't really, you can host a server off a raw IP.

Downloading from example.com is just peer to peer with someone big. There's lots of hosting providers and DNS providers that are happy to host illegal-in-some-places content.

Re:Internet Archive breached again through stolen access tokens by TZubiri on Monday October 21, 2024 @10:07AM (#41904327)
Incorrect.

The protocols for downloading from example.com are assymettrical client server architectures, not symmetrical decentralized peer to peer.

Re:Internet Archive breached again through stolen access tokens by tourmalinetaco on Sunday October 20, 2024 @06:23PM (#41898984)
Torrents have a bad reputation due to malicious executables, I have never met someone who genuinely saw piracy as stealing, only as dangerous. In fact, stealing as a definition cannot cover digital piracy, as stealing is to take something away, and to take is to possess something physically. The correct term is copying, because you are duplicating files. And that’s not even getting into the cultural protection piracy affords in today’s DRM and license-filled world.
Re:Internet Archive breached again through stolen access tokens by master-lincoln on Monday October 21, 2024 @07:51AM (#41903131)
What does this have to do with torrents? If you get an executable from the internet it is widely known not to execute it if not trusted. You can get malicious executables from websites too.

If this is what people think we need to work on education...

Re:Internet Archive breached again through stolen access tokens by tourmalinetaco on Monday October 21, 2024 @02:10PM (#41906742)
Piracy also is not unique to torrents, and yet that was what GP used.

The average person, in my experience, can barely work a non-cellphone filesystem and actively stresses when a terminal is in front of them, especially for a brief moment. Education went out the window a decade ago.

Re:Internet Archive breached again through stolen access tokens by ycombinatrix on Sunday October 20, 2024 @08:07PM (#41899563)
The problem with websites is they have a bad reputation since people use it to steal and redistribute other people’s content without their consent.
Re:Internet Archive breached again through stolen access tokens by WarOnPrivacy on Sunday October 20, 2024 @06:08PM (#41898888)
> This is literally torrents. Just give up

Most casual visitors to IA don't know that. Which is the point.

Giving up is for others.

Re:Internet Archive breached again through stolen access tokens by immibis on Sunday October 20, 2024 @12:47PM (#41896653)
Keep in mind the IA archives a lot of garbage. If it could be more focused it would be more likely to work.
Re:Internet Archive breached again through stolen access tokens by Blackthorn on Sunday October 20, 2024 @03:31PM (#41897878)
The IA only works because it archives everything. You don't know what you need until you need it.
Re:Internet Archive breached again through stolen access tokens by Spooky23 on Sunday October 20, 2024 @03:53PM (#41898025)
Archives generally purposefully don’t have a strong editorial streak. My trash is your treasure.
Re:Internet Archive breached again through stolen access tokens by immibis on Monday October 21, 2024 @07:31AM (#41902996)
They have to if they don't want to use infinite space.
Re:Internet Archive breached again through stolen access tokens by unleaded on Sunday October 20, 2024 @04:06PM (#41898121)
personally I love all the random crap on IA!
Re:Internet Archive breached again through stolen access tokens by db48x on Sunday October 20, 2024 @12:53PM (#41896718)
The attempts have actually been focused on specific types of content, such as historical videos.
Re:Internet Archive breached again through stolen access tokens by jonny_eh on Monday October 21, 2024 @01:35AM (#41900958)
Nearly every entry in the library has a torrent file (which is a distributed storage system), but with the index pages down, they're not accessible.
Re:Internet Archive breached again through stolen access tokens by HappMacDonald on Monday October 21, 2024 @02:11AM (#41901134)
They're not using DHT?
Re:Internet Archive breached again through stolen access tokens by jdiff on Monday October 21, 2024 @05:53AM (#41902418)
They're not talking about peer discovery, they're talking about .torrent file discovery.
Re:Internet Archive breached again through stolen access tokens by highwaylights on Monday October 21, 2024 @05:04AM (#41902088)
You're correct, but even then you've still the problem of storage - the torrents are only useful (and there's a lot of them) if a sustainable number of seeds remain available.
Re:Internet Archive breached again through stolen access tokens by Wheatman on Monday October 21, 2024 @08:33AM (#41903470)
How abiut torrenting a collection of websites in one collection?

You can distribute less popular websites with more used ones to avoid losing it? And Torrents are good with transfering large files in my experience.

Re:Internet Archive breached again through stolen access tokens by baby_souffle on Monday October 21, 2024 @10:06AM (#41904313)
> You can distribute less popular websites with more used ones to avoid losing it?

So long as this distributed protocol has the concept of individual files, there _will_ be clients out there that allow the user to select `popular-site.archive.tar.gz` and not `less-popular.tar.gz` for download.

And what one person doesn't download... they can't seed back. Distributed stuff is really good for low cost, high scale distribution of in-demand content. It's _terrible_ for long term reliability/availability, though.

Re:Internet Archive breached again through stolen access tokens by armada651 on Monday October 21, 2024 @10:35AM (#41904619)
That is fundamentally the problem, no one wants to donate storage to host stuff they're not interested in.
Re:Internet Archive breached again through stolen access tokens by mrguyorama on Monday October 21, 2024 @02:06PM (#41906702)
More concretely, nobody wants to donate anything. They just want it to exist. Charity has never been a functional solution to normal coordination problems. We have centuries of evidence of this.
Re:Internet Archive breached again through stolen access tokens by johnisgood on Monday October 21, 2024 @06:37AM (#41902677)
If we want it to be distributed across laymen, we need something easier than opening torrent files (or inputting magnet URI) over a thousand times. Perhaps https://github.com/ipfs/in-web-browsers?
Re:Internet Archive breached again through stolen access tokens by bastawhiz on Monday October 21, 2024 @07:52AM (#41903136)
I can hardly find a healthy torrent for an obscure feature film that I care about. How am I supposed to find a healthy torrent for a random web page from the aughts?
Re:Internet Archive breached again through stolen access tokens by anacrolix on Thursday October 24, 2024 @10:47PM (#41941803)
Re:Internet Archive breached again through stolen access tokens by sumtechguy on Monday October 21, 2024 @08:08AM (#41903263)
The problem with their torrents is they are usually broken. Lots of complaints on them being broken. But no one fixing it.
Re:Internet Archive breached again through stolen access tokens by giancarlostoro on Monday October 21, 2024 @09:21AM (#41903897)
Maybe there needs to be a torrentable offline-first HTML file (only goes online to tell you if there's a new torrent whatsoever with more files), that lets you look through for more torrents (Magnet links are really tiny).

I miss when TPB used to have a CSV of all their magnet links, their new UI is trash. I can't even find anything like the old days, pretty much TPB is a dying old relic.

Re:Internet Archive breached again through stolen access tokens by Capricorn2481 on Monday October 21, 2024 @12:13PM (#41905654)
It's not abnormal for their torrents to be missing most of their direct downloads on the same page
Re:Internet Archive breached again through stolen access tokens by rolandog on Monday October 21, 2024 @11:17AM (#41905113)
Perhaps a naïve question, but hasn't this problem been solved by the FreeNet Project (now HyphaNet) [0]? (the re-write — current FreeNet — was previously called Locutus, IIRC [1]).

Side note: As an outsider, and someone who hasn't tried either version of FreeNet in more than almost 2 decades, was this kind of a schism like the Python 2 vs. Python 3 kerfuffle? Is there more to it?

[0]: https://www.hyphanet.org/

[1]: https://freenet.org/

Re:Internet Archive breached again through stolen access tokens by sanity on Monday October 21, 2024 @03:52PM (#41907837)
Hi, Freenet's FAQ explains the renaming/rebranding here: [1]

Neither version of Freenet is designed for long-term archiving of large amounts of data so it probably isn't ideally suited to replacing archive.org, but we are planning to build decentralized alternatives to services like wikipedia on top of Freenet.

[1] https://freenet.org/faq/#why-was-freenet-rearchitected-and-r...

Re:Internet Archive breached again through stolen access tokens by rolandog on Wednesday October 23, 2024 @07:12PM (#41930187)
Thanks for pointing it out and for correcting me!
Re:Internet Archive breached again through stolen access tokens by MattPalmer1086 on Sunday October 20, 2024 @12:18PM (#41896389)
Lots of Copies Keeps Stuff Safe

https://www.lockss.org/

This is a brilliant system relying on a randomised consensus protocol. I wanted to do my info sec dissertation on it, but its security model is extremely well thought out. There wasn't anything I felt I could add to it.

Re:Internet Archive breached again through stolen access tokens by ChadNauseam on Sunday October 20, 2024 @02:46PM (#41897571)
I wish IPFS wasn't so wasteful with respect to storage. I tried pinning a 200mb PDF on IPFS and doing so ended up taking almost a gigabyte of disk space altogether. It's also relatively slow. However its implementation of global deduplication is super cool – it means that I can host 5 pages and you can host 50, and any overlap between them means we can both help one another keep them available even if we don't know about one another beforehand.

For a large-scale archival project, it might not be ideal. Maybe something based on erasure coding would be better. Do you know how LOCKSS compares?

Re:Internet Archive breached again through stolen access tokens by diggan on Sunday October 20, 2024 @05:17PM (#41898547)
> I tried pinning a 200mb PDF on IPFS and doing so ended up taking almost a gigabyte of disk space altogether

Was that any file in particular? I just tried it myself with a 257mb PDF (as reported by `ls -lrth`) and doesn't seem to add that much overhead:

    $ du -sh ~/.ipfs
    84K     /home/user/.ipfs

    $ ipfs add ~/Downloads/large\ PDF\ File.pdf
    added QmSvbEgCuRNZpkKyQm6nA5vz5RTHW1nxb6MJdR4cZUrnDj large PDF File.pdf
     256.58 MiB / 256.58 MiB [============] 100.00%

    $ du -sh ~/.ipfs
    264M    /home/user/.ipfs
Re:Internet Archive breached again through stolen access tokens by TZubiri on Sunday October 20, 2024 @02:16PM (#41897330)
High Costs Makes Lots of Copies Unfeasible
Re:Internet Archive breached again through stolen access tokens by MattPalmer1086 on Sunday October 20, 2024 @02:24PM (#41897410)
That was actually one of the key constraints in the LOCKSS system, since it was designed to be run by libraries that don't have big budgets.

The design is really very good.

Re:Internet Archive breached again through stolen access tokens by Kinrany on Sunday October 20, 2024 @06:09PM (#41898900)
Is there a high level explanation of the model?
Re:Internet Archive breached again through stolen access tokens by oytis on Sunday October 20, 2024 @11:53AM (#41896170)
We'll need to find even more people willing to expose themselves to legal threats and cyberattacks then.
Re:Internet Archive breached again through stolen access tokens by trompetenaccoun on Sunday October 20, 2024 @01:40PM (#41897067)
The legal side is a big issue, true. The simplest and best workaround that I'm aware of is how the Arweave network handles it. They leave it up to the individual what parts of the data they want to host, but they're financially incentivized to take on rare data that others aren't hosting, because the rarer it is the more they get rewarded. Since it's decentralized and globally distributed, if something is risky to host in one jurisdiction, people in another can take that job and vice versa. The data also can not be altered after it's uploaded, and that's verifiable through hashes and sampling. Main downside in its current form is that decentralized storage isn't as fast as having central servers. And the experience can vary of course, depending on the host you connect to.

As for technical attacks, I'm not an expert but I'd assume it's more difficult for bad actors to bring down decentralized networks. Has the BitTorrent network ever gone offline because it was hacked for example? That seems like it would be extremely hard to do, not even the movie industry managed to take them down.

Re:Internet Archive breached again through stolen access tokens by Aachen on Sunday October 20, 2024 @06:54PM (#41899150)
> decentralized storage isn't as fast as having central servers.

With the 30-second "time to first byte" speed we all know and love from IA, I'm pretty sure it'd only get faster when you're the only person accessing an obscure document on a random person's shoebox in Korea as compared to trying to fetch it from a centralised server that has a few thousand other clients to attend to simultaneously

Re:Internet Archive breached again through stolen access tokens by jmb99 on Sunday October 20, 2024 @07:10PM (#41899266)
> decentralized storage isn't as fast as having central servers.

Depending on scale that’s not necessarily true. I find even today there are many services that cannot keep up with my residential fiber connection (3Gbps symmetrical), whereas torrents frequently can. IA in particular is notoriously slow when downloading from their servers, and even taking into account DHT time torrents can be much faster.

Now if all of their PBs of data were cached in a CDN, yeah that’s probably faster than any decentralized solution. But that will take a heck of a lot more money to maintain than I think is possible for IA.

Re:Internet Archive breached again through stolen access tokens by Aachen on Sunday October 20, 2024 @06:58PM (#41899170)
I collect, archive, and host data. Haven't gotten any threats or attacks. Not one. The average r/selfhosted user hiding their personal OwnCloud behind the DDoS maffia seems more afraid than one needs to be even for hosting all sorts of things publicly. I guess this fearmongering comes from tech news about breaches and DDoS attacks on organisations, similar to regular news impacting your regular worldview regardless of how it's actually going in the world or how things personally affect you
Re:Internet Archive breached again through stolen access tokens by trod123 on Sunday October 20, 2024 @09:21PM (#41899894)
Its not a problem until it suddenly is, and by the time it becomes a problem its too late. Its not fear mongering, its risk management and the laws are draconian and fail fundamental basis for a "rule of law", we have a "rule by law".
Re:Internet Archive breached again through stolen access tokens by Aachen on Monday October 21, 2024 @10:37AM (#41904649)
And that's how you get preppers: it's a remote problem until it's too late, let's prepare for every eventuality before it's suddenly too late!

Risk management is a balance, not fearmongering as you say. That's why I'd rather use advice from people with daily experience than look at the newsworthy experiences ("nothing happened today, again; regular security patches working fine" you'll never see) and conclude you'd attract threats and cyber attacks just by hosting backup copies of parts of the Internet Archive

Re:Internet Archive breached again through stolen access tokens by sksxihve on Sunday October 20, 2024 @12:20PM (#41896420)
There's no real financial incentive for people to archive the data as a singular entity so even less for a distributed collection. Also it's probably easier to fund a single entity sufficiently so they can have security/code audits than a bunch of entities all trying to work together.
Re:Internet Archive breached again through stolen access tokens by riiii on Sunday October 20, 2024 @12:48PM (#41896664)
Some people are motivated by more than just financial incentive.
Re:Internet Archive breached again through stolen access tokens by sksxihve on Sunday October 20, 2024 @01:15PM (#41896894)
That's true, but something like archiving the internet is very costly, IA has an annual budget in the tens of millions.
Re:Internet Archive breached again through stolen access tokens by trompetenaccoun on Sunday October 20, 2024 @01:44PM (#41897103)
Yes, it's a good point. Though they could take that money and reward people for hosting the data as well, couldn't they? They don't have to be in charge of hosting.
Re:Internet Archive breached again through stolen access tokens by sksxihve on Sunday October 20, 2024 @02:23PM (#41897399)
Yes, they could, that's not much different than a single company distributing the archive to multiple storage centers though. My original comment was about it being more cost effective for a single company to do that than coordinating with a bunch of disjoint entities.
Re:Internet Archive breached again through stolen access tokens by trompetenaccoun on Sunday October 20, 2024 @03:48PM (#41897992)
Our digital memory shouldn't be in the hands of a small number of organizations in my view. You're right about cost effectiveness. There are pros and cons to both but it's not just external threats that have to be considered.

History has always gotten rewritten throughout time. If you have a giant library it's easier for bad actors to gain influence and alter certain books, or remove them. This isn't just theoretical, under external pressure IA has already removed sites from its archive for copyright and political reasons.

There are also threats that are generally not even considered because they happen with rare frequency, but when they happen they're devastating. The library of Alexandria was burned by Julius Caesar during a war. Likewise, if all your servers are in one country that geographic risk, they can get destroyed in the event of a war or such. No one expects this to happen today in the US, but archives should be robust long term, for decades, ideally even centuries.

Re:Internet Archive breached again through stolen access tokens by delfinom on Sunday October 20, 2024 @06:05PM (#41898868)
>Our digital memory shouldn't be in the hands of a small number of organizations in my view.

I would wager at least 95% of "digital memory" archived is just absolute garbage from SEO spam to just some small websites holding no actual value.

The true digital memory of the world is almost entirely behind the walls of reddit, twitter, facebook, and very few other sites. The internet landscape has changed massively from the 90s and 2000s.

Re:Internet Archive breached again through stolen access tokens by sprkwd on Monday October 21, 2024 @05:57AM (#41902448)
We are currently in the middle of an information dark age and not many people have realised this yet.
Re:Internet Archive breached again through stolen access tokens by BlueTemplar on Sunday October 20, 2024 @05:31PM (#41898647)
So, about $0.01 per person per year ?

We are talking about an (almost) worldwide archive after all.

Re:Internet Archive breached again through stolen access tokens by __MatrixMan__ on Sunday October 20, 2024 @02:31PM (#41897459)
To make the web distributed-archive-friendly I think we need to start referencing things by hash and not by a path which some server has implied it will serve consistently but which actually shows you different data at different times for a million different reasons.

If different data always gets a different reference, it's easy to know if you have enough backups of it. If the same name gets you a pile of snapshots taken under different conditions, it's hard to be sure which of those are the thing that we'd want to back up for that particular name.

Re:Internet Archive breached again through stolen access tokens by Cheer2171 on Sunday October 20, 2024 @03:42PM (#41897960)
Done. It is called IPFS. The IA already supports it.

https://github.com/internetarchive/dweb-archive/blob/master/...

Re:Internet Archive breached again through stolen access tokens by __MatrixMan__ on Sunday October 20, 2024 @04:38PM (#41898278)
Right, what I'm saying is that now we need to get the rest of the web (or at least the parts we want to keep) on board.
Re:Internet Archive breached again through stolen access tokens by majorchord on Sunday October 20, 2024 @04:51PM (#41898354)
IPFS has shown that the protocol is fundamentally broken at the level of growth they want to achieve and it is already extremely slow as it is. It often takes several minutes to locate a single file.
Re:Internet Archive breached again through stolen access tokens by diggan on Sunday October 20, 2024 @05:12PM (#41898517)
The beauty is that IA could offer their own distribution of IPFS that uses their own DHT for example, and they could allow only public read access to it. This would solve the slow part of finding a file, for IA specifically. Then the actual transfers tend to be pretty quick with IPFS.

What's the point of using IPFS then? Others can still spread the file elsewhere and verify it's the correct one, by using the exact same ID of the file, although on two different networks. The beauty of content-addressing I guess.

Re:Internet Archive breached again through stolen access tokens by acdha on Sunday October 20, 2024 @05:20PM (#41898568)
That isn’t solving the problem, it’s just giving them more of it to work on. IA has enough material that I’d be surprised if they didn’t hit IPFS’s design limits on their own, and they’d likely need to change the design in ways which would be hard to get upstream.
Re:Internet Archive breached again through stolen access tokens by BlueTemplar on Sunday October 20, 2024 @05:22PM (#41898578)
Several minutes sounds more than fine for this purpose ?

Especially if it's about having an Internet Archive backup.

Re:Internet Archive breached again through stolen access tokens by Aachen on Sunday October 20, 2024 @06:52PM (#41899135)
I think the point is that it's already slow at the current amount of data, let alone when you stuff dozens more PB into it
Re:Internet Archive breached again through stolen access tokens by Groxx on Sunday October 20, 2024 @05:12PM (#41898515)
Which has a rather lengthy section explaining why it's currently a failed experiment: https://github.com/internetarchive/dweb-archive/blob/master/...

(this doc is 5-6 years old though, and I'm not sure what may have changed since then)

In my own (toy-scale) IPFS experiments a couple years ago it has been rather usable, but also the software has been utterly insane for operators and users, and if I were IA I would only consider it if I budgeted for a from-scratch rewrite (of the stuff in use). Nearly uncontrollable and unintrospectable and high resource use for no apparent reason.

Re:Internet Archive breached again through stolen access tokens by jonhohle on Sunday October 20, 2024 @08:02PM (#41899538)
There was a startup called Space Monkey that sold NAS drives where you got a portion of the space and the rest was used for copies of other people’s content (encrypted). The idea was you could lose your device, plug in a new one and restore from the cloud. They ended up folding before any of their resilience claims could be tested (at least by me).

Would be people be willing to buy an IA box that hosted a shard of random content along with the things they wanted themselves?

Re:Internet Archive breached again through stolen access tokens by gruez on Sunday October 20, 2024 @09:41PM (#41899985)
What happens when the user base explodes (eg. due to this event), and a few months layer they all get bored and drop out?
Re:Internet Archive breached again through stolen access tokens by mbirth on Sunday October 20, 2024 @09:43PM (#41900004)
Does anyone remember wua.la? It worked similar in that you offered local disk space in exchange for cloud storage. It was later bought by LaCie and killed off shortly after.
Re:Internet Archive breached again through stolen access tokens by TechSquidTV on Sunday October 20, 2024 @03:01PM (#41897680)
This has really shown that the be true. I am stuck in a situation right now where I have some lost media I want to upload but they have been down for over a week. I plan to create a torrent in the meantime but that means relying on my personal network connection for the vast majority of downloads up front. I looked into CloudFlare R2, not terrible but not free either.

I was looking into using R2 as a web seed for the torrent but I don't _really_ want to spend much to upload content that is going to get "stolen" and reuploaded by content farms anyway you know?

Re:Internet Archive breached again through stolen access tokens by tourmalinetaco on Sunday October 20, 2024 @06:40PM (#41899083)
Why not subscribe to a seedbox? They’re about $5/2TB/mo. It protects your IP, you can buy for only the month, and since seedboxes are hosted in DMCA-resistant data centers you can download riskier torrents lightning fast, meaning you’re not just spending money for others, you can get something out of it too.
Re:Internet Archive breached again through stolen access tokens by bigiain on Sunday October 20, 2024 @07:47PM (#41899485)
Any hints or recommendations on how to find a decent seedbox vendor? (working email in profile if you'd rather not name any in public)
Re:Internet Archive breached again through stolen access tokens by tourmalinetaco on Monday October 21, 2024 @01:40AM (#41900983)
I’ve only used r/Seedboxes on Reddit, and that’s yet to fail me. The specific one I mentioned is EvoSeedBox’s $5/mo tier with 130GB HDD + 2TB bandwidth which is all I’ve needed so far.
Re:Internet Archive breached again through stolen access tokens by gruez on Sunday October 20, 2024 @09:42PM (#41900002)
2TB of bandwidth or storage?
Re:Internet Archive breached again through stolen access tokens by tourmalinetaco on Monday October 21, 2024 @01:37AM (#41900967)
Bandwidth, though some provide multi-TB storage (I assume you pay out the nose however).
Re:Internet Archive breached again through stolen access tokens by Cheer2171 on Sunday October 20, 2024 @03:36PM (#41897913)
You say this as if the IA is not already deeply invested in the DWeb movement. If you go to a DWeb event in the Bay Area, there is a good chance it will be held at the IA.
Re:Internet Archive breached again through stolen access tokens by sschueller on Sunday October 20, 2024 @04:47PM (#41898320)
Yes, I was quite shocked when I found out that all their DCs are within driving distance.
Re:Internet Archive breached again through stolen access tokens by delfinom on Sunday October 20, 2024 @06:02PM (#41898841)
Yea so, who pays for the decentralized storage long term? What happens when someone storing decentralized data decides to exit? Will data be copied to multiple places, who is going to pay for doubling, tripling or more the storage costs for backups?

Centralized entities emerge to absorb costs because nobody else can do it as efficiently alone.

Re:Internet Archive breached again through stolen access tokens by jmb99 on Sunday October 20, 2024 @10:00PM (#41900098)
At the moment, IA stores everything, and I imagine that most people are picturing a scenario where the decentralized data is in addition to IA's current servers. At least, that's the easiest bootstrapping path.

>What happens when someone storing decentralized data decides to exit?

They exit, and they no longer store decentralized data. At the very least, IA would still have their copy(s), and that data can be spread to other decentralized nodes once it has been determined (through timeouts, etc) that the person has exited.

> Will data be copied to multiple places[...]?

Ideally, yes. It is fairly trivial to determine the reliability of each member (uptime + hash checks), and reliable members (a few nines of uptime and hash matches) can be trusted to store data with fewer copies while unreliable members can store data with more copies. Could also balance that idea with data that's in higher demand, by storing hot data lots of times on less reliable members while storing cold data on more reliable members.

> who pays for the decentralized storage long term? [...] who is going to pay for doubling, tripling or more the storage costs for backups?

This is unanswered for pretty much any decentralized storage project, and is probably the only important question left. There are people who would likely contribute to some degree without a financial incentive, but ideally there would be some sort of reward. This in theory could be a good use for crypto, but I'd be concerned about the possible perverse incentives and the general disdain the average person has for crypto these days. Funding in general could come from donations received by IA, whatever excess they have beyond their operating costs and reserve requirements - likely would be nowhere near enough to make something like this "financially viable" (i.e. profitable) but it might be enough to convince people who were on the fence to chip in few hundred GB and some bandwidth. This is an open question though, and probably the main reason no decentralized storage project has really taken off.

Re:Internet Archive breached again through stolen access tokens by NelsonMinar on Sunday October 20, 2024 @06:55PM (#41899160)
Is anyone using ArchiveBox regularly? It's a self-hosted archiving solution. Not the ambitious decentralized system I think this comment is thinking of but a practical way for someone to run an archive for themselves. https://archivebox.io/
Re:Internet Archive breached again through stolen access tokens by bigiain on Sunday October 20, 2024 @07:44PM (#41899472)
@nikisweeting the dev of archivebox was active in a thread about out here last week.

https://news.ycombinator.com/item?id=41860909

I'd never heard of it, but their responses to question and comments in that thread were really really good (and I now have "install and configure archivebox on the media server" on my upcoming weekend projects list).

Re:Internet Archive breached again through stolen access tokens by jumpingscript on Monday October 21, 2024 @03:33AM (#41901607)
I am self-hosting ArchiveBox through yunohost, for the odd blog article I come across and like. Not a heavy user per se, but it's doing its thing reliably.
Re:Internet Archive breached again through stolen access tokens by johndhi on Sunday October 20, 2024 @08:43PM (#41899729)
Ipfs
Re:Internet Archive breached again through stolen access tokens by patcon on Sunday October 20, 2024 @09:42PM (#41899999)
The internet archive shepherded the early https://getdweb.net/ community, and works with groups like IPFS, so they're well aware and offering operational support to decentralized storage projects. This has been going since at least 2016 when I was involved in some projects involving environmental data archiving during the Trump transition
Re:Internet Archive breached again through stolen access tokens by stavros on Sunday October 20, 2024 @11:11PM (#41900368)
I designed a system where you could say "donate this spare 2 TB of my disk space to the Internet Archive" and the IA would push 2 TB of data to you. This system also has the property that it can be reconstructed if the IA (or whatever provider) goes away.

Unfortunately, when I talked to a few archival teams (including the IA) about whether they'd be interested in using it, I either got no response or a negative one.

Re:Internet Archive breached again through stolen access tokens by 4gotunameagain on Monday October 21, 2024 @01:38AM (#41900972)
Why reinvent the wheel ?

There are so many proven distributed archiving systems, a lot of which are mentioned in these comments.

Re:Internet Archive breached again through stolen access tokens by stavros on Monday October 21, 2024 @05:44AM (#41902360)
What system of these allows me to donate a bunch of disk space to a provider of my choosing, without thinking about it afterwards?
Re:Internet Archive breached again through stolen access tokens by whywhywhywhy on Monday October 21, 2024 @05:25AM (#41902214)
Because the incentive will be archiving things they believe should be archived, you need the process to begin with what urls do you want to be archiving, then people will be incentivized for archiving the juicy stuff IA is used for and you just throw some stuff they didn't ask to archive in the remit of them storing what they want.
Re:Internet Archive breached again through stolen access tokens by stavros on Monday October 21, 2024 @08:24AM (#41903395)
I don't think that's necessarily true, I have a spare TB that I'd be glad to donate to the IA to store whatever they want in.
Re:Internet Archive breached again through stolen access tokens by boramalper on Monday October 21, 2024 @05:57AM (#41902442)
Is this open source or do you have any design docs? I love the idea and would love to learn more about it.
Re:Internet Archive breached again through stolen access tokens by stavros on Monday October 21, 2024 @06:00AM (#41902462)
The idea is that it'll be open source, I have a rough design doc here:

https://docs.google.com/document/d/1qKgIjUTef-I-BLWjn4sEIbYo...

I'll write up a more detailed article on it, though, it'll be good to at least have the doc public somewhere.

Re:Internet Archive breached again through stolen access tokens by TZubiri on Monday October 21, 2024 @10:11AM (#41904379)
Hosting something at a volunteer's drive, without any guarantees, is pretty useless. They can cease hosting, or have disk damage, and you lose data
Re:Internet Archive breached again through stolen access tokens by stavros on Monday October 21, 2024 @10:48AM (#41904787)
You're essentially saying that having an extra copy of data is equally as reliable as not having an extra copy of data. I would encourage you to think about this a bit more.
Re:Internet Archive breached again through stolen access tokens by TZubiri on Monday October 21, 2024 @11:30AM (#41905250)
For these parameters, yes.

If you have a raid, then you have 2 copies with like 99.99% availability and 5 mean time years to failure.

With a volunteer drive you have like ?% availability and ?% years to failure? You can't depend on it.

Also the average value of data is very low, you don't want to be making many copies of for no reason.

Re:Internet Archive breached again through stolen access tokens by stavros on Monday October 21, 2024 @11:41AM (#41905351)
That would mean that even with a million volunteer drives storing a file, you still wouldn't be able to depend on them, which is plainly wrong.

> Also the average value of data is very low, you don't want to be making many copies of for no reason.

The reason is that the value of that data is high to the archivist, since they want to preserve it.

Re:Internet Archive breached again through stolen access tokens by TZubiri on Monday October 21, 2024 @01:34PM (#41906362)
A million is out of the parameters of the case.

Realistically you won't get enough volunteer-storage to cover one IA. And even if you did, it wouldn't satisfy the mission requirements, which is to store reliably for decades all of the data.

Re:Internet Archive breached again through stolen access tokens by stavros on Monday October 21, 2024 @01:39PM (#41906413)
This isn't meant to be storage for IA, it's meant to be a distributed backup.
Re:Internet Archive breached again through stolen access tokens by TZubiri on Monday October 21, 2024 @03:28PM (#41907552)
Ah my bad, so it's not a replacement of IA. In that case it makes sense
Re:Internet Archive breached again through stolen access tokens by stavros on Monday October 21, 2024 @05:00PM (#41908483)
Yes, the idea is that this is a replacement for the torrents they make public. In case the IA goes away, we'll have this distributed dataset to fall back on.
Re:Internet Archive breached again through stolen access tokens by TZubiri on Monday October 21, 2024 @06:26PM (#41909221)
An archive of an archive
Re:Internet Archive breached again through stolen access tokens by rootsudo on Monday October 21, 2024 @02:26AM (#41901199)
I watched a hbo series about this once, I think it was called Pied Piper.
Re:Internet Archive breached again through stolen access tokens by scirob on Monday October 21, 2024 @05:42AM (#41902340)
LigGen / SciHub are model citizens in this regard. Use the best tech for the job . Torrents + IPFS + simple http mirrors all over . While their data is big its not as big as Archive.org https://libgen.is/repository_torrent/ so I guess one still needs the funding to go to these decentralized nodes and they are there mostly for resiliancy
Re:Internet Archive breached again through stolen access tokens by TZubiri on Monday October 21, 2024 @10:10AM (#41904365)
If so, why do they keep jumping from one dubious domain and TLD from another?
Re:Internet Archive breached again through stolen access tokens by skeaker on Monday October 21, 2024 @02:56PM (#41907204)
That's mentioned in the comment you're replying to as "simple HTTP mirrors." Those are vulnerable to takedowns but are kept up for the sake of easy accessibility to the public that doesn't know how to access any of the other options. Their availability has no real bearing on the availability of the other options beyond the tech savviness of the general public.
Re:Internet Archive breached again through stolen access tokens by sersi on Monday October 21, 2024 @10:39AM (#41904676)
If there was a way, I could dedicate 10 TB to IA and have the system automatically use those 10TB to store whatever is best I'd love that.

Right now there are torrents and I do keep any torrents I download from IA in my client for years but torrents means I only get to contribute by sharing the things I downloaded in the past.

Re:Internet Archive breached again through stolen access tokens by hacknewslogin on Monday October 21, 2024 @04:00PM (#41907926)
This sounds like a task that could be taken care of by public libraries. That, and supporting Tor. I just don't see it happening anytime soon, at least in the US.