The Internet Archive has brought its Wayback Machine back online "in a provisional, read-only manner" as it continues to recover from attacks that took the site down last week, founder Brewster Kahle said in a post last night. The archive.org home page points users to the now-functional Wayback Machine but notes that other Internet Archive services are temporarily offline.
Kahle said it was "safe to resume" the Wayback Machine's operations, but that it "might need further maintenance, in which case it will be suspended again." The Wayback Machine's "Save Page Now" feature that lets users capture a webpage manually is currently unavailable. The related openlibrary.org book-preservation website was still offline today.
Founded in 1996, the nonprofit Internet Archive crawls the web to preserve pages that are publicly available and has captured 916 billion web pages so far. It has a staff of 150 people and also provides free access to many videos, audio files, and books (though it was recently forced to delete 500,000 books after losing a copyright case).
DDoS attacks and data breach
Kahle said last week that the site was offline because of multiple DDoS (distributed denial of service) attacks. It also suffered a breach in September affecting 31 million user records.
Last week, hackers defaced the Internet Archive website with a message that said, "Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you on HIBP!"
HIBP is a reference to Have I Been Pwned, which was created by security researcher Troy Hunt and provides information and notifications on data breaches. The hacked Internet Archive data was sent to Have I Been Pwned and "contains authentication information for registered members, including their email addresses, screen names, password change timestamps, Bcrypt-hashed passwords, and other internal data," BleepingComputer wrote.
Kahle said on October 9 that the Internet Archive fended off a DDoS attack and was working on upgrading security in light of the data breach and website defacement. The next day, he reported that the "DDoS folks are back" and had knocked the site offline. The Internet Archive "is being cautious and prioritizing keeping data safe at the expense of service availability," he added.
"Services are offline as we examine and strengthen them... Estimated Timeline: days, not weeks," he wrote on October 11. "Thank you for the offers of pizza (we are set)."