Welcome to our New Forums!

Our forums have been upgraded and expanded!

Welcome to Our New Forums

  • Our forums have been upgraded! You can read about this HERE

A hidden type of threat to archival sites?

Anaten Piewalker

New member
Joined
Sep 19, 2018
Messages
50
Location
Helatrobus, Galactic Confederacy HQ Planet, Specia
https://news.ycombinator.com/item?id=28218304
https://www.arxiv-vanity.com/papers/2108.05939/

This is an overlooked type of threat to archival sites, which I know JoS uses as backups. I perceive a need to let you and all authentic Revealer of Truth sites know of this. There is a lot of tech speak here so I will do my best to put it in plain English so you can understand what is going on with this. It involves denial of access to Internet resources, so that common sharing methods such as the Wayback Machine, Dropbox, etc., get more difficult.

Abstract. To perform a longitudinal investigation of web archives and detecting variations and changes replaying individual archived pages, or mementos, we created a sample of 16,627 mementos from 17 public web archives. Over the course of our 14-month study (November, 2017– January, 2019), we found that four web archives changed their baseURIs and did not leave a machine-readable method of locating their new base URIs, necessitating manual rediscovery.
(emphasis mine)

It appears the archival sites can covertly change their "base URLS" so that the web crawlers cannot find them. The web crawlers update their data anyway but this takes time. And in the meantime these URLs can be changed any number of times, so that folks search Google etc., and do not find them. This is potentially a new, very treacherous type of shadow banning, and can slip under the radar of alternative-media sites, since technically the sites are still on the 'Net but yet aren't, since on the 'Net these days it is all about being able to find them on the major search sites, and the majority of people aren't adept at curating their links that they share or post. Even duck duck go and other alternative search sites are affected since they operate on these URLs.

Many, though not all, Memento-compatible web archives construct URI-Ms that contain both the URI-R and the Memento-Datetime. For example, for the URI-M http://www.collectionscanada.gc.ca/webarchives/20060208075019/http://www.cdc.gov/, the URI-R is http://www.cdc.gov/ and the Memento-Datetime is represented by the 14-digit date string 20060208075019, which is Wed, 08 Feb 2006 07:50:19 GMT.

Web archives can differ in how they handle URI-Ms that returned an HTTP 404 Not Found or 503 Service Unavailable status code during capture. Some archives will return an HTTP 200 OK status code and include the archived error page in the HTTP response body. Other archives, such as the Internet Archive and Archive-It, will respond with the original status code; they return an archived 404 Not Found for URI-Ms that returned a 404 Not Found upon capture.

It seems to me from this, that an URL originating from one of these sites can be arbitrarily changed by simply having the process simply open the entity, and then save it, multiple times. This gives it a new date stamp, so that this link now has a different hash date -- the "20060208075019" in the example above --and any links referring to it are now broken.

Links posted on forums such as this one can be broken this way any number of times, so that the sites appear to be down when they aren't. "Oh, we didn't attack or bring down the site, see, they are still there, Kerry's Irish Grass Fed butter would melt in our mouths. Not me. Ida Know. Wee-za innocent Jo0s, quit pickin' on us".

The way around this is to post links that are real, normal looking ones. Avoid ones with a lot of numbers and hashes, which are generated by processes subject to this type of screwing around. I.e., just random examples:

https://news.ycombinator.com/ -> OK
https://news.ycombinator.com/item?id=28218304 -> OK since it still starts with https://news.ycombinator.com/, and the "ID number" is generated by the site itself, Hacker News
https://books.google.com/books?id=Q94RBAAAQBAJ&pg=PA294&lpg=PA294&dq=what+are+baseURIs&source=bl&ots=tSMkZaZtfi&sig=ACfU3U28Kd7B_JG5BM-EGjo99GS0JIu6eg&hl=en&sa=X&ved=2ahUKEwiGloS2k77yAhXTRDABHeLlCZEQ6AF6BAgbEAM#v=onepage&q=what%20are%20baseURIs&f=false -> NO, since it is a server back-end generated URL, note all the random computer generated hash, and is subject to this type of arbitrary "updating".

Or else regularly check links on one's own posts to be sure they are still working links, and pay attention to replies that say the links are broken, and repost correct ones. All it'll take is to revisit the sites and repost, since they are still there, only the links have changed.

The enemy owns all the major tech assets and there is no limit to how devious they can get in making access to alternative truth sites inconvenient or impossible. All major companies and sites use this type of on the fly web address generating, so conceivably this type of attack could be extended beyond archival sites and used to kill amaz0n.com orders, Instac3rt orders, etc., rendering grocery order tracking, for example, effectively undoable. In another post was mentioned that certain countries are not letting folks into grocery stores without proof of vaccination, so conceivably at least they can order online -- except that with this type of attack, even that gets rendered inconvenient or impossible. These poor folks will have no choice but to either get the j00 jab or suffer frustrating delays in online food delivery -- or starve.

I see that this could affect even cryptocurrency transactions as many of these rely on these computer generated URLs prepared specifically for crawlers. Yes, crypto wallets tie in directly to these crypto assets, bypassing this web vulnerability. But many folks will rely on web access to them, subjecting them to this vulnerability -- and potentially enough of a psychological distrust factor can be engendered, to turn many folks off to crypto. Then the central banks can trout out their own digital currency as their "solution" to "unreliable" cryptos -- which is just the same dollar, yen, etc., fiat currency, except this time super-controlled by them, with no anonymity and subject to access to funds turned off for any reason by any government entity.

Constructive comments and corrections are welcome, as I do not pretend to be perfect, but this is the situation as I see it.

I advise tech people to read up more on this here: https://www.w3.org/Provider/Style/URI
 

Al Jilwah: Chapter IV

"It is my desire that all my followers unite in a bond of unity, lest those who are without prevail against them." - Satan

Back
Top