Exclusive | This supplement can add years to your life and help with cholesterol, heart health and glowing skin New York Post
source
Catégorie : Articles
Internet Archive breached twice within days – CSO Online
Internet Archive continues to be in trouble as, according to unnamed claims made on Sunday, it suffered a secondary breach days after falling prey to a security incident that exposed 31 million unique user authentication records.
The second breach came to light as a bunch of users, requesting to have their data removed from the hacked “Wayback Machine,” received emails routed through the compromised ZenDesk mailer confirming the non-profit library has been hacked and that it is doing nothing about it.
“It’s dispiriting to see that even after being made aware of the breach weeks ago, IA has still not done the due diligence of rotating many of the API keys that were exposed in their Gitlab secrets,” the threat actor wrote in the message that was sent to the users from the hacked Zendesk mailer.
The threat actor, who this time used the hack to send out a mass email blast, emphasized that the emails themselves were possible owing to Internet Archive’s oversight as the used ZenDesk token was part of the stolen database.
On October 9, news of an Internet Archive breach broke out with reports of miscreants scooping up a 6.4 GB SQL file from the Wayback machine servers, amounting allegedly to 31 million unique user data.
“Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you on HIBP!” read a JavaScript alert shown on the compromised archive.org site.
Hours later, Brewster Kahle, group chairman at the Internet Archive confirmed the attack on X. “Sorry, but DDOS folks are back and knocked http://archive.org and http://openlibrary.org offline,” he said in the post. “@internetarchive is being cautious and prioritizing keeping data safe at the expense of service availability.”
In a follow-up post, however, Kahle said “DDoS fended-off for now.” It was done, he clarified, by disabling the affected JS library, scrubbing systems, and upgrading security.
In the emails that users received on Sunday, the threat actor said the stolen tokens could still be used since Internet Archive has still not rotated them. This included “a ZenDesk token with permissions to access 800k+ support tickets sent to info@archive.org since 2018.”
It is important to note that a large number of registered users is still at risk until at least the said rotation is performed. The hacked database holds authentication details for registered users, such as their email addresses, screen names, password modification timestamps, Bcrypt-hashed passwords, and other internal information.
“Whether you were trying to ask a general question, or requesting the removal of your site from the Wayback Machine-your data is now in the hands of some random guy. If not me, it’d be someone else,” the email added.
Shweta Sharma is a senior journalist covering enterprise information security and digital ledger technologies for IDG’s CSO Online, Computerworld, and other enterprise sites.
Sponsored Links
61 confirmed bird flu cases is leading to pandemic: Doctor | Morning in America – Yahoo! Voices
How Food Boxes Provided a Lifeline for Thousands During the Pandemic: Chabad of Coral Springs Wraps Up Four Years of Food Distributions – TAPinto.net
10 Most Underrated Performances in Horror Movies – Screen Rant
2024 was a stellar year for games, whether you wanted to hang out with shooty McSpace fascists, or fall in love with gaming’s most eclectic mix of genres – VG247
2024 may not immediately feel like it brought us gigantic, industry-shattering releases, but looking back, almost every month had a gem of a game.
2024 has been a year of massive, perhaps irreversible change for the games industry. The games media space, which has employed me for over a decade, has itself fallen on the hardest times I’d ever witnessed.
You simply couldn’t exist in/around the industry without the layoffs, studio closures, website shutterings, and game cancellations having some effect on your psyche or your gaming habits. And though I know I’ve played fewer games in 2024 than I may have ever done in recent memory, I still found enjoyment in several, and I want to highlight a couple of my favourites here.
You’re hopefully familiar with the VG247 format by now, but if this is somehow the only GOTY piece you’re reading from the site (or first?), I’m going to talk about three games that I consider to be the high points of 2024. Only one of which is the ultimate Game of the Year, whatever value that may hold.
I am genuinely quite surprised I haven’t seen much talk about No Rest for the Wicked in the end-of-year discourse. It’s not been nominated for any Keighley’s, and It almost feels as if many of us don’t know it exists. Considering its studio pedigree alone, that is quite surprising.
No Rest for the Wicked is the new release from the Ori games’ Moon Studios, and it’s easily the team’s most ambitious undertaking ever. This is a game that flirts with different genres and does the work to make each of them work within the context of its world. It’s part ARPG, isometric action game with Soulslike elements, a light town management sim, a survival/crafting game, and there was even room for a loot element. Somehow, it also manages to deliver easily some of the most compelling character work of 2024.
Though things have been improved since, the initial launch had a scattering of ideas, many of which couldn’t quite find harmony in the (admittedly difficult) genre medley Moon is going for. This is an early access release, so some of that is to be expected. But no matter how unsuccessful some of these ideas were, you came to No Rest for the Wicked to bask in its gloriously grim art, feel the heft of one of the most satisfying combat systems in any game, and be immersed in the goings-on of your hamlet’s denizens in between dungeon delves.
No Rest for the Wicked is a game that’s hard to quickly pitch to someone, regardless of how long that elevator ride is. If you haven’t heard/seen much of it, it’s best to get into it blind, because you’re going to be taken aback by its depth and clever blend of genres. I can tell you this, however, it’s probably not what you think it is.
If I were to be an ostentatious games media asshole, I’d probably make a grand declaration that the feeling Dragon’s Dogma 2 is going for, above all else, is to be a reflection of the real world’s inexlipcable frustrations. I’ve already wrote that one of the most attractive things about it is how little it cares about creating a “video game-y” experience, in the traditional sense – so you could say that I already have!
Dragon’s Dogma 2 is not a game that’s willing to meet you halfway. It’s a game that wants to deliver a specific kind of unforgiving experience, both in its challenging combat as well as the oodles of missable content its world hides. It’s so eager to abandon many standard video game conventions in the pursuit of a really specefic experience.
If you played the first game, the sequel is almost exactly the same game. In fact, the ‘2’ in the title doesn’t appear until you’re into the post-game. It’s almost an admission on the part of Capcom that there may no be nowhere else to go, no other limits to push. I wish other 2024 releases – and real life BS – didn’t cause me to fall off, but I’ll always be fond of how it made me feel as I played it, and long after I was done creeping up on some big fellas to chip away at their gigantic health bars.
In a year as fraught with layoffs and unprecedented uncertainty about job security, is it any wonder that simple game from a bygone era is the sort of thing that stuck out the most to me in 2024? Warhammer 40,000: Space Marine 2 really is an uncomplicated game whose whole schtick can be summarised in one sentence, and everyone reading that would know exactly the kind of experience they’re in for. It’s been called the best Xbox 360 game of 2024 for a reason.
Space Marine 2 is obviously more than a lost record from a bygone era; it’s a confident, incredibly competent game that doesn’t promise much, but delivers on its premise as often as you’d expect, and like it to. There’s a really nice balance between standard shooting and melee combat. It’s done so well, in fact, you’d have to wonder if more games should copy it. The campaign is short enough that, on a first playthrough, you may not always notice any of its shortcomings. There’s just enough panache and production value to distract you. Multiplayer replicates the simplicity of all those lost multiplayer modes from the many, many Xbox 360 games that didn’t need them, but had them anyway. And co-op, well, it exists as a fairly compelling reason to explore a side of the narrative the main campaign doesn’t cover.
Like many games from that era, however, there’s a lot to criticise here, too. The narrative is entirely straightfaced, and isn’t remotely interested in challenging the fascist underpinnings of its fiction in any way. In fact, anyone unfamiliar with the source material would rightly assume Space Marines are the heroes of this story, because of the way they’re portrayed. Even aside from its narrative challenges, Space Marine 2’s gameplay sequence are often safe, without much in the way of encounter design or mechanical innovation. There’s decent variety, but again, you sort of wish it had just a little bit more.
While that is consistent of its character as an “old” game, it leaves a lot of room for experimentation. More than anything, it makes me look forward to the inevitable sequel even more. Think of all the growth! I just hope it doesn’t take 13 years to come out!
Warhammer 40,000: Space Marine 2
PS5, Xbox Series X/S, PC
Sign in and unlock a world of features
Get access to commenting, homepage personalisation, newsletters, and more!
Black Friday Warhammer 40,000: Space Marine 2 drops to just $50 for Black Friday
Metal Boxes "It's likely we'll add in eventually" Space Marine 2 creative director chips in on Chaos customisation and PvE missions coming to the game
SABER OUR SOULS UPDATE: Metro studio 4A Games to remain with Embracer Group, rather than being acquired by Space Marine 2 developer Saber Interactive
WEB GATE Space Marine 2 has opened the door for thousands into one of richest sci-fi IPs out there, I hope future games venture into stranger places
MONEY MAKER Too broke for Space Marine 2? Roblox might have a solution for the fiscally weak Warhammer fan
New Brothers Its official, Warhammer 40,000: Space Marine 2 is one of the biggest games of the year after it breaks its own Steam concurrent record
Waagh Excited for Space Marine 2? Here are some other Warhammer 40k games you should check out!
POSITVE THOUGHTS Praise the emperor! Space Marine 2 hits Very Positive on Steam the day before its general release
VG247 is owned by Gamer Network Limited, an IGN Entertainment company and subsidiary of Ziff Davis. © 2024 Gamer Network Limited, 18 Mansell Street Level 3, London, E1 8AA, United Kingdom. Company number 03882481. All rights reserved. No part of this website or its content may be reproduced without the copyright owner’s permission.
Stolen Access Tokens Lead to New Internet Archive Breach – Infosecurity Magazine
Reporter, Infosecurity Magazine
Hours after the Internet Archive was reportedly back on its feet following a wave of cyber-attacks, it seems that the world’s largest digital library is in hot water again.
On October 20, several Internet Archive users and media outlets reported having received an email seemingly from the Internet Archive Team sharing a stolen access token for the digital library’s Zendesk account, a customer service platform that provides tools for managing support tickets.
The email accused the Internet Archive of not doing the due diligence of rotating many of the API keys that were exposed in their GitLab secrets.
It continued: “As demonstrated by this message, this includes a Zendesk token with perms to access 800K+ support tickets sent to info@archive.org since 2018.”
“Whether you were trying to ask a general question, or requesting the removal of your site from the Wayback Machine your data is now in the hands of some random guy. If not me, it'd be someone else.”
Although this email came from an unauthorized source, it appears to have passed email security checks, suggesting it came from an authorized Zendesk server.
Security researching group Vx-underground commented on X: “It appears that the person(s) who compromised The Internet Archive still maintain some form of persistent access and are trying to send a message.”
Jake Moore, a global cybersecurity advisor at ESET, said this episode shows that “it is vital that companies act swiftly in a full audit [following such an attack] as it is clear that malicious actors will come back time and time again to test their new defenses.”
Internet Archive suffered a series of cyber-attacks over the past week, including distributed denial-of-service (DDoS) attacks, a JavaScript-based website defacement and a data breach.
The pro-Palestinian hacktivist group BlackMeta claimed the DDoS attacks, however, the data breach could come from a different threat actor.
The news site BleepingComputer said the hacker behind the Internet Archive breach contacted them and claimed they managed to get hold of an exposed GitLab configuration file on one of the organization's development servers, services-hls.dev.archive.org.
This file allegedly contained an authentication token allowing the threat actor to download source code from Internet Archive.
This source code likely contained the application programmable interface (API) access tokens for Internet Archive's Zendesk customer support system.
Ev Kontsevoy, CEO of Teleport, commented: “This attack could mean the threat actor now has access to more than 800 support tickets. While many have been critical of Internet Archive for not rotating API keys, it can be challenging in the aftermath of a breach for organizations to pick through the blast radius of an attack to prevent further exploitation.”
“An instant, at-hand view of access relationships is critical in today’s threat landscape. If you can intervene directly with the affected identities and resources, you can manage the incident without disrupting your broader user community,” he added.
Neither Internet Archive nor its founder, Brewster Kahle, have communicated about the stolen access tokens or the Zendesk-approved email.
Internet Archive and GitLab were contacted by Infosecurity but did not respond to requests for comment on this issue at the time of writing.
Where To Find The World's Most Endangered Animals Of 2025 – TheTravel
Russia Turns to Bitcoin for International Trade Amid Sanctions – BeInCrypto
No IndyCar races being shown on Fox Sports 1 in 2025 – Beyond the Flag
IndyCar announced during the 2024 season that they would be moving on from NBC upon the expiration of the current media rights deal and joining Fox on a new multi-year deal that is set to go into effect in 2025.
The deal is said to be worth around $25 million annually, which marks a roughly 25% increase from the $20 million paid out annually by NBC. But it is believed that NBC actually offered the series more than Fox did to stay on as its exclusive broadcast partner.
One of the main reasons why IndyCar opted to go with Fox is the fact that Fox could offer the series something that NBC couldn't: all 17 races on network television.
All 17 races on the 2025 schedule, plus several hours of both days of qualifying for the 109th running of the Indy 500 at Indianapolis Motor Speedway, are set to be shown on Fox as opposed to Fox Sports 1.
This is a stark contrast to what the series had with NBC, which split up its races between NBC and USA Network. Even the majority of the races during Fox's portion of the 2025 NASCAR Cup Series broadcast schedule are set to be shown on Fox Sports 1 as opposed to Fox, and a majority of the races during NBC's portion are set to be shown on USA as opposed to NBC.
IndyCar is set to become the only premier motorsport series in North America to have all of its races broadcast live on network television.
This is, of course, subject to change, depending on weather delays and other unforeseen circumstances that could cause late adjustments to be made. So fans should still familiarize themselves with accessing Fox Sports 1, Fox Sports 2, and the Fox Sports App, just to be prepared.
Even if not needed for any races themselves, these networks are still set to be a part of the 2025 schedule anyway. All practice and qualifying sessions are slated to be aired live on Fox Sports 1 and Fox Sports 2. This includes both days of Indy 500 qualifying, before Fox is set to take over during the late hours of both.
During NBC's deal, these sessions were carried exclusively by Peacock, requiring fans to purchase a premium subscription to watch live.
Fox Sports 1 and Fox Sports 2 are also set to become the new homes for Indy NXT, the series one step below the NTT IndyCar Series.
The IndyCar on Fox broadcast team has not yet been announced for 2025.
Indy 500 announcement confirms 33rd car; Bump Day looms. dark. Next. Indy 500 announcement confirms 33rd car; Bump Day looms
The 2025 IndyCar season is scheduled to get underway on the streets of St. Petersburg, Florida on Sunday, March 2. Live coverage is set to be provided by Fox starting at 12:00 p.m. ET.
feed
© 2024 Minute Media – All Rights Reserved. The content on this site is for entertainment and educational purposes only. Betting and gambling content is intended for individuals 21+ and is based on individual commentators' opinions and not that of Minute Media or its affiliates and related brands. All picks and predictions are suggestions only and not a guarantee of success or profit. If you or someone you know has a gambling problem, crisis counseling and referral services can be accessed by calling 1-800-GAMBLER.