Around January 11, 2026, archive.today (aka archive.is, archive.md, etc) started using its users as proxies to conduct a distributed denial of service (DDOS) attack against Gyrovague, my personal blog. All users encountering archive.today's CAPTCHA page currently load and execute the following Javascript: setInterval(function() { fetch("https://gyrovague.com/?s=" + Math.random().toString(36).substring(2, 3 + Math.random() * 8), { referrerPolicy: "no-referrer",…

Far too many netizens still try to ignore this or even come up with reasons why gyrovague is the bad guy here.

Alternative archive pages:

archive.org
ghostarchive.org
archivebox.io (self-hosted)

But how else to bypass a paywall?

I've read relevant articles and clicked old links - they all seem to be history. The only ones that still work just look for the article in various archives - the subject of this post always amongst them. The same applies to this article, but there's still some good tips.

Here is the original article from 2023: https://gyrovague.com/2023/08/05/archive-today-on-the-trail-of-the-mysterious-guerrilla-archivist-of-the-internet/ and what Patakallio has to say about it today:

The post mentions three names/aliases linked to the site, but all of them had been dug up by previous sleuths and the blog post also concludes that they are all most likely aliases, so as far as “doxxing” goes, this wasn’t terribly effective.

Here is a relevant ArsTechnica article: https://arstechnica.com/tech-policy/2026/02/wikipedia-bans-archive-today-after-site-executed-ddos-and-altered-web-captures/

Wikipedia editors discovered that the archive site altered snapshots of webpages to insert the name of the blogger who was targeted by the DDoS.

archive.today (.ph, .is, .md, .fo, .li, .vn) also loads a pixel and javascript from mail.ru. The script mentions lamoda.ru, kommersant.ru, dzen.ru, ad.mail.ru, vk.com, vkontakte.ru, ok.ru, odnoklasseniki.ru. I haven't researched this further, but I think one can assume that your IP address will be spread across all relevant Russian websites. 10 years ago I would have said "so what? The Russians have social media too" but today you can safely assume that all this data is available to the government itself and is actively contributing to the hybrid war.

All in all, archive.today has always been in the "too good to be true" category. Call me suspicious.

And once again because it's important:

The Wikipedia guidance points out that the Internet Archive and its website, Archive.org, are “uninvolved with and entirely separate from archive.today.”

all 3 comments

sorted by: hot top controversial new old
[–] 16 points 8 months ago (1 child)

Wikipedia editors discovered that the archive site altered snapshots of webpages to insert the name of the blogger who was targeted by the DDoS.

Shoulda have led with that.

  • source
  • hideshow 1 child comment
  • [–] 1 point 7 months ago*

    But how else to bypass a paywall?

    any1 found an alternative?

  • source
  • 26 comments in c/privacy@lemmy.world view that post
    [–] 9 points 8 months ago

    Would just like to add the ublock was updated to block this ddos attack so, moral qualms aside, you can use the archive without participating in the attack.

    I point this out but archive.is has content literally available nowhere else.

  • source
  • [–] 9 points 8 months ago

    I, for one, would not trust archive.today if they stoop down to covert ddosing by their users web browsers. Who knows what else they feel entitled to use you for then.

  • source
  • [–] 9 points 8 months ago (5 children)

    This is months old and yes there has been fallout, but posting it as if it was new is misleading.

  • source
  • hideshow 5 child comments
  • [–] 15 points 8 months ago (2 children)

    People are still using it so I think there's some benefit in continuing to spread the information. Some are completely unaware of the situation, others don't realize that the .ph/.li/.md ones are run by the same operator as .today.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 8 months ago

    Exactly, it makes no sense to just stop spreading factual information. The people must know the truth, and by saying that it was already known is honestly naïve. This kind of behaviour must stop, as all it does is disregard the actual threat.

  • source
  • parent
  • [–] [S] 7 points 8 months ago* (last edited 8 months ago)

    It's still happening. Even more so, as the owner of archive.xx now also manipulates archived pages.

    there has been fallout

    I disagree with any attempt to portray this as some sort of tiff between netizens. No, gyrovague is very clearly being attacked because whoever runs the archive got angry, scared, who knows, for someone doing journalism on them. Over two years later, too.

    Their original article from 2023 totally endorses archive.today, and there is no doxxing happening there. According to the article linked in this post:

    The post mentions three names/aliases linked to the site, but all of them had been dug up by previous sleuths and the blog post also concludes that they are all most likely aliases, so as far as “doxxing” goes, this wasn’t terribly effective.

    And, having read that older article, I totally agree.

    Since many many people use this archive service every day, there's also justified and legitimate public interest.

  • source
  • parent
  • load more comments (1 reply)
    [–] 1 point 8 months ago

    Question about https://archivebox.io/

    Does it get around paywalls ?

  • source
  • [–] 0 points 8 months ago (10 children)

    I do wonder what the motivation of gyrovague to dox the owner of archive.today was?

    From Hacker News:

    "Gyrovague", the author of the post we're commenting under has for reasons unknown engaged in targeted harassment of the owner of "archive.today". Now the owner of archive.today is attempting a rather lazy DoS attack against gyrovague.com. A rather mild response to gyrovague attempting to bring the archive.today owner physical harm by spreading potentially identifying information about them.

    There's really very little to be said about this whole thing besides that Gyrovague should try to be a less awful person in the future.

    It is relevant to this discussion to mention that archive.today keeps in the public sphere that which governments and powerful people have scrubbed out of general awareness by applying various forms of pressure. So we should expect them to come under pressure too.

    Maybe related, maybe not: Wikipedia's owner came under pressure it seems to muddy the debate around the genocide in Gaza. Archive.today will hold a record of the propaganda warfare in mainstream media and more ephemeral web content like videos/blogs uploaded from within Gaza. So by excluding this particular archive Wikipedia seems to be prioritising media sources that are manipulated by governments and the powerful.

  • source
  • hideshow 10 child comments
  • [–] [S] 0 points 8 months ago (9 children)

    “Gyrovague”, the author of the post we’re commenting under has for reasons unknown engaged in targeted harassment of the owner of “archive.today”. Now the owner of archive.today is attempting a rather lazy DoS attack against gyrovague.com. A rather mild response to gyrovague attempting to bring the archive.today owner physical harm by spreading potentially identifying information about them.

    There’s really very little to be said about this whole thing besides that Gyrovague should try to be a less awful person in the future.

    I disagree with any attempt to portray this as some sort of tiff between netizens. No, gyrovague is very clearly being attacked because whoever runs the archive got angry, scared, who knows, for someone doing journalism on them. Over two years later, too.

    Their original article from 2023 totally endorses archive.today, and there is no doxxing happening there. According to the article linked in this post:

    The post mentions three names/aliases linked to the site, but all of them had been dug up by previous sleuths and the blog post also concludes that they are all most likely aliases, so as far as “doxxing” goes, this wasn’t terribly effective.

    And, having read that older article, I totally agree.

    Since many many people use this archive service every day, there’s also justified and legitimate public interest.

    No, whoever runs archive.today turned negative attention on themselves through their reactions. Keep in mind, they now not only DDOS but also manipulate archived pages to further disparage gyrovague.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 2 points 8 months ago* (last edited 8 months ago) (8 children)

    I disagree with your disagreement :p

    It is a common manipulative method of praising something right before landing a substantive blow on it as a way lending your argument credibility.

    Anonymouse has the most wonderful posts I have ever read, however I believe in this case he is down playing the threat to the owner of Archive.today that is represented by doxing them. Snowden isn't hiding in Russia because he loves the weather. Assange didn't hide in the Columbian Embassy because he liked their exercise bike. There's a reason that the person who released the Panama Papars is only know as John Doe. And why can't Francesca Albanese's bank cards no longer work. Amongst the powerful elites are psychopaths.

    Acting as if doxing someone who undermines the elite's grip on PR is some benign act and irrelevant to the owner of archive.today's reaction is a leading distortion of the reality of the situation.

  • source
  • parent
  • hideshow 8 child comments
  • [+] 2 points 8 months ago (3 children)
  • [–] [S] 0 points 8 months ago* (last edited 8 months ago) (1 child)

    It is a common manipulative method of praising something right before landing a substantive blow on it as a way lending your argument credibility.

    Yeah you clearly didn't read the original article.

    There is no "substantive blow", he ends it with announcing that he will buy them a coffee on buymeacoffee.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 8 months ago

    You responses are most helpful and you are, no doubt, a charming fellow however you don't seem to understand that doxing can be a very serious problem for some people. Maybe I'll buy you a coffee!?

  • source
  • parent
  • [–] 1 point 8 months ago

    What a shitty website - i cant make it past the «we will track all kinds of shit from you»

  • source
  • [–] -2 points 8 months ago

    This is a privacy forum and you work for Google. That is a case for you being the bad guy.

  • source
  • [+] -9 points 8 months ago (3 children)
  • [–] 7 points 8 months ago (2 children)

    Why do you keep spamming this? Looking to train or counter train AI?

  • source
  • parent
  • hideshow 2 child comments
  • 14 comments in c/privacy@programming.dev view that post
    [–] 20 points 8 months ago* (3 children)

    I tried reading up on this whole thing, and my understanding is that Gyrovague, tired of archive.today bypassing paywalls, decided to dox who the owner of archive.today is. Counterarguments that the info "was already out there" was made, yada yada, and then Gyrovague's blog began getting DDoS'ed and edits on archive.today would replace names with Gyrovague's to make them appear as someone into CSAM.

    DDoS'ing is a bit childish, but it's the internet, what weapons besides it do you really have.. Oh right, if you're an archiving site like archive.today is, I guess you could tamper with all your data to make it appear as if the person you're DDoS'ing is a pedophile.. Riiight.
    So there's no way of trusting the accuracy of the data on archive.today anymore, it's literally tainted, talk about shooting oneself in the foot, or perhaps more apt: Cutting off one's nose to spite one's face.

  • source
  • hideshow 3 child comments
  • [–] 14 points 8 months ago

    I’m sorry, nobody should use this service, and I’m tired of the “he tried to doxx” excuse.

    This is slander and harassment, and if you’re one of the “oh it’s fine, someone told me the other guy is kind of a jerk”, you can fuck off.

    Creating fake material to associate an innocent person with CSAM is fucked up, and honestly the founder of this site deserves to be sued and possibly jailed for it.

    You don’t do that. Ever.

  • source
  • parent
  • [–] 12 points 8 months ago

    Archive.today - a service about preserving internet history - tampering with content shows that they can tamper with content and are willing to tamper with content.
    Archive.today has reduced their own value to 0.

    Regardless of any other drama here.
    Archive.today has been caught tampering with content it is archiving.

  • source
  • parent
  • [–] [S] 11 points 8 months ago

    I tried reading up on this whole thing, and my understanding is that Gyrovague, tired of archive.today bypassing paywalls, decided to dox who the owner of archive.today is.

    wdym "tired of"? Their original article from 2023 totally endorses archive.today, and there is no real doxxing happening there. According to the article linked in this post:

    The post mentions three names/aliases linked to the site, but all of them had been dug up by previous sleuths and the blog post also concludes that they are all most likely aliases, so as far as “doxxing” goes, this wasn’t terribly effective.

    And, having read that older article, I totally agree.

    Since many many people use this archive service every day, there's also justified and legitimate public interest.

    I therefore also disagree with any attempt to portray this as some sort of tiff between netizens. No, gyrovague was very clearly attacked because whoever runs the archive got angry, scared, who knows.

    And right now, yeah, it's tainted:

    And just like that, archive.today lost all of it’s legitimacy.

  • source
  • parent
  • [–] 4 points 8 months ago
    [–] 3 points 8 months ago* (last edited 8 months ago) (3 children)
  • [–] 2 points 8 months ago (3 children)

    Why are you posting this several-weeks-old piece of news that has already had several fediverse threads made about it to so many communities right now? Why is it so important to you that people think about it again? Has anything important about it happened very recently?

  • source
  • hideshow 3 child comments
  • [–] 2 points 8 months ago (1 child)

    Did not see any of that. Please link.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 8 months ago

    Blah blah woof woof internet drama as usual. The functional question that remains (and that matters) is only one: which archive tool to use next that bypasses paywalls.

  • source
  • 13 comments in c/privacy@lemmy.dbzer0.com view that post
    [–] 12 points 9 months ago (2 children)

    this is why i like to disable Javascript if its not necessary using noscript.

  • source
  • hideshow 2 child comments
  • [–] 10 points 9 months ago (4 children)

    Link to a post a while back about archive.is (and other archive.* sites) sending data to Russia. Post discusses this article

  • source
  • hideshow 4 child comments
  • [–] 6 points 9 months ago (3 children)

    The linked article is nothing more than incompetent, bad-faith fearmongering. It has already been debunked in this comment. Long story short: literally every request mentioned in this article is blocked by any ad blocker with default settings, which you should be using anyway.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 8 months ago* (last edited 8 months ago)

    The linked article is nothing more than incompetent

    Fair enough, it wasn't very good. But rn it seems like I (and also the writers of that article) was proven right to be leery of archive.xx

    Any info that goes to any Russian website these days can be considered going straight to the government, and therefore harmful, fueling their hybrid war.

    Without explicitely using a Russian or Russia-related website.

    In your linked, older comment you repeatedly state that it's only trackers and counters, but you should also mention that each time this happens a visitor's IP (and most likely full browser profile) is stored somewhere along the article they clicked on. People do not necessarily know this.

  • source
  • parent
  • [–] 2 points 8 months ago (1 child)

    It seems that in some cases (piefed) my post only appears as a bump on a previous post, without my additions, so here they are as a comment:


    Around January 11, 2026, archive.today (aka archive.is, archive.md, etc) started using its users as proxies to conduct a distributed denial of service (DDOS) attack against Gyrovague, my personal blog. All users encountering archive.today's CAPTCHA page currently load and execute the following Javascript: setInterval(function() { fetch("https://gyrovague.com/?s=" + Math.random().toString(36).substring(2, 3 + Math.random() * 8), { referrerPolicy: "no-referrer",…

    Far too many netizens still try to ignore this or even come up with reasons why gyrovague is the bad guy here.

    Alternative archive pages:

    archive.org
    ghostarchive.org
    archivebox.io (self-hosted)

    But how else to bypass a paywall?

    I've read relevant articles and clicked old links - they all seem to be history. The only ones that still work just look for the article in various archives - the subject of this post always amongst them. The same applies to this article, but there's still some good tips.

    Here is the original article from 2023: https://gyrovague.com/2023/08/05/archive-today-on-the-trail-of-the-mysterious-guerrilla-archivist-of-the-internet/ and what Patakallio has to say about it today:

    The post mentions three names/aliases linked to the site, but all of them had been dug up by previous sleuths and the blog post also concludes that they are all most likely aliases, so as far as “doxxing” goes, this wasn’t terribly effective.

    Here is a relevant ArsTechnica article: https://arstechnica.com/tech-policy/2026/02/wikipedia-bans-archive-today-after-site-executed-ddos-and-altered-web-captures/

    Wikipedia editors discovered that the archive site altered snapshots of webpages to insert the name of the blogger who was targeted by the DDoS.

    archive.today (.ph, .is, .md, .fo, .li, .vn) also loads a pixel and javascript from mail.ru. The script mentions lamoda.ru, kommersant.ru, dzen.ru, ad.mail.ru, vk.com, vkontakte.ru, ok.ru, odnoklasseniki.ru. I haven't researched this further, but I think one can assume that your IP address will be spread across all relevant Russian websites. 10 years ago I would have said "so what? The Russians have social media too" but today you can safely assume that all this data is available to the government itself and is actively contributing to the hybrid war.

    All in all, archive.today has always been in the "too good to be true" category. Call me suspicious.

    And once again because it's important:

    The Wikipedia guidance points out that the Internet Archive and its website, Archive.org, are “uninvolved with and entirely separate from archive.today.”

  • source
  • hideshow 1 child comment
  • [–] [S] 2 points 8 months ago

    But how else to bypass a paywall?

    You could try looking to see if your local libraries give you access to those sources.

    Besides that, I personally use Bypass Paywalls Clean the browser extension, but it also sometimes pulls the content from archive.today.

  • source
  • parent
  • [–] 3 points 9 months ago (2 children)

    I'm a bit of a troglodyte, I had to look up what PII referred to.

    Whoever is doing the responding and the petty bullshit with the captcha stuff isn't doing themselves any favors by being a gland end unnecessarily. I'm not really curious as to who is behind the archive website so the blog authors need to unmask them is lost on me admittedly. I do use the paywall bypass site, but given the person's responses I'll try not to use it at all going forward, for however much that actually makes a difference.

  • source
  • hideshow 2 child comments
  • [–] 1 point 9 months ago (1 child)

    There have been a bunch of posts and articles about this. I don't know why it keeps getting reposted on lemmy tbh. Both sides are complete dicks. From what I understand, the "poor victim" was the initial asshole and both sides have kept escalating it.

  • source
  • parent
  • hideshow 1 child comment
  • 2 comments in c/tech@programming.dev view that post
    [–] 1 point 4 months ago (1 child)

    The claim that archive.today is orchestrating a DDoS via CAPTCHA execution contradicts its known architecture, which relies on user agents to fetch content rather than actively injecting malicious payloads into client-side scripts. If the CAPTCHA page is indeed executing arbitrary JavaScript, this suggests a severe supply chain compromise or a misunderstanding of how the service's proxy network functions. Can you provide the specific user-agent headers or network traces showing the origin of the traffic to distinguish between a botnet hijack and a false positive?

  • source
  • hideshow 1 child comment