However, it might be interesting to use some sort of verifiable storage format where hashes of checkpoints are distributed elsewhere, so that if someone does manage to get into The Internet Archive, they can’t go fiddle with past things without it becoming visible.
Why not use a write only medium, like CDs but obviously bigger capacity. Write once read many kind of thing. It’s an archive, it should not be able to be changed.
That’s a thought, though my guess is that access time constraints for something like a CD might mean that it could at most be a secondary form of storage.
However, it might be interesting to use some sort of verifiable storage format where hashes of checkpoints are distributed elsewhere, so that if someone does manage to get into The Internet Archive, they can’t go fiddle with past things without it becoming visible.
Why not use a write only medium, like CDs but obviously bigger capacity. Write once read many kind of thing. It’s an archive, it should not be able to be changed.
I guess you meant “write once”?
Anyway, this won’t prevent attacks that somehow swap the CD being read, or the backend logic for where to read the data from.
That’s a thought, though my guess is that access time constraints for something like a CD might mean that it could at most be a secondary form of storage.