Security Alert

A place to talk about anything at all.
User avatar
Zakizo
Frequent Poster
Frequent Poster
Posts: 162
Joined: Sat Mar 14, 2015 5:21 am
Location: Discord

Security Alert

Postby Zakizo » Fri Feb 24, 2017 5:43 am

tl;dr Change all of your passwords everywhere in the list below immediately.

https://github.com/pirate/sites-using-cloudflare

Information has been passed on (via Discord for me) that a large amount of personal information may now be compromised.

Cloudflare, one of the largest CDN providers that power a huge number of highly popular websites, has been affected by a severe bug that exposed the raw contents of Cloudflare server memory to the public.

A principal engineer at Cloudflare stated:

"Memory leak" in the title is misleading. This is memory disclosure, and it’s easily one of the worst security incidents of all time. What is here is disclosure of arbitrary encrypted data (but the plaintext is disclosed), for millions of domains. That data, which could include passwords, credit card numbers, and other secret data, is now sitting in caches distributed all over the world. You can even query some of it from Google right now. Simply awful.


More info on this here:
https://blog.cloudflare.com/incident-re ... arser-bug/

Notable affected sites I feel I should mention here include Discord, Reddit, and Crunchyroll, which are present on the provided list.
Image

Return to “Fruity Rumpus General”

Who is online

Users browsing this forum: No registered users and 1 guest