Cloudflare

[gollum]

Not sure how many this affects - only does me due to Uber

But Cloudflare shit the bed

GitHub - pirate/sites-using-cloudflare: :broken_heart: Archived list of domains using Cloudflare DNS at the time of the CloudBleed announcement.

:broken_heart: Archived list of domains using Cloudflare DNS at the time of the CloudBleed announcement. - pirate/sites-using-cloudflare

Kate Conger  /  Feb 23, 2017  /  Security

Major Cloudflare bug leaked sensitive data from customers’ websites

Cloudflare revealed a serious bug in its software today that caused sensitive data like passwords, cookies, authentication tokens to spill in plaintext

[NTA]

On this topic: has anyone been asked to re-auth their Google account recently? Not all of mine have been affected, but I know a couple of people who have been asked to sign in again for the first time on long-standing devices

[Tim]

@NTA https://news.ycombinator.com/item?id=13721134

[NTA]

@Tim thanks. Figured it wasn't phishing early on because I actually forgot my password, so just tried random shit

[mariner4life]

So wait, this happened to me. Did i get fucked?

[NTA]

@mariner4life said in Cloudflare:

So wait, this happened to me. Did i get fucked?

The google thing? No - looks like a bunch of Google authorisation thingees un-authorised themselves. Now the fucking M-I-L is complaining it happened to her. And she's a total fucking moron so I need to physically be there to fix it instead of her just entering the fucking codes that her account keeps sending me.

[mariner4life]

I got suss when the text notification didn't work. So i logged in on my computer ( once I remembered my password) and it was all good.

We had a good ransomware the other day. An irate email about a credit card charge and a link to a "copy of the statement " that was thankfully caught.

[NTA]

Yeah it didn't work sending a text to my phone. Changed the password anyway and finally got there.

[Kirwan]

Going back to Cloudflare, that bug was caused by someone typing == instead of >=

One character out.

[NTA]

Fuck that sounds like something I'd do...

[mariner4life]

@NTA coding with prop fingers

[NTA]

@mariner4life and a halfback's patience. Under a winger's management

[mariner4life]

@NTA triple threat!

[Kirwan]

@NTA said in Cloudflare:

Fuck that sounds like something I'd do...

Exactly what I thought, just a small fuckup but caused a buffer to be too small and data to spill into other websites.

They are still trying find all the cached instances of it.

[NTA]

Yeah.

Not as big a dick move as the offshore developer who hard-coded the api key for one of our projects... then put it on Git