Docskillz

Computer Love => Security => Topic started by: Skhilled on February 25, 2017, 05:02:48 AM

Title: CloudBleed HTTPS Traffic Leak
Post by: Skhilled on February 25, 2017, 05:02:48 AM
'Cloudbleed' Bug may have exposed millions of sites' user passwords! In the links that follow, there are a huge listing of most of te sites affected but not all of them. There are some very big names that have been affected by this. Keep in mind that this does not mean you have been or will be infected but that a possibly infected may be forthcoming! You have been warned so, please, change your passwords!

This (and more) are one of the MANY reasons why I do not use anything named "cloud"! Here's some sites with more info on this:

http://www.huffingtonpost.ca/2017/02/24/cloudbleed-bug-passwords-compromised_n_14989650.html (http://www.huffingtonpost.ca/2017/02/24/cloudbleed-bug-passwords-compromised_n_14989650.html)

https://www.slashgear.com/cloudflare-leak-which-sites-has-cloudbleed-affected-24476007/ (https://www.slashgear.com/cloudflare-leak-which-sites-has-cloudbleed-affected-24476007/)

https://github.com/pirate/sites-using-cloudflare/blob/master/README.md (https://github.com/pirate/sites-using-cloudflare/blob/master/README.md)

If your hosting has a cloudflare feature in cPanel or you use anything that uses "The Cloud", DO NOT USE IT!!! This is part of the problem. Too many people put their trust into things on the net that they have no knowledge of...
Title: Re: CloudBleed HTTPS Traffic Leak
Post by: Ken. on February 25, 2017, 08:35:19 AM
Thanks for the tip Steve.
My cPanel dose have CloudFlare, but I've never used it... don't actually know what it's used for.

DL'ing the list of sites now.