Site Stuff Forum

Site Stuff Forum

Let's get meta.

Recent Cloudflare Security issue

+4 HS
I_Run_The_Dave's picture
February 27, 2017 at 9:13am
10 Comments

https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-clo...

Just posting this here because 11W uses Cloudflare.  The gist of the article is that the Cloudflare service was experiencing a memory leak sometimes.  This memory leak could have caused sensitive or private data to be sent from any Cloudflare site to any other Cloudflare site that used certain combinations of Cloudflare features.  I don't know whether or not 11W had any pages that could have triggered the bug, but it is possible that sensitive data owned by 11W was leaked to other Cloudflare sites that did trigger the bug.

What does this mean?

It means that the 11W private SSL key could have been leaked, as well as 11W user data such as passwords.  So if you use a password on 11W that you also use with other sites, then you should change your password on all of those sites (including 11W) because your password could have been leaked.  It's also good practice to not use the same username and password combination on multiple sites, as any of them could be untrustworthy and could steal your other accounts or defraud you since you have given them your credentials.

So if you are an 11W user and you care at all about security (you should), please change your password.

This is a forum post from a site member. It does not represent the views of Eleven Warriors unless otherwise noted.

View 10 Comments