Cloudflare Data Leak, Time to change all your website password

[kaizer01]

"Tavis Ormandy (Tavis Ormandy) of Google’s Project Zero uncovered a major vulnerability in the Cloudflare Internet infrastructure service. Essentially, web requests to Cloudflare-backed sites received answers which included random information from other Cloudflare-backed sites! This information could potentially include confidential information (private messages on dating sites, emails), user identity information (Personally Identifying Information (PII), and potentially in a healthcare context, Protected Health Information (PHI), or user, application, or device credentials (passwords, API keys, authentication tokens, etc.)"

more info here: https://medium.com/@octal/cloudbleed-how-to-deal-with-it-150e907fd165#.2u2x75fc7

Better to be safe than sorry.

 

[Windy]

This time cloudflare really bad in secure their system.

 

[HyperVmart]

Wow !! I am really glad i didnt sign up for their free service !...

 

[24x7serverman]

Cloudbleed was fixed just 7 hours after the discovery. :D

 

[SpetsnazHost]

I've noticed that most of the big websites that we trust usually gets data leaked/security breached.