Cloudflare breached, Data on many Sites has been leaked, Change all ur shit

Edit: Read sythes posts on this thread(below OP) he has shown an email from cloudflare regarding sythe itself and other important information/recommendations .

Screenshot

GitHub - pirate/sites-using-cloudflare: List of domains using Cloudflare DNS (potentially affected by the CloudBleed HTTPS traffic leak)

HF thread regarding it:

Source from discord: Liberal clam(Programmix#0748)

Just a heads up of a recently exposed vulnerability within CloudFlare's infrastructure. The vulnerability pertains to data exposure during transmission between CloudFlare's proxy servers and the target server. This has been the case for data transferred between 2016-09-22 and 2017-02-18.

Discord's Aethex developer, 'Liberal clam' made the announcement on his server within the hour of this post.
Passwords should be changed on all sites using CloudFlare.

Discord itself is listed as an affected site, but Discord confirmed that they are unlikely to have been affected as they do not use the features of CloudFlare that were vulnerable. But your password should be changed anyway, just for safety.

Affected sites and more information can be found in this list:
https://github.com/pirate/sites-using-cloudflare
Liberal's sources:
https://bugs.chromium.org/p/project-zero...il?id=1139
https://blog.cloudflare.com/incident-rep...arser-bug/
https://www.reddit.com/r/sysadmin/commen...e_reverse/
Edit | Some interesting news articles have popped up:
https://www.theregister.co.uk/2017/02/24...onal_data/
https://medium.com/@octal/cloudbleed-how....ahn7wcd5a
https://www.lifehacker.com.au/2017/02/cl...-affected/
https://www.privateinternetaccess.com/bl...t-history/



Note: All content was copied/pasted from the direct official HF thread where discussion is being held.

I have seen nothing on Sythe yet regarding this but it is a big deal.


tl;dr: change all ur pw's

I hope sythe wasn't one of the sites breached but I think we do use cloudflare

Anything to worry about @Sythe
?

 

About an hour ago there was a cloud flare error 522 or something and the site was down

 

this would be the same for coinbase, and discord presumably?

 

ALL HELL BROKE LOOSE! HIDE YOUR KIDS HIDE YOUR WIFE AND STEAL SHIT FOR NO REASON!

 

i dont need to change my password becuz i have 2fa @Wintastical

 

"this would be the same for coinbase" Dont see the Price of btc dropping low so far

 

My password is goldfish123

 

Your computer has been infected by the Zeus virus. Please call me from my Boiler Room in India for Customer Service directly from Cloudflare. They would normally charge you $1000 for cleanup but I will do it for $999.

 

So with cloudflare down any ddos protected sites with this plug in are surely F*'d right?

 

Not litterally down I mean down as in breached.. / leaked like its out of their power now

 

Your domain is not one of the domains where we have discovered exposed data in any third party caches. The bug has been patched so it is no longer leaking data. However, we continue to work with these caches to review their records and help them purge any exposed data we find. If we discover any data leaked about your domains during this search, we will reach out to you directly and provide you full details of what we have found.

 

lol

The fact you put time into making this thread.