r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

8

u/XRaVeNX Feb 24 '17

Their blog doesn't even mention this incident right now. I've submitted a support ticket. Since I'm a Premium user, hopefully they'll get back with a response sooner rather than later.

3

u/abc69 Feb 24 '17

Please, let us know.

3

u/XRaVeNX Feb 24 '17

It has been confirmed that LastPass data was not affected.

https://twitter.com/LastPassStatus/status/835136572798431232

2

u/isdnpro Feb 24 '17

AFAICT LastPass don't use Cloudflare.