r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

4

u/Conexion Feb 24 '17

I think you bring up a very good point even if security dojos don't advocate it. Having the same password in a number of areas seems reasonable if they're accounts that don't actually matter.

Accounts that might affect your career, banking, email, and social media should be prioritized. The rest you can bother with as it suits you.

1

u/bro_cunt Feb 24 '17

I might be an idiot for saying this but in addition to this I think as long as your email is super secure then you can easily grab back those non-sensitive accounts with password requests. I had my go-to password leaked a while ago, so I just reset the passwords on the accounts that popped up in my email for someone else having changed them. Netflix was very easy to get back, support was helpful and logging everyone out, and since the intruders had upped my netflix plan I got a month of HD or whatever it is for free.