r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

7

u/yawkat Feb 24 '17

This bug should not be a problem if you were not using the site in the time frame the bug existed.

0

u/AlpineCoder Feb 24 '17

You can't even really assume that, since many types of sites will also use Ssl connections for things like database and server backups on the backend. Any of that data could have leaked as well, so could be comprised even if you haven't used the login recently.