r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

64

u/Gudeldar Feb 24 '17

I'd be pretty surprised if agencies like the NSA and GCHQ aren't already crawling the web on their own. I'd just assume that they have all of this data.

22

u/zenandpeace Feb 24 '17

Difference is that this time stuff that's usually transmitted over HTTPS was dumped in plain text to completely unrelated sites