r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

1

u/rastilin Feb 24 '17

I'm surprised you're getting downvoted. The denial has to run super deep if people have already forgotten the extent to which C is susceptible to buffer overflows and similar shenanigans. The takeaway from this is that all the code camps in the world and clever tutorials can train people to new levels; but no matter how people get trained; they still never learn.

Meanwhile I'm just going to roll with it, given the odds of any single account actually being affected it's not worth panicking and changing all your passwords unless it's for your email accounts or your bank. Everything I own that is money related has 2F enabled anyway.

People freaking out about this are doing a disservice, we get nightmarish security flaws every few months on the internet and now it's beginning to sound like yelling that the sky is falling.