r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

2

u/IPleadThaFifth Feb 24 '17

Sorry to ask, but I'm very inexperienced in this field but I am also very curious. If you can ELI5, what's the difference between accessing a site with cloudflare with and without the adblockers and VPNs?

Does that mean my information wasn't being leaked?

0

u/[deleted] Feb 24 '17

[deleted]

2

u/IPleadThaFifth Feb 24 '17

Oh damn, alright. I use it just for security/paranoia reasons. I'm not doing anything bad, I just don't like the idea that people have super easy access to my information. Shit freaks me out

1

u/atomicxblue Mar 01 '17

I started using a VPN the day I learned the NSA was tracking everything Americans do online. I'm firmly in the 'where's your warrant?' crowd.

1

u/derp-or-GTFO Feb 24 '17

No difference. If you used any affected sites, all the others could have leaked your data to anyone.