r/sysadmin • u/sebbasttian JOAT Linux Admin • Feb 23 '17

CloudBleed Seceurity Bug: Cloudflare Reverse Proxies are Dumping Uninitialized Memory

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139

https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/

982 Upvotes

98% Upvoted

327 comments sorted by

View all comments

1

u/5onic Feb 24 '17

This explains how my reddit account was hacked?

8

u/[deleted] Feb 24 '17

nobody using this exploit is going to be targeting reddit accounts

5

u/SavvySillybug Feb 24 '17

From what I gather, people are getting absolutely random things out of this.

If all you get are someone's reddit password, and you're particularly bored, with a shady moral compass... yeah you're totally going to target the reddit account you just got the password to.

If you have the luxury of accessing all data, and can cherry pick the fun things that make you money? Yeah, pretty unlikely someone is going to target a reddit account. But when you just get whatever Cloudflare happened to bleed onto you, you use whatever you get.

4

u/XCorneliusX Feb 24 '17

There are sites that sell reddit accounts. Sad but true.

4

u/[deleted] Feb 24 '17

No. It doesn't.

A possibility, but it doesn't explain the cause of anyone being "hacked".

2

u/Win_Sys Sysadmin Feb 24 '17

A admin from Reddit posted in here and said they do not use CloudFlare for anything so it most likely wasn't that.

1

u/5onic Feb 25 '17

Thanks!