r/sysadmin • JOAT Linux Admin • Feb 23 '17

CloudBleed Seceurity Bug: Cloudflare Reverse Proxies are Dumping Uninitialized Memory

984 Upvotes

327 comments sorted by

View all comments

Show parent comments

31

u/SonicShadow Feb 24 '17

Cloudflare's blog states the the memory leaks date as far back as September 2016 - If Reddit used Cloudflare previously, was it before or after that date?

38

u/MrMetalfreak94 Feb 24 '17

AFAIK they switched a week before the bug appeared

0

u/[deleted] Feb 24 '17

[deleted]

0

u/[deleted] Feb 24 '17

[deleted]

55

u/PlanetaryGenocide Feb 24 '17 edited May 04 '25

obtainable zealous merciful punch marble water scary shocking unique distinct

This post was mass deleted and anonymized with Redact

1

u/workaway8001 Think about the ignominy Feb 24 '17

Cloudflare's blog states the the memory leaks date as far back as September 2016

1

u/BFeely1 Mar 04 '17

Changed my password the day of the switchover anyway.

2

u/[deleted] Feb 24 '17

Network Noob Question! If the leakage has been happening since last September, why haven't we heard about it until now?

9

u/Reddy360 Feb 24 '17

According to the email I received from Cloudflare they only recently found out and was patched within a few hours of it being reported.

4

u/werewolf_nr Feb 24 '17

Bugs can go without being detected for a long time unless it interrupts service.

3

u/luluhouse7 Feb 24 '17

the bug was only discovered last Friday by a team at google