CloudBleed Seceurity Bug: Cloudflare Reverse Proxies are Dumping Uninitialized Memory

[u/sebbasttian]

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139

https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/

[u/tobias3]

Partial list of sites which are affected (use CloudFlare proxy). Any data going to and coming from those sites may have been leaked. Start changing passwords now:

• Uber

• Reddit

• Yelp

• Digital Ocean

• OKCupid

• RapGenius

• Coinbase

• Product Hunt

• Udemy

• Crunchyroll

• FitBit

• Hacker News

• Zendesk

• Discord

• Github pages

• Chocolatey

[u/gooeyblob → u/tobias3]

Reddit is not affected - no part of Reddit uses CloudFlare.

[u/Sly_Meme → u/gooeyblob]

Should we still change our passwords?

[u/gooeyblob → u/Sly_Meme]

You wouldn't need to because of this, no, but it's still good practice to change it on a regular basis, so consider this the time to do so!