Reply To: 25 Feb 17 – Google Discovered Massive Web Leak
Simple C programming error causes buffer overflow, again. Many of Cloudflare’s customers are e-commerce sites so you wouldn’t really have a choice how securely the data is stored. Using HTTPS didn’t help because the data leaked from RAM and got inserted into random website traffic. Is there a list of Cloudflare’s affected customers? All I could find is the same three websites mentioned in most articles. Maybe many are still unsure themselves. That’s a lot of passwords to have to change.