3 ms·
He told the BBC there was no evidence yet that the data had been used maliciously. Huh? https://webcache.googleusercontent.com/search?q=cache:VlVylTZMmhAJ:www
by sillysaurus3 10y ago
He told the BBC there was no evidence yet that the data had been used maliciously.
Huh?
https://webcache.googleusercontent.com/search?q=cache:VlVylTZMmhAJ:www.hebeicy.com/supplyinfo/supply_detail.aspx%3Fpid%3D1529&num=1&hl=en&gl=us&strip=0&vwsrc=1 https://webcache.googleusercontent.com/search?q=cache:VlVylT...
That request is scrubbed now, but it contained an Uber driver's lat-long coordinates. I used it to look up where they were driving.
CloudFlare really aren't helping themselves with these statements. The people who decide whether to use CloudFlare are programmers, are programmers generally can't be duped with statistics like "1 in 3.3M requests were leaking data" (translation: 100k requests per day were leaking data[1]) or "There's no evidence anyone used this data maliciously" (translation: we have no idea what is being exploited).
[1] https://news.ycombinator.com/item?id=13719518 https://news.ycombinator.com/item?id=13719518 and https://news.ycombinator.com/item?id=13722606 https://news.ycombinator.com/item?id=13722606
- anon1385 10y agoThere's still leaked data all over google cache: https://webcache.googleusercontent.com/search?q=cache:oN9z-biFgzkJ:fujiyoutube.com/search.php%3Fq%3Dsithata+&cd=1&hl=en&ct=clnk&gl=us https://webcache.googleusercontent.com/search?q=cache:oN9z-b...
- mcphilip 10y agoCF should be clear in its response that working with third parties such as google to clear cached responses with overflow data is an ongoing process and that other parties may have cached responses that CF has no control over.
- tyingq 10y agoInteresting. That site still has pages in the yandex cache as well. http://hghltd.yandex.net/yandbtm?fmode=inject&url=http%3A%2F%2Ffujiyoutube.com%2Fsearch.php%3Fq%3Dautoriepas&tld=com&lang=lv&la=1487287680&tm=1487957179&text=%22Cf-Int-Brand-ID%22&l10n=en&mime=html&mysign=1487957443.743f8e2ee16e7c5deed26dfce54b89e4&cht=1&sign=5cdcdae13d2709c06bbd7356a8d7f0a3&keyno=0 http://hghltd.yandex.net/yandbtm?fmode=inject&url=http%3A%2F...
- JumpCrisscross 10y ago> CloudFlare really aren't helping themselves with these statements Seconded. For example, here is CloudFlare's Chief Technology Officer regarding their response time: "[Tavis, the Google engineer who discovered this bug, is] saying he’s frustrated but I’m a little bemused at why he’s frustrated with six days rather than 90" [1]. CloudFlare's CTO shouldn't be running around doing interviews with TechCrunch, let alone expressing bemusement about a fire from his camp. [1] https://techcrunch.com/2017/02/23/major-cloudflare-bug-leaked-sensitive-data-from-customers-websites/ https://techcrunch.com/2017/02/23/major-cloudflare-bug-leake...