7 ms·

Matthew, with all due respect, you don't know what you're talking about. view-source:http://cc.bingj.com/cache.aspx?q=&d=4857656909960944&w=rj9cgKJZJYOhAbxPoQ4

• acqq 10y ago
  Exactly, it looks that the cleaning people up to now only looked for the most obvious matches (just searching for the Cloudflare unique strings). There's surely more where "only" the user data are leaked and are still in the caches.
• sidcool 10y ago
  Can anyone provide some context please ?
  • Gigablah 10y ago
    For anyone being linked directly to the post: the link back to the parent page is right on top: https://news.ycombinator.com/item?id=13718752 https://news.ycombinator.com/item?id=13718752 You can also click on "parent", and repeat as necessary.
  • asdfaoeu 10y ago
    The bottom of the file has contents from another connection. Notably HTTP/1.1 Host gateway.discord.gg
  • myth_buster 10y ago
    Great(x3) parent https://news.ycombinator.com/item?id=13718752 https://news.ycombinator.com/item?id=13718752
• dorianm 10y ago
  Some IPv6 internal connections, some websocket connections to gateway.discord.gg, rewrite rules for fruityfifty.com's AMP pages, and some internal domain `prox96.39.187.9cf-connecting-ip.com`. And some sketchy internal variables: `log_only_china`, `http_not_in_china`, `baidu_dns_test`, and `better_tor`.
• phaed 10y ago
  Thousands of years from now, when biological life on this planet is all but extinct and superintelligent AI evolving at incomprehensible rates roam the planet, new pieces of the great PII pollution incident that CloudFlare vomited across the internet are still going to be discovered on a daily basis.
  • mrich 10y ago
    I was expecting this: Thousands of years from now, when biological life on this planet is all but extinct and superintelligent AI evolving at incomprehensible rates roam the planet, taviso will still be finding 0-days impacting billions of machines on an hourly basis. Be glad that Google is employing him and not some random intelligence agency.
    • kakarot 10y ago
      What's funny is he kinda just stumbled upon this bug accidentally while making queries. If I were just casually googling two weeks ago and came across a leaked cloudflare session in the middle of my search results I think I would have vomited all over my desk immediately. Dude must have been sweating bullets and trembling as he reached out on twitter for a contact, not knowing yet how bad this was or for just how long it's been going on.
    • ar0 10y ago
      I have huge respect for taviso and his team. Their track record in security work is so impressive. They are without a doubt extremely capable. However, I am always wondering: are they really globally unique in their work and skill? So that they are really the ones finding all the security holes before anyone else does because they are just so much better (and/or with better infrastructure) than anyone else? Or is it more likely that on a global scale there are other teams who at least come close regarding skill and resources, but who are employed by actors less willing to share what they found? I really do hope Tavis is a once-in-a-lifetime genius when it comes to vulnerability research!
      • tuyguntn 10y ago
• patcheudor 10y ago
  Also still in Yahoo. https://search.yahoo.com/search;_ylc=X3oDMTFiN25laTRvBF9TAzIwMjM1MzgwNzUEaXRjAzEEc2VjA3NyY2hfcWEEc2xrA3NyY2h3ZWI-?p=2001%3A56a%3Af651%3A6200%3A4840%3Aca4a%3Ab783%3A658f69.145.139.502600&fr=yfp-t&fp=1&toggle=1&cop=mss&ei=UTF-8 https://search.yahoo.com/search;_ylc=X3oDMTFiN25laTRvBF9TAzI... http://208.71.46.190/search/srpcache?p=2001%3A56a%3Af651%3A6200%3A4840%3Aca4a%3Ab783%3A658f69.145.139.502600&ei=UTF-8&fr=yfp-t&fp=1&u=http://cc.bingj.com/cache.aspx?q=2001%3a56a%3af651%3a6200%3a4840%3aca4a%3ab783%3a658f69.145.139.502600&d=4857656909960944&mkt=en-US&setlang=en-US&w=rj9cgKJZJYOhAbxPoQ4RPcxV_spLZkc2&icp=1&.intl=us&sig=6QRmMCW7Wpos5gOJ0M0Rlg-- http://208.71.46.190/search/srpcache?p=2001%3A56a%3Af651%3A6...
  • patcheudor 10y ago
    Bing and Yahoo with the same cached content. Interesting: http://208.71.46.190/search/srpcache?p=yOGHqpbGWiXrRAIqLM87wg%3D%3D&fr=yfp-t&fp=1&ei=UTF-8&u=http://cc.bingj.com/cache.aspx?q=yOGHqpbGWiXrRAIqLM87wg%3d%3d&d=4765349467721324&mkt=en-US&setlang=en-US&w=NOfWU2bymDp3B-a91NL6R_WBUVWIg3zd&icp=1&.intl=us&sig=65ycLxBD3T5um6J4KlAYTQ-- http://208.71.46.190/search/srpcache?p=yOGHqpbGWiXrRAIqLM87w... http://cc.bingj.com/cache.aspx?q=%22X-SSL-Server-IP+104.16.59.37%22&d=4765349467721324&mkt=en-US&setlang=en-US&w=NOfWU2bymDp3B-a91NL6R_WBUVWIg3zd http://cc.bingj.com/cache.aspx?q=%22X-SSL-Server-IP+104.16.5...
    • npongratz 10y ago
      I believe the 2009 Yahoo-Bing agreement is still in force, where Bing provides search results on Yahoo.com: http://news.bbc.co.uk/2/hi/business/8174763.stm http://news.bbc.co.uk/2/hi/business/8174763.stm I know the search I performed now on Yahoo states "Powered by Bing™" at the bottom.
      • patcheudor 10y ago
        Yeah, I thought that could be it as well but was at the bottom of the Yahoo result: <!-- fe072.syc.search.gq1.yahoo.com Sat Feb 25 03:58:27 UTC 2017 --> Given they are identical results it's pretty clear it must be a shared index I suppose, that or the leaked memory was cached.
• nodesocket 10y ago
  While it is good that you discovered leaked content is still out in the wild, your tone is somewhat condescending and rude. No need for it.
  • slipmagic 10y ago
    I would be pretty mad if a website that I was supposed to trust with my data made an untrue statement about how something was taken care of, when it was not, and then publish details of the bug while cache it still out in the wild, and now exploitable by any hacker who was living under a rock during the past few months.
    • nodesocket 10y ago
      Actually I proxy two of my profitable startup frontend sites with CloudFlare, so I am affected (not really), but giving them the benefit of the doubt as they run a great service and these things happen.
      • phaed 10y ago
        They are well past deserving the benefit of the doubt. I would also advise you notify your cloud-based services' customers how they might be affected (yes really), trust erosion tends to be contagious.
        • josephb 10y ago
          Agreed. The condescending downplaying tones displayed just aren't acceptable.
        • nodesocket 10y ago
          We only host our static corporate sites (not apps) and furthermore never used CF email obfuscation, server-side excludes or automatic https rewrites thus not vulnerable.
          • 10y ago
• dgrealy 10y ago
  > After I explained the situation, cloudflare quickly reproduced the problem, told me they had convened an incident and had an initial mitigation in place within an hour. for what it's worth I think they deserve a little credit
• FiwHacker 10y ago
  Hacker
• FiwHacker 10y ago
  Hacker
• janwillemb 10y ago
  Offtopic: "with all due respect" is often followed by words void of respect.
  • LeoPanthera 10y ago
    This is perfectly fine if the amount of respect due is sufficiently low.
    • janwillemb 10y ago
      Ha! Excellent point!
    • 77pt77 10y ago
      Given the answers that cloudflare is giving I's say it's quickly approaching zero.
  • Symbiote 10y ago
    He is British. "With all due respect" means no respect is due. I don't think it's possible to show less respect while appearing polite. In other words, them's fighting words. http://todayilearned.co.uk/2012/12/04/what-the-british-say-vs-what-they-really-mean/ http://todayilearned.co.uk/2012/12/04/what-the-british-say-v...
• Bino 10y ago
  You really have to see this to really grasp the severity of the bug.
• loup-vaillant 10y ago
  How about clearing all the cache? (Or at least everything created the last few months.) I've never seen anyone suggest it, I suppose It cannot or should not be done for some reason?
  • baby 10y ago
    or clearing all the cache of Cloudflares website. I think that's do-able.
    • tuyguntn 10y ago
      At this moment problem is not in Cloudflare's side, search engines crawled tons of data with leaked information, even though Cloudflare drops their caches, data is already in 3rd party servers (search engines, crawlers, agencies)
      • baby 10y ago
        no I meant, get a list of all domains using Cloudflare, get that removed from the cache of Crawlers.
      • fantyoon 10y ago
        That's why he asked that the caches of all Cloudflare sites are dropped, not by Cloudflare but by these 3rd parties.
        • jamaicahest 10y ago
          That might work. If said 3rd parties were interested in helping. Most of them might be but it just takes one party refusing to help and then you've still got the data out there.
  • tuyguntn 10y ago
    You are asking for deleting petabytes of data. Some sides are interested in owning such data.
  • 10y ago
• Gigablah 10y ago
  After 16 hours, those cached pages are still up...
• amenod 10y ago
  Incredible. Are they really trying to pin it on Google? Yes, clearing cache would probably remove some part of the information from public sources. But you can never clear all cache world-wide. Nor can you rely that the part that was removed was really removed before being copied elsewhere. The way I see it, time given by GZero was sufficient to close the loophole, it was not meant to give them chance to clear caches world-wide. They have a PR disaster on their hands, but blaming Google won't help with it.
• sah2ed 10y ago
  The scope of this is unreal on so many levels. 20 hours since this post and these entries are still up ...
• cyberkendra 10y ago
  How this is checked???
• tempz 10y ago
  The event where one line of buggy code ('==' instead of '<=') creates global consequences, affecting millions, is great illustration of the perils of monoculture. And monoculture is the elephant in the room most pretend not to see. The current engineering ideology (it is ideology, not technology) of sycophancy towards big and rich companies, and popular software stacks, is sickening.