"We also undertook other search expeditions looking for potentially leaked information on sites like Pastebin and did not find anything."
How comforting!
Cloudflare Reverse Proxies Are Dumping Uninitialized Memory
341–350 of 1001 posts
Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory
#342Earlier quoted context omitted.
Intensive mining indeed, if it's true that it requires 3.3M requests to get a page leak. With a fixed 100Mbps connection and assuming 2kB per HTTP request-response, you can hope to get one leak every 11 minutes and 6.6GB of traffic, which is a constant 5k requests/s. Maybe if Google reassigns all its SHAterred ressources to doing that... ... and then I realize that we were talking about cloudflare and my mining bot a…
Couldn't an attacker construct a page that triggers the memory leak and just keep accessing that page to get different pieces of memory?
Yes. Sign up for service, configure a page with crafted invalid HTML at your origin, activate all three buggy features, and spam it with requests.
If you can find such a page already, just jump to the last step and avoid signing your work.
Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory
#343So, would LastPass be involved in this at all? Do tey use CloudFlare?
Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory
#344Earlier quoted context omitted.
Cloudflare sells protection from the internet attacks through its network. The same company and network facilitates the organisation of those same attacks, and helps keep them anonymous. That's a high-tech protection racket.
I get this argument. I have made it in the past. But CF doesn't want to play Internet cop. Everyone who manages a service gets a constant barrage of "someone using your site did something offensive , I want you to kick them off your service!" CF has decided they are just not going to play the game, at all. Because once they start, then all the piranha come to feast. I'm not saying this means they aren't a racket, whi…
Call it a conflict of interest then. The worse the internet at large becomes, the more money cloudflare makes.
Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory
#345What's the rationale behind sending user PII through a CDN? Presumably that is useful to that one user only so a CDN wouldn't be super useful in distributing the load across its edges. Also doesn't CDN caching kinda defeat the purpose of having SSL?
Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory
#346Is there an International Day of Internet Security? I think we should make today that day.
Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory
#347Earlier quoted context omitted.
I found: FitBit Hacker News Stack Overflow Zendesk Discord FastMail (not really see below)
We, FastMail, are not affected by this. We do not proxy TLS connections via any third party. We use CloudFlare for DNS distribution only, which is not part of this issue.
More detailed information for others:
Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory
#348Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory
#349Oh, my god. Read the whole event log. If you were behind Cloudflare and it was proxying sensitive data (the contents of HTTP POSTs, &c), they've potentially been spraying it into caches all across the Internet; it was so bad that Tavis found it by accident just looking through Google search results. The crazy thing here is that the Project Zero people were joking last night about a disclosure that was going to keep e…
Can someone tell me the implications of this in laymen terms? For instance what does it mean "sprayed into caches"? what cache? dns cache? browser cache? if the latter, does it mean you are safe if the person who owns that cache is an innocent non technical iser?
It's reminiscent of the earlier days of the Squid cache.
When it had bugs and devivered up cached files the typical symptom was that everyone in the company got unwanted porn.
Because the biggest user (by far) of the 'net was the person into porn and so 90% of the Squid cache was porn.
Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory
#350Earlier quoted context omitted.
In case you're wondering how this could be worse than Heartbleed: Yes, apparently the allocation patterns inside Cloudflare mean TLS keys aren't exposed to this vulnerability. But Heartbleed happened at the TLS layer. To get secrets from Heartbleed, you had to make a particular TLS request that nobody normally makes. Cloudbleed is a bug in Cloudflare's HTML parser, and the secrets it discloses are mixed in with, appa…
It shouldn't be too difficult to feed an instrumented copy of the parser some fraction of their cached pages (after all, that's what they're for.. right?) and calculate a percentage of how many triggered e.g. valgrind, or just some magic string tacked on the end of the input appearing in the output or similar I prefer CloudScare to Cloudbleed :)
I'd suggest "FlareOut".