Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

bugs.chromium.org

Post reply on HN
Print view View original

961–970 of 1001 posts

Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

#961

Post by Symbiote »

janwillemb wrote: post #952
taviso wrote: post #879

Earlier quoted context omitted.

Matthew, with all due respect, you don't know what you're talking about. view-source: http://cc.bingj.com/cache.aspx?q=&d=4857656909960944&w=rj9cg... view-source: http://cc.bingj.com/cache.aspx?q=&d=4901023173710126&w=n3mEZ... view-source: http://cc.bingj.com/cache.aspx?q=&d=4558611265887320&w=urwoW... view-source: http://cc.bingj.com/cache.aspx?q=&d=4592983872701813&w=Ghwdd... view-source: http://cc.bingj.com/cache.…

Offtopic: "with all due respect" is often followed by words void of respect.

He is British. "With all due respect" means no respect is due. I don't think it's possible to show less respect while appearing polite. In other words, them's fighting words.

http://todayilearned.co.uk/2012/12/04/what-the-british-say-v...

Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

#962

Post by loup-vaillant »

taviso wrote: post #879
eastdakota wrote: post #624

Earlier quoted context omitted.

Google, Microsoft Bing, Yahoo, DDG, Baidu, Yandex, and more. The caches other than Google were quick to clear and we've not been able to find active data on them any longer. We have a team that is continuing to search these and other potential caches online and our support team has been briefed to forward any reports immediately to this team. I agree it's troubling that Google is taking so long. We were working with…

Matthew, with all due respect, you don't know what you're talking about. view-source: http://cc.bingj.com/cache.aspx?q=&d=4857656909960944&w=rj9cg... view-source: http://cc.bingj.com/cache.aspx?q=&d=4901023173710126&w=n3mEZ... view-source: http://cc.bingj.com/cache.aspx?q=&d=4558611265887320&w=urwoW... view-source: http://cc.bingj.com/cache.aspx?q=&d=4592983872701813&w=Ghwdd... view-source: http://cc.bingj.com/cache.…

How about clearing all the cache? (Or at least everything created the last few months.)

I've never seen anyone suggest it, I suppose It cannot or should not be done for some reason?

Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

#963

Post by yestoallthat »

eridius wrote: post #909
yestoallthat wrote: post #887

Earlier quoted context omitted.

Change "the" reason to "one of the main reasons" (and going from the top left to bottom right, the second of their four main features), and notice how my point remains untouched?

Your point is still incorrect. CloudFlare is NOT playing "internet cop" for DOS. They're providing armor against it, but they're not "policing" it in any sense of the word.

So DOS are "clearly bad" when it comes to providing "armour" against them, but a matter of taste, something a person could not possibly have an opinion on when it's a client of theirs?

> they're not "policing" it in any sense of the word.

I didn't say they do, I say it's double faced. Which it is.

Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

#964

Post by portref »

portref wrote: post #725
curuinor wrote: post #339

Earlier quoted context omitted.

Patreon 4chan used to use it apparently, don't know if affected kik Zoho CRM change.org Cloudflare itself, of course Feedly

Anyone know if Zoho mail is vulnerable too? According to doesitusecloudflare.com Zoho isn't using Cloudflare, was it previously?

To answer my own question Zoho isn't affected.

https://twitter.com/zoho/status/835109283922608130

Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

#965

Post by ar0 »

mrich wrote: post #947
phaed wrote: post #921

Earlier quoted context omitted.

Thousands of years from now, when biological life on this planet is all but extinct and superintelligent AI evolving at incomprehensible rates roam the planet, new pieces of the great PII pollution incident that CloudFlare vomited across the internet are still going to be discovered on a daily basis.

I was expecting this: Thousands of years from now, when biological life on this planet is all but extinct and superintelligent AI evolving at incomprehensible rates roam the planet, taviso will still be finding 0-days impacting billions of machines on an hourly basis. Be glad that Google is employing him and not some random intelligence agency.

I have huge respect for taviso and his team. Their track record in security work is so impressive. They are without a doubt extremely capable.

However, I am always wondering: are they really globally unique in their work and skill? So that they are really the ones finding all the security holes before anyone else does because they are just so much better (and/or with better infrastructure) than anyone else? Or is it more likely that on a global scale there are other teams who at least come close regarding skill and resources, but who are employed by actors less willing to share what they found?

I really do hope Tavis is a once-in-a-lifetime genius when it comes to vulnerability research!

Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

#966

Post by tuyguntn »

ar0 wrote: post #965
mrich wrote: post #947

Earlier quoted context omitted.

I was expecting this: Thousands of years from now, when biological life on this planet is all but extinct and superintelligent AI evolving at incomprehensible rates roam the planet, taviso will still be finding 0-days impacting billions of machines on an hourly basis. Be glad that Google is employing him and not some random intelligence agency.

I have huge respect for taviso and his team. Their track record in security work is so impressive. They are without a doubt extremely capable. However, I am always wondering: are they really globally unique in their work and skill? So that they are really the ones finding all the security holes before anyone else does because they are just so much better (and/or with better infrastructure) than anyone else? Or is it…

No he is definitely not alone, some of them work for other security companies, for antivirus companies, some of them are selling found vulnerabilities

Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

#967

Post by janwillemb »

LeoPanthera wrote: post #957
janwillemb wrote: post #952

Earlier quoted context omitted.

Offtopic: "with all due respect" is often followed by words void of respect.

This is perfectly fine if the amount of respect due is sufficiently low.

Ha! Excellent point!

Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

#968

Post by baby »

loup-vaillant wrote: post #962
taviso wrote: post #879

Earlier quoted context omitted.

Matthew, with all due respect, you don't know what you're talking about. view-source: http://cc.bingj.com/cache.aspx?q=&d=4857656909960944&w=rj9cg... view-source: http://cc.bingj.com/cache.aspx?q=&d=4901023173710126&w=n3mEZ... view-source: http://cc.bingj.com/cache.aspx?q=&d=4558611265887320&w=urwoW... view-source: http://cc.bingj.com/cache.aspx?q=&d=4592983872701813&w=Ghwdd... view-source: http://cc.bingj.com/cache.…

How about clearing all the cache? (Or at least everything created the last few months.) I've never seen anyone suggest it, I suppose It cannot or should not be done for some reason?

or clearing all the cache of Cloudflares website. I think that's do-able.

Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

#969

Post by tuyguntn »

loup-vaillant wrote: post #962
taviso wrote: post #879

Earlier quoted context omitted.

Matthew, with all due respect, you don't know what you're talking about. view-source: http://cc.bingj.com/cache.aspx?q=&d=4857656909960944&w=rj9cg... view-source: http://cc.bingj.com/cache.aspx?q=&d=4901023173710126&w=n3mEZ... view-source: http://cc.bingj.com/cache.aspx?q=&d=4558611265887320&w=urwoW... view-source: http://cc.bingj.com/cache.aspx?q=&d=4592983872701813&w=Ghwdd... view-source: http://cc.bingj.com/cache.…

How about clearing all the cache? (Or at least everything created the last few months.) I've never seen anyone suggest it, I suppose It cannot or should not be done for some reason?

You are asking for deleting petabytes of data. Some sides are interested in owning such data.

Re: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

#970

Post by tuyguntn »

baby wrote: post #968
loup-vaillant wrote: post #962

Earlier quoted context omitted.

How about clearing all the cache? (Or at least everything created the last few months.) I've never seen anyone suggest it, I suppose It cannot or should not be done for some reason?

or clearing all the cache of Cloudflares website. I think that's do-able.

At this moment problem is not in Cloudflare's side, search engines crawled tons of data with leaked information, even though Cloudflare drops their caches, data is already in 3rd party servers (search engines, crawlers, agencies)
Post reply on HN