Does this use live data? Would a site be positive even if it, after the publication of Cloudbleed, migrated away from Cloudfare?
I'd be interested both 'does it use' and 'did it use cloudflare' (in the affected period).
Show HN: Does it use Cloudflare?
21–29 of 29 posts
Re: Show HN: Does it use Cloudflare?
#22Time to move to Incapsula
Re: Show HN: Does it use Cloudflare?
#23[deleted]
Re: Show HN: Does it use Cloudflare?
#24My jekyll based static site hosted on Github Pages uses cloudflare for https. Saying that my site is compromised by CloudBleed is a bit too much. http://www.doesitusecloudflare.com/?url=www.stacktoheap.com
Chances are it is. The difference being that the leaked data in your case could not have been sensitive.
Re: Show HN: Does it use Cloudflare?
#25Why was this flagged? Can HN offer a mouse over description to answer these types of questions? just curious
Re: Show HN: Does it use Cloudflare?
#26Why was this flagged? Can HN offer a mouse over description to answer these types of questions? just curious
Individual users have the ability to flag posts (after a certain karma, I think) and there's no place to provide a reason.
Re: Show HN: Does it use Cloudflare?
#27Why was this flagged? Can HN offer a mouse over description to answer these types of questions? just curious
Individual users have the ability to flag posts (after a certain karma, I think) and there's no place to provide a reason.
To elaborate, flags are (nearly?) always the result of user action, not mods.
Re: Show HN: Does it use Cloudflare?
#28This doesn't detect Cloudflare CNAME clients. For ex. It says uber.com is not vulnerable - because the homepage isn't, while the app is consitantly one of the most impacted in the caches I've seen I don't think anyone has really nailed the methodology here - and I think that is important (as is erring towards false positives rather than false negatives) for security mitigation advice
It's not that easy. Not all CNAME clients used the three services that had the issue.
These lists are bad, because they list any Cloudflare clients that can be found, not just the ones that might have had exposed data.
Re: Show HN: Does it use Cloudflare?
#29Dang, this one's probably going to be more popular than mine.
Of course, mine isn't exactly performant, was the result of about 15 minutes of work, and just uses that Github repo with the list of affected domains (so, not exactly the most comprehensive). But hey, it was fun to build.