Live data from Hacker News

Site Outage: Passwords and Stream Keys Reset

blog.twitch.tv

1–10 of 15 posts

Re: Site Outage: Passwords and Stream Keys Reset

#2
> Our caching ruleset was not obeyed by our CDN partner. [...] Before the site was shut down, you may have viewed some pages as another user.

What CDN would not respect "caching rulesets"? Cache-Control: Private and Vary: Cookie are well-established.

> We will follow up tomorrow with a further technical explanation of what occurred.

I can't wait. I hope they're being honest and this was a genuine error of a third party, and not incompetence on their end.

Re: Site Outage: Passwords and Stream Keys Reset

#3
Twitch response to salted passwords:

> The answer is "yes and no," and we'll cover this in more detail in the forthcoming technical explanation of tonight's events.

So I guess old accounts' passwords are not salted. Still, I'll be waiting for the technical explanation.

Re: Site Outage: Passwords and Stream Keys Reset

#4

> Our caching ruleset was not obeyed by our CDN partner. [...] Before the site was shut down, you may have viewed some pages as another user. What CDN would not respect "caching rulesets"? Cache-Control: Private and Vary: Cookie are well-established. > We will follow up tomorrow with a further technical explanation of what occurred. I can't wait. I hope they're being honest and this was a genuine error of a third par…

They use Cloudflare. I doubt they would not respect Cache-Control.

Re: Site Outage: Passwords and Stream Keys Reset

#5

> Our caching ruleset was not obeyed by our CDN partner. [...] Before the site was shut down, you may have viewed some pages as another user. What CDN would not respect "caching rulesets"? Cache-Control: Private and Vary: Cookie are well-established. > We will follow up tomorrow with a further technical explanation of what occurred. I can't wait. I hope they're being honest and this was a genuine error of a third par…

They use Cloudflare. I doubt they would not respect Cache-Control.

[deleted]

Re: Site Outage: Passwords and Stream Keys Reset

#7
post #3

Twitch response to salted passwords: > The answer is "yes and no," and we'll cover this in more detail in the forthcoming technical explanation of tonight's events. So I guess old accounts' passwords are not salted. Still, I'll be waiting for the technical explanation.

Not that it particularly matters if they were salted or not.

Re: Site Outage: Passwords and Stream Keys Reset

#8

> Our caching ruleset was not obeyed by our CDN partner. [...] Before the site was shut down, you may have viewed some pages as another user. What CDN would not respect "caching rulesets"? Cache-Control: Private and Vary: Cookie are well-established. > We will follow up tomorrow with a further technical explanation of what occurred. I can't wait. I hope they're being honest and this was a genuine error of a third par…

They use Cloudflare. I doubt they would not respect Cache-Control.

This was not an issue with Cloudflare.
Post reply on HN