Cloudbleed problem?

Remove all ads!

Hello,

Local news put out an alert to a security hole in one of the clouds a bunch of websites use-I looked through the list and didn't see sorcerers on it so I think we are ok but I just wanted to bring it up as a question.

Also, if anyone here uses one of the sites on it he or she may want to check the list and change passwords.

This is the news story.

For those more tech savy than myself what do you think of the issue and of the quality of the report?

 

It was mainly just an issue of fake flagging a variable and that allowing entrance. If it's been patched up, then there should be no future problems. The main issue this could have is largely dependent upon the sites that used CDN. I've only ever seen two, maybe three sites that use it, AFAIK. And none of them had any major information beyond passwords and usernames along with an email. However, if you use the same email for those things as for other things, and you use the same password for everything/most things, this could have major problems if someone got a password, because that means they just cracked most- if not all- of your accounts. Which is bad. They could have also gotten other information that you tell the site, such as your name, location, credit card numbers, or, God forbid, SSN (though, any sites that would ask for SSN and be legit are A) few and far between and B ) Probably going to have their own Domain servers). So, major advice is, use different, even if slightly, passwords that are long, have capitals, have numbers and have symbols for everything. Don't tell any site that isn't government run or a collegiate site of some sort your SSN. Don't let sites save your CC number, I know it's a major PITA, but it's not worth the risk.