Cloudfare notice

(Post copied from Graalians)
There has been a major security flaw within Cloudflare. It's highly suggested that you cycle your passwords for all affected sites and programs due to this.

Impact
Between 2016-09-22 - 2017-02-18 passwords, private messages, API keys, and other sensitive data were leaked by Cloudflare to random requesters.
Data was cached by search engines , there are private logins for dozens of multiple websites in google's cache right now, and may have been collected by random scrapers over the past few months.

According to CloudFlare: "The greatest period of impact was from February 13 and February 18 with around 1 in every 3,300,000 HTTP requests through Cloudflare potentially resulting in memory leakage (that’s about 0.00003% of requests)". This has a potential of 100k-200k paged with private data leaked every day for the dates in question.

What you should do?
Change all your passwords, especially those on these affected sites. Rotate API keys & secrets, and confirm you have 2-Factor Authentication set up for important accounts. You can set up 2-Factor Authentication for Discord under Settings -> Security.

Sites compronised include: Reddit, Discord, Uber, StackOverflow, Patreon, Yelp, OKCupid, 4chan, Namecheap, DigitalOcean, and many, many more.

You can check which sites were affected by this on the readme of this github page https://github.com/pirate/sites-using-cloudflare

Link to the official discord post: https://blog.discordapp.com/safety-jim-p....z9wga7s8s
Link to the official cloudflare post: https://blog.cloudflare.com/incident-rep...arser-bug/

Oh man

Im confused

Quote:

---

Originally Posted by hohi416

Im confused

---

Same dude

Kie whats going on

I don't use any of these so no problem for me XD

Quote:

---

Originally Posted by Slapjack

I don't use any of these so no problem for me XD

---

I only use discord :)

All the links listed in "Top 1000 affected sites" are explicit links which are either Rated (R) or Pirating sites(I hope none of you have accounts on the sites).

The only site/s I assume the Graal community would have accounts on by taking into account the average range (probably about 15.2 In My opinion):

discordapp.com (Come on if you have a discord get your passwords changing).
account.leagueoflegends.com (dunno what this site is, but I think the domain is shut, so if you have a L.o.L​ account then get changing.)
tfl.gov.uk (Londoners check this out)
curse.com (Not a cursing site, to be honest I don't know what it is)
minecraftforum.net (Minecraft geeks)
uber.com (Uber Taxis!)

Note: The links I have pasted are only due to speculation as to what sort of sites I would expect the majority of Graal to be using.
However, I don't know everyone's "do-hickees"
So I would advise you as Kieran stated to check the link and if you have an account on one of those sites change the password. If the password correlates on another account you own, change that one as well.

Quote:

---

Originally Posted by Bulletzone

All the links listed in "Top 1000 affected sites" are explicit links which are either Rated (R) or Pirating sites(I hope none of you have accounts on the sites).

The only site/s I assume the Graal community would have accounts on by taking into account the average range (probably about 15.2 In My opinion):

discordapp.com (Come on if you have a discord get your passwords changing).
account.leagueoflegends.com (dunno what this site is, but I think the domain is shut, so if you have a L.o.L​ account then get changing.)
tfl.gov.uk (Londoners check this out)
curse.com (Not a cursing site, to be honest I don't know what it is)
minecraftforum.net (Minecraft geeks)
uber.com (Uber Taxis!)

Note: The links I have pasted are only due to speculation as to what sort of sites I would expect the majority of Graal to be using.
However, I don't know everyone's "do-hickees"
So I would advise you as Kieran stated to check the link and if you have an account on one of those sites change the password. If the password correlates on another account you own, change that one as well.

---

Whut??? :confused:

Quote:

---

Originally Posted by hohi416

Whut??? :confused:

---

Basically, some data from some of the sites on the list have been exposed, so someone may have your password for a site. Just change your passwords and you should be ok.

Quote:

---

Originally Posted by Kieran2820

Basically, some data from some of the sites on the list have been exposed, so someone may have your password for a site. Just change your passwords and you should be ok.

---

Damn

Never heard of CloudFare. Feel bad for the victims.

Id feel bad but, Not my problem, if someone wants to hack into my lonely discord go ahead, Not much there...

Please do not bump old threads. Thanks