Cloudflare Leaks Sensitive User Data Across the Web (theregister.co.uk)

Posted by BeauHD on Thursday February 23, 2017 @10:00PM from the time-to-clean-up dept.

ShaunC writes: In a bug that's been christened "Cloudbleed," Cloudflare disclosed today that some of their products accidentally exposed private user information from a number of websites. Similar to 2014's Heartbleed, Cloudflare's problem involved a buffer overrun that allowed uninitialized memory contents to leak into normal web traffic. Tavis Ormandy, of Google's Project Zero, discovered the flaw last week. Affected sites include Uber, Fitbit, and OK Cupid, as well as unnamed services for hotel booking and password management. Cloudflare says the bug has been fixed, and Google has purged affected pages from its search index and cache. Further reading: The Register, Ars Technica

1 of 87 comments (clear)

Min score:

Reason:

Sort:

Re:C strikes again by Anonymous Coward · 2017-02-23 23:37 · Score: 0, Troll

Are you denying that calloc can be used everywhere malloc can be used?
Are you denying calloc has the beneficial side effect of returning a pointer to zero filled memory?
Or are you simply a stupid fucking snowflake who objects to crude humor?