EliteMMO Network
http://www.elitemmonetwork.com/forums/

Cloudbleed - Potential Private Data Leaked
http://www.elitemmonetwork.com/forums/viewtopic.php?f=2&t=650
Page 1 of 1

Author:  Wiccaan [ Sat Mar 04, 2017 2:35 am ]
Post subject:  Cloudbleed - Potential Private Data Leaked

Hello everyone,

In the last two weeks a very massive issue was discovered with a DDoS protection service called Cloudflare. The security issue has been dubbed 'Cloudbleed' due to its nature in how data was being leaked. I am bringing this to light on EliteMMO because I use Cloudflare's service to prevent DDoS attacks.

With that said, I want to inform everyone that EliteMMO may have been affected by this data leak. I cannot say for sure if there is any sensitive data of anyone leaked online from my site(s) though. Cloudflare immediately worked with as many web crawlers as possible to have the data cleaned up as fast as possible and be removed from caches. Within 24hrs they were in full lock-down of the issue having it resolved and handled to the best of their ability.

Please note, this data leak is NOT the fault of EliteMMO or any services/software in-use on the server itself. Instead, this was the fault of Cloudflare and a misconfiguration on their end for caching information.

If you would like to read more about this issue, feel free to check out their detailed blog post here:
https://blog.cloudflare.com/incident-re ... arser-bug/
https://blog.cloudflare.com/quantifying ... loudbleed/

As a normal user, I encourage you to do the following:
  • Change your password.
  • Change your email password.
  • Change your password associated with other sites that may have been affected.

For those interested in looking up other sites that may be affected by this bug, you can use a tool such as:
http://cloudbleedcheck-com.herokuapp.com/

Wiccaan
EliteMMO Network Administration

Page 1 of 1 All times are UTC - 8 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/