pirate

sites-using-cloudflare

Security & Privacy2017–2017

pirate / sites-using-cloudflare · Archived

sites-using-cloudflare

:broken_heart: Archived list of domains using Cloudflare DNS at the time of the CloudBleed announcement.

Explore on GitHub Read Hacker News discussions

7Distinct people

26Mentions

0Explicit recommenders

1.9KGitHub stars

REPOSITORY AT A GLANCE

What to know before exploring

What it is

:broken_heart: Archived list of domains using Cloudflare DNS at the time of the CloudBleed announcement.

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:03:16 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by 3-hour interval26 dated mentions

Observed mentions: 2017-02-24 02:02:44 UTC to 2017-02-25 14:39:03 UTC.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges

UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
Period	Start (UTC)	End (exclusive, UTC)	Mentions	Submissions	Comments
Feb 24, 00:00	2017-02-24 00:00:00 UTC	2017-02-24 03:00:00 UTC	12	1	11
Feb 24, 03:00	2017-02-24 03:00:00 UTC	2017-02-24 06:00:00 UTC	7	0	7
Feb 24, 06:00	2017-02-24 06:00:00 UTC	2017-02-24 09:00:00 UTC	2	1	1
Feb 24, 09:00	2017-02-24 09:00:00 UTC	2017-02-24 12:00:00 UTC	0	0	0
Feb 24, 12:00	2017-02-24 12:00:00 UTC	2017-02-24 15:00:00 UTC	0	0	0
Feb 24, 15:00	2017-02-24 15:00:00 UTC	2017-02-24 18:00:00 UTC	0	0	0
Feb 24, 18:00	2017-02-24 18:00:00 UTC	2017-02-24 21:00:00 UTC	2	0	2
Feb 24, 21:00	2017-02-24 21:00:00 UTC	2017-02-25 00:00:00 UTC	0	0	0
Feb 25, 00:00	2017-02-25 00:00:00 UTC	2017-02-25 03:00:00 UTC	1	0	1
Feb 25, 03:00	2017-02-25 03:00:00 UTC	2017-02-25 06:00:00 UTC	1	0	1
Feb 25, 06:00	2017-02-25 06:00:00 UTC	2017-02-25 09:00:00 UTC	0	0	0
Feb 25, 09:00	2017-02-25 09:00:00 UTC	2017-02-25 12:00:00 UTC	0	0	0
Feb 25, 12:00	2017-02-25 12:00:00 UTC	2017-02-25 15:00:00 UTC	1	0	1

What Hacker News says

26 sources

andyjh·Feb 25, 2017

"...the leaked information is from any website which was using the service..." Potentially, yes. Not just HTTPS, but those are obviously the more worrying cases. It's not possible to know the totality of information that has been leaked, though efforts are being made to try and list affected / potentially affected sites.[1] My advice would be: For any sites you're worried about (ie hosted on CF and you have an account), log out of all sessions on all devices, and reset your password. Don't share passwords between sites either; if you're using 1password now, you can use unique & complex passwords for everything. [1] eg https://github.com/pirate/sites-using-cloudflare

In Ask HN: What are the implications of CloudFlare leak?

dorianm·Feb 25, 2017

Yup, I started it because he didn't merge my pull request :D https://github.com/pirate/sites-using-cloudflare/pull/55

In Cloudflare data still in Bing caches

zda·Feb 25, 2017

In Cloudflare data still in Bing caches

tony101·Feb 24, 2017

Just received an email from Glidera, a Bitcoin exchange. This is the first service to ask me to reset my password. I wonder why Uber, NameCheap, FitBit, and many others have yet to warn their users? Is Cloudflare downplaying this? > Hi [Username], > A bug was recently discovered with Cloudflare, which Glidera and many other websites use for DoS protection and other services. Due to the nature of the bug, we recommend as a precaution that you change your Glidera security credentials: > Change your password > Change your two-factor authentication > You should similarly change your security credentials for other websites that use Cloudflare (see the link below for a list of possibly affected sites). If you are using the same password for multiple sites, you should change this immediately so that you have a unique password for each si

Read the rest

te. And you should enable two-factor authentication for every site that supports it. > The Cloudflare bug has now been fixed, but it caused sensitive data like passwords to be leaked during a very small percentage of HTTP requests. The peak period of leakage is thought to have occurred between Feb 13 and Feb 18 when about 0.00003% of HTTP requests were affected. Although the rate of leakage was low, the information that might have been leaked could be very sensitive, so it’s important that you take appropriate precautions to protect yourself. > The actual leaks are thought to have only started about 6 months ago, so two-factor authentication generated before that time are probably safe, but we recommend changing them anyway because the vulnerability potentially existed for years. > Please note that this bug does NOT mean that Glidera itself has been hacked or breached, but since individual security credentials may have been leaked some individual accounts could be vulnerable and everyone should change their credentials as a safeguard. > Here are some links for further reading on the Cloudflare bug: > TechCrunch article: https://techcrunch.com/2017/02/23/major-cloudflare-bug-leake... > List of sites possibly affected by the bug: https://github.com/pirate/sites-using-cloudflare/blob/master... > If you have any questions or concerns in response to this email, please contact support at: support@glidera.io

In List of Sites Affected by Cloudflare's HTTPS Traffic Leak

azna·Feb 24, 2017

Email your customers, telling them to change their passwords, and link to some info about the leak. (in case they don't visit your website and miss seeing the security alert banner) Advise them to change passwords for other services too, list sites possibly affected: https://github.com/pirate/sites-using-cloudflare/blob/master...

In Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

nikisweeting·Feb 24, 2017

Aww man I submitted my list hours ago but I guess it never made it past the New page. https://github.com/pirate/sites-using-cloudflare Original post: https://news.ycombinator.com/item?id=13720199

In List of Sites Affected by Cloudflare's HTTPS Traffic Leak

emilong·Feb 24, 2017Submission

List of Sites Affected by Cloudflare's HTTPS Traffic Leak

914 points · Open discussion

nikisweeting·Feb 24, 2017

(whoops forgot to remove dupes, it's only 4,287,625) https://github.com/pirate/sites-using-cloudflare/raw/master/...

In Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

nikisweeting·Feb 24, 2017

I had duplicates, it's actually only 4,287,625 (still a lot though). Fixed the duplicates: https://github.com/pirate/sites-using-cloudflare/raw/master/...

In Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

nikisweeting·Feb 24, 2017

Fixed: https://github.com/pirate/sites-using-cloudflare/raw/master/...

In Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

nikisweeting·Feb 24, 2017

I've compiled a list of 7 million+ domains that use Cloudflare here: https://github.com/pirate/sites-using-cloudflare Including the subset of the Alexa 10,000 that use Cloudflare in the README.

In Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

nikisweeting·Feb 24, 2017

I've compiled a list of 7,385,121 domains that use Cloudflare here: https://github.com/pirate/sites-using-cloudflare

In Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

nikisweeting·Feb 24, 2017

I've compiled a list of 7,385,121 domains served through cloudflare using several scrapers. https://github.com/pirate/sites-using-cloudflare The full list is available for download here (23mb) https://github.com/pirate/sites-using-cloudflare/raw/master/... I will be updating it as I find more domains.

In Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

tony101·Feb 24, 2017

An unofficial list is being compiled here: https://github.com/pirate/sites-using-cloudflare

In Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

nikisweeting·Feb 24, 2017

I'm compiling an unofficial list, hopefully they'll release an official one though: https://github.com/pirate/sites-using-cloudflare The issue is they have to get permission from their customers before releasing affected domains.

In Cloudflare Reverse Proxies Are Dumping Uninitialized Memory

Showing the 15 most recent of 26 sources. Enable JavaScript to search and browse every indexed mention.