PSA: It Is Time To Change Your Passwords Again

[calliopes_pen]

Sites that use Cloudflare have been leaking https information. Dreamwidth and Livejournal appear to be unaffected by this as of when I last checked, along with Amazon, Reddit, Yahoo, and Gmail. Quite a few of the sites that used Cloudflare, and that are affected by this, have been listed by a user on Github. Some technical discussion (particularly in the second link) on Reddit can be found here and here. You can find a bit on the mobile iOS apps that were affected here. From everything I have read, if you need to change your passwords, it should be safe to do so.

Edit: Just found a good tool: Does It Use Cloudflare? Just type in a site address, and it will let you know if the site does/did on the date the problem was traced back to; at that point, you'll know if you must change your password at the site with the problem.

Comments

[tropicsbear]

Thanks for the tip! I've been meaning to change passwords this year anyway.

[liadt]

Thanks for the heads up:)

[dhampyresa]

Thanks for the headsup!

[porsupah.livejournal.com]

(Just passing by - once in a while, I peek through my Friends of Friends feed)

That's a very good summary - I'll add similar to my next entry, given how widespread the effects appear to have been. Interesting, too, that I've not yet received notification from any affected site.