Cloudflare Bug Triggers Password Warnings from Bitcoin Exchanges

Ticker

1 BTC = $55238.86 USD  (via Coinbase)
1 ETH = $2155.09 USD  (via Coinbase)
1 LTC = $263.61 USD  (via Coinbase)
Quotes delayed up to 2 minutes.

Kryptous

Crypto Coins News - Ratings - Reviews

1 News - 247 News - 247 Bitcoin - 1 Search

BTC - BCH - ETH - LITE - XRP

Buy Sell Trade Crypto Here

 

Users of bitcoin exchanges and other online services are being warned to change their passwords in light of a newly discovered bug tied to web security firm Cloudflare.

Cloudflare, which provides denial-of-service protection, detailed the issue in a blog post published today. The company was first contacted about the bug last week by Google cybersecurity researcher Tavis Ormandy.

The so-called “Cloudbleed” bug – a reference to 2014’s Heartbleed vulnerability –  is believed to have begun affected services as early as September 2016, enabling the leak of memory that included sensitive information such as passwords and authentication tokens. The firm said the bug has since been patched.

According to Cloudflare’s blog post, the real threat to users came as a result of some of that information being captured by search engines.

The firm explained:

“The bug was serious because the leaked memory could contain private information and because it had been cached by search engines. We have also not discovered any evidence of malicious exploits of the bug or other reports of its existence. The greatest period of impact was from February 13 and February 18 with around 1 in every 3,300,000 HTTP requests through Cloudflare potentially resulting in memory leakage (that’s about 0.00003{88c91daedd271a990a10650c05d769cae2765e0603edf30ca95f18704e5748e8} of requests).”

News of the bug has triggered warnings from exchanges like Poloniex and Kraken, which suggested that users change their passwords, two-factor authentication and API keys.

A user on GitHub has curated a list of sites potentially affected by the bug, which includes industry services like Coinbase, BitPay and LocalBitcoins. Other major websites, including Reddit, Uber and OKCupid are said to be affected as well.

CoinDesk will continue monitoring this developing story.

Image via Shutterstock

CloudflarecybersecurityGoogle

Kryptous

Crypto Coins News - Ratings - Reviews

1 News - 247 News - 247 Bitcoin - 1 Search

BTC - BCH - ETH - LITE - XRP

Buy Sell Trade Crypto Here

 

Ticker

1 BTC = $55238.86 USD  (via Coinbase)
1 ETH = $2155.09 USD  (via Coinbase)
1 LTC = $263.61 USD  (via Coinbase)
Quotes delayed up to 2 minutes.

Leave a Reply