[Ainaj]

I don't pretend to understand exactly what features and requirements have to be met in order to be part of the whole Cloudbleed problem, so it's pretty possible that many sites on the list- including HF, weren't affected at all. But still, passwords should be changed regularly anyway. So nows a better time than any.

Passwords are not the only thing leaked here.

Everything sent via your http request had the chance to be leaked, including backing information, private bitcoin keys, pictures/nudes, pretty much anything you do online has the chance to be included in this leak.

Your real ip is included with this leak too, so once all the information is collected it could be possible to see your browsing habits.

Also your gauth private keys could be exposed, API keys, private messages on dating sites. Heck even password managers are affected, exposing ALL your passwords/address/cc info etc

It's bad.

[Pulz]

... snip ...

Yeah, the extent of it appears to be pretty severe.
I've updated the post with some new news articles that are quite interesting.

[Leroy Jethro Gibbs]

Hackforums was also on the list of vuln websites. To prevent any possible hacks via session cookies, logout then log back in. That will generate a new cookie for you.

[Ainaj]

Hackforums was also on the list of vuln websites. To prevent any possible hacks via session cookies, logout then log back in. That will generate a new cookie for you.

They're also tied to IP, so that wouldn't matter.

[Leroy Jethro Gibbs]

They're also tied to IP, so that wouldn't matter.

Yes it would. Omni has confirmed this in the past when I was helping him. To reset the credentials you will need to logout then back in.

[Riggs]

"This has been the case for data transferred between 2016-09-22 and 2017-02-18."

Before everyone freaks out and loses their shit, please consider the size of the site list and how much data we're talking about here. Even over an extended period of time, that's still big data even a nation state's resources would struggle to effectively comb.

[Universal.]

I still don't really get it, how can someone see other users information? I highly doubt one can just pull up the cached version of these sites and pull a random users data.

Am I missing something here?

[thrudda]

Woah, coinbase and Poloniex? Thanks for the heads up OP

[Ravioli]

Thanks for notifying all of us OP, appreciate it.

[EasyPeasy]

All my websites are affected... how do I fix this?

[thrudda]

All my websites are affected... how do I fix this?

Change all your password and activate 2FA if there is

[UglyMeister]

RIP all my favorite sites :(

[EasyPeasy]

Change all your password and activate 2FA if there is

Anyway I can find the cache of my website or it's deleted? I want to see what has been leaked... I dont have much on my website but goddamn this is annoying, I used the feature that was leaked... arghh

[Pulz]

Anyway I can find the cache of my website or it's deleted? I want to see what has been leaked... I dont have much on my website but goddamn this is annoying, I used the feature that was leaked... arghh

As it's already been said, the amount of data that was leaked was huge, but only accounted for a fraction of the total request by CloudFlare. The likelyhood you will come across your own data is astronomical- unless someone devises a way to gather all the leaked data and then sift through it.
The point of this alert is so that you change your passwords, or reset your login tokens/session cookies on the off-chance you were affected and could be compromised.

[VirtualMon3y]

Thanks for the heads up OP. A day of resetting passwords ahead....