Quote from: Utrine on February 25, 2017, 10:38:53 AM

Quote from: blockcha1n on February 25, 2017, 01:19:22 AM

Quote from: aso118 on February 25, 2017, 01:14:45 AM

Quote from: blockcha1n on February 25, 2017, 12:42:30 AM

How long ago was this known?
I think it was since September last year there was a breach in their service but they didn't report it until just now.
I hate when those companies hide these things when they actually do happen because they are thinking they are somehow doing "Damage control" but actually making it much much worst for them not notifying the public of these customer information have been comprised type of scenarios.

According to their blog post, they managed to solve the issue in less than 48 hrs.
https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/
I don't think it was known in September. It was reported by Tavis Ormandy last Friday.

But within that 48 hours all logins were comprised.
And the hackers have those lists.
So alot of accounts are dormant. And can be retrieved and used by those hackers.
Am I right or wrong in this scenario that is brewing in my mind about this security breach?
And they thought those leaked 15,000 or what however many emails were found by hackers, this is much worst for millions of people's information being waiting to be sold later on when the heat is off those that did the hack.

If I did not log in in the last four months, will the password be leaked?

It shouldn't be give the nature of the bug since your login details wouldn't have been in cloudflare's server memory if you hadn't logged in.