Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> only sites with one or more of those features enabled leaked data

No. From what he says, enabling that feature on a CF proxy basically triggered the bug on any site that happened to go through that proxy, regardless of whether it used the feature or not.



It only triggered the bug on sites that were using those features, but any other CF site was vulnerable to getting dumped out.


yeah that's what i meant - content could be dumped from any site going through, regardless of whether they used the broken features.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: