Cloudflare/ Cloudbleed

[Sentura]

JUST A PSA

Apparently Mapcore uses cloudflare, meaning it was subject to the Cloudbleed leak, meaning there is a chance people's passwords have been leaked.

@Thrik can you confirm or deny whether this has affected the site?

 

EDIT: If you're unsure whether you have been compromised on other sites, you can use this site to check whether it uses cloudflare: http://www.doesitusecloudflare.com/

Edited February 24, 2017 by Sentura

[AlexM]

Is mapcore affected? 

[Sentura]

I have no idea, nobody seems to be responding. @Thrik @FMPONE ?

[Sprony]

We're currently looking into it. We'll let you all know asap. 

[Thrik]

According to CloudFlare MapCore is OK. In their words:

Quote

Fortunately, your domain is not one of the domains where we have discovered exposed data in any third party caches. The bug has been patched so it is no longer leaking data. However, we continue to work with these caches to review their records and help them purge any exposed data we find. If we discover any data leaked about your domains during this search, we will reach out to you directly and provide you full details of what we have found.

As a matter of caution it's probably wise to consider changing passwords if you use the same one on multiple websites — CloudFlare is used by a huge chunk of the internet so as far as internet screw-ups go this is a pretty big one.

If you really want to use the same password on different sites, I recommend 'salting' it with a character or few unique to that website's name/address. That way you're more protected from things like this.

While CloudFlare provides benefits my confidence in it is pretty damaged by this, so I'll be looking into migrating off of it. Thankfully MapCore doesn't use most of its features, which potentially contributes to us being unaffected.