Internet users on Friday were being urged to change all their passwords in the wake of a Cloudflare bug that could have leaked passwords, messages and more from Web site visits.
A Cloudflare service used by millions of Web sites to enhance security and performance said that it had fixed the flaw quickly after being alerted a week ago by Google researcher Tavis Ormandy.
“It turned out that in some unusual circumstances, our edge servers were running past the end of a buffer and returning memory that contained private information such as HTTP cookies, authentication tokens, HTTP POST bodies and other sensitive data,” Cloudflare Inc chief technology officer John Graham-Cumming said in a blog post. “And some of that data had been cached by search engines.”
Essentially, sensitive data intended to be temporarily stored overflowed “buffering” memory space and was then tucked into more exposed spots such as Web pages that could then be captured by online search engines, according to descriptions of the bug.
“We fetched a few live samples and we observed encryption keys, cookies, passwords, chunks of POST data and even HTTPS requests for other major Cloudflare-hosted sites from other users,” Ormandy said in a blog.
“This situation was unusual, [personally identifiable information] was actively being downloaded by crawlers and users during normal usage, they just didn’t understand what they were seeing,” he added.
Ormandy said in a Twitter message that Cloudflare has been leaking information for months, jeopardizing supposedly secure data at major Web sites including Uber, OKCupid, Fitbit and 1Password.
People have been urged to change all of their online passwords.
BUSINESS UPDATE: The iPhone assembler said operations outlook is expected to show quarter-on-quarter and year-on-year growth for the second quarter Hon Hai Precision Industry Co (鴻海精密) yesterday reported strong growth in sales last month, potentially raising expectations for iPhone sales while artificial intelligence (AI)-related business booms. The company, which assembles the majority of Apple Inc’s smartphones, reported a 19.03 percent rise in monthly sales to NT$510.9 billion (US$15.78 billion), from NT$429.22 billion in the same period last year. On a monthly basis, sales rose 14.16 percent, it said. The company in a statement said that last month’s revenue was a record-breaking April performance. Hon Hai, known also as Foxconn Technology Group (富士康科技集團), assembles most iPhones, but the company is diversifying its business to
Apple Inc has been developing a homegrown chip to run artificial intelligence (AI) tools in data centers, although it is unclear if the semiconductor would ever be deployed, the Wall Street Journal reported on Monday. The effort would build on Apple’s previous efforts to make in-house chips, which run in its iPhones, Macs and other devices, according to the Journal, which cited unidentified people familiar with the matter. The server project is code-named ACDC (Apple Chips in Data Center) within the company, aiming to utilize Apple’s expertise in chip design for the company’s server infrastructure, the newspaper said. While this initiative has been
GlobalWafers Co (環球晶圓), the world’s No. 3 silicon wafer supplier, yesterday said that revenue would rise moderately in the second half of this year, driven primarily by robust demand for advanced wafers used in high-bandwidth memory (HBM) chips, a key component of artificial intelligence (AI) technology. “The first quarter is the lowest point of this cycle. The second half will be better than the first for the whole semiconductor industry and for GlobalWafers,” chairwoman Doris Hsu (徐秀蘭) said during an online investors’ conference. “HBM would definitely be the key growth driver in the second half,” Hsu said. “That is our big hope
The consumer price index (CPI) last month eased to 1.95 percent, below the central bank’s 2 percent target, as food and entertainment cost increases decelerated, helped by stable egg prices, the Directorate-General of Budget, Accounting and Statistics (DGBAS) said yesterday. The slowdown bucked predictions by policymakers and academics that inflationary pressures would build up following double-digit electricity rate hikes on April 1. “The latest CPI data came after the cost of eating out and rent grew moderately amid mixed international raw material prices,” DGBAS official Tsao Chih-hung (曹志弘) told a news conference in Taipei. The central bank in March raised interest rates by