News for hackers. Stuff that matters.
Re:Ask HN: What's the actual fallout been from the Cloudflar... by ScottBurson on Sunday March 05, 2017 @03:27PM (#13798384)
As I understand it -- somebody please correct me if I have this wrong -- the thing about Cloudbleed is that there isn't necessarily any relationship between the site whose page is cached and the site whose credentials appear in that cached page. So the only way to know that a particular site didn't have credentials leaked is to search all the caches of all the search engines on the Internet.

So, as perlgeek says, we'll probably never know specifically what the impact was.

Re:Ask HN: What's the actual fallout been from the Cloudflar... by JshWright on Sunday March 05, 2017 @06:16PM (#13799477)
Plus all the non-search engine caches, plus the computers of the zero or more people that made requests knowing these sorts of leaks were happening but didn't say anything.

The stuff that got cached was just the persistent vulnerability, there's no way to know how many people noticed the issue taking place in the direct requests they were making.

Re:Ask HN: What's the actual fallout been from the Cloudflar... by trevyn on Sunday March 05, 2017 @03:41PM (#13798465)
Or if they're not a Cloudflare customer.
Re:Ask HN: What's the actual fallout been from the Cloudflar... by Eduard on Sunday March 05, 2017 @05:28PM (#13799207)
Or if they have never been visited by some webproxy Cloudflare customer.