Post Mortem on Cloudflare Control Plane and Analytics Outage

Re:Post Mortem on Cloudflare Control Plane and Analytics Outage by davewritescode on Saturday November 04, 2023 @09:05AM (#38140684)

I’m going to leave out some details but there was a period of time where you could bypass cloudflare’s IP whitelisting by using Apple’s iCloud relay service. This was fixed but to my knowledge never disclosed.

[ Parent | on HN ]

Re:Post Mortem on Cloudflare Control Plane and Analytics Outage by belter on Saturday November 04, 2023 @09:57AM (#38141030)

There was a time when they were dumping encryption keys into search engine caches for weeks, and had the audacity to claim here, the issue was "mostly" solved. Until they were called out on it by Google Project Zero team...

"Cloudflare Reverse Proxies Are Dumping Uninitialized Memory" - https://news.ycombinator.com/item?id=13718752

[ Parent | on HN ]

Re:Post Mortem on Cloudflare Control Plane and Analytics Outage by byteknight on Saturday November 04, 2023 @09:57AM (#38141031)

There still exist many bypasses that work in a lot of cases. There's even services for it now. Wouldn't be surprised if that or similar was a technique employed.

[ Parent | on HN ]

Re:Post Mortem on Cloudflare Control Plane and Analytics Outage by sidikmat on Sunday November 05, 2023 @09:00AM (#38151169)

Saw.t

[ Parent | on HN ]