Cloudbleed PSA: BitSharestalk.org affected. CHANGE YOUR PASSWORDS by ash

View this thread on: hive.blog | peakd.com | ecency.com

bitshares · @ash · Feb 24 '17

$5.29

Cloudbleed PSA: BitSharestalk.org affected. CHANGE YOUR PASSWORDS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

as a consequence, any traffic that went through cloudflare (even https) could potentially be leaked. that includes your passwords in plain text. 

ssl is broken design, and it was just a matter of time until that bubble burst big time.

affected sites (among many more)

bitsharestalk
poloniex
localbitcoins
kraken
reddit

please change your passwords immediately and re-enable 2fa.

fav
24/02/2017 
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.64
Comment: https://keybase.io/crypto
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=Jl4J
-----END PGP SIGNATURE-----

👍 fuzzyvest, stellabelle, steempower, cryptoctopus, berniesanders, ajvest, engagement, chitty, noisy, nextgencrypto, thecyclist, opheliafu, chris4210, thecryptodrive, etcmike, ihashfury, cm-steem, awgbibb, proctologic, ash, fubar-bdhr, steemdrive, fyrstikken, silversteem, juanmiguelsalas, markopaasila, xanoxt, jademont, silver, matrixdweller, cryptofunk, bola, valtr, intelliguy, unosuke, jaycobbell, michaellamden68, gardoz32, chessmasters, pheonike, runridefly, steemprentice, zathras, germanlifestyle, kobold-djawa, the-ego-is-you, gamer00, expanse, zatrhas, beerbot, pairmike, virtualgrowth, ardina, quck, sqube, ppitonak, gildar, annieb, juurop, bitland, obverse, tsirkus, elven, karenmckersie, and 60 others

`author`	ash
`permlink`	cloudbleed-psa-bitsharestalk-org-affected-change-your-passwords
`category`	bitshares
`json_metadata`	{"tags":["bitshares","cloudbleed"],"links":["https://keybase.io/crypto"],"app":"steemit/0.1","format":"markdown"}
`created`	2017-02-24 06:32:12
`last_update`	2017-02-24 06:32:12
`depth`	0
`children`	5
`last_payout`	2017-03-27 09:28:39
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	5.224 HBD
`curator_payout_value`	0.069 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	1,317
`author_reputation`	286,803,743,324,398
`root_title`	"Cloudbleed PSA: BitSharestalk.org affected. CHANGE YOUR PASSWORDS"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	2,580,884
`net_rshares`	12,217,933,133,117
`author_curate_reward`	""

properties (23)vote details (124)

voter	rshares	pct
berniesanders	417,435,600,734	5%
fuzzyvest	4,685,607,552,933	100%
silver	25,031,749,931	5%
silversteem	42,393,487,001	5%
ihashfury	115,128,205,577	100%
nextgencrypto	229,636,477,393	5%
ajvest	404,147,211,070	100%
fav	1,536,706,793	100%
steempower	1,186,549,217,368	100%
pairmike	3,725,849,674	1%
pheonike	7,788,157,863	3%
proctologic	103,217,015,047	70%
markopaasila	33,698,227,833	100%
konelectric	812,020,968	1%
fractalnode	660,414,422	100%
proctologic2	209,622,185	70%
ash	100,173,473,337	100%
chitty	335,651,846,927	100%
unosuke	14,941,223,001	100%
chris4210	183,868,391,694	100%
valtr	16,981,550,037	100%
noisy	260,068,416,047	100%
proctologic3	546,367,805	70%
ppitonak	2,952,313,715	100%
jademont	25,477,330,085	100%
forrestwillie	646,488,605	1%
cryptoctopus	684,021,572,024	50%
cryptofunk	18,951,200,091	89%
cm-steem	107,628,082,747	100%
applecrisp	127,224,397	8%
stellabelle	1,501,053,568,983	100%
intelliguy	16,002,941,433	100%
juanmiguelsalas	37,208,593,491	100%
thecryptodrive	175,577,562,325	100%
andrei	252,331,491	1%
fyrstikken	52,290,696,695	1.33%
grey580	373,735,321	1%
spikykevin	1,654,317,715	100%
michaellamden68	8,705,424,920	100%
expanse	4,451,815,656	100%
ardina	3,309,402,253	100%
annieb	2,449,553,815	100%
bitland	2,409,104,602	100%
jaycobbell	14,169,447,455	100%
karenmckersie	1,755,731,161	1%
rouketas	52,182,255	100%
opheliafu	213,082,432,091	91%
ubg	587,380,249	1%
fubar-bdhr	75,881,835,616	80%
bola	17,048,074,194	40%
steemdrive	56,665,611,869	100%
dirty.hera	95,335,693	15%
toxichan	162,269,843	1%
timelapse	462,598,695	1%
juurop	2,429,249,720	80%
usb	648,870,813	80%
tannukas6	63,574,345	1%
darthnava	367,930,103	1%
gardoz32	8,361,002,149	100%
matrixdweller	22,434,458,881	100%
virtualgrowth	3,619,548,661	15%
awgbibb	105,487,607,901	100%
shadowspub	563,383,458	1%
etcmike	148,005,783,768	50%
runridefly	7,625,151,188	24%
barrydutton	1,228,762,379	1%
steemitguide	584,031,226	1%
richardcrill	1,439,503,642	1%
xanoxt	30,130,968,201	100%
thecyclist	220,521,628,772	5%
the-ego-is-you	4,656,084,656	100%
jacobts	229,207,640	1%
patelincho	110,898,897	1%
thegame	831,845,760	15%
steembets	844,771,714	15%
gamer00	4,455,997,510	1%
revostrike	104,922,406	1%
giantbear	1,228,920,491	1%
stray	422,781,798	1%
zatrhas	4,241,785,654	80%
zathras	6,644,579,359	80%
steemspeak	215,097,696	1%
fyrst-witness	410,152,023	1%
lovethepeople	95,042,573	70%
daisyd	239,500,505	1%
steemland.com	844,846,156	15%
porco-bastardo	92,354,860	70%
sqube	2,967,499,046	1%
whatageek	681,452,340	1%
chessmasters	7,896,977,436	100%
our	493,727,479	80%
steemprentice	6,842,104,657	15%
bugs	467,850,704	80%
important	498,920,169	80%
government	467,677,933	80%
elven	1,963,586,748	80%
engagement	388,030,399,840	5%
bottymcbotface	390,720,915	99%
fairlight	476,072,492	80%
seablue	342,814,641	1%
gildar	2,503,558,244	100%
meysam	507,627,114	1%
germanlifestyle	5,977,301,699	35%
jphenderson	243,775,295	15%
tamersameeh	560,238,788	100%
quck	3,039,862,725	80%
beerbot	4,016,544,673	80%
stmdxrafi	61,422,363	50%
johnthehoan	291,153,498	100%
tsirkus	2,041,378,654	80%
obverse	2,059,347,971	80%
driptorchpress	76,911,086	1%
kobold-djawa	5,006,178,319	100%
wwwords	1,185,747,239	100%
thedeplorable1	496,998,206	1%
eem	303,434,978	99%
azlicr	123,686,117	100%
denmarkguy	233,446,597	1%
mestyz	51,652,422	100%
fahmiauliasfr	886,261,229	100%
samuelpaddy	350,083,104	100%
austrin16	1,211,782,617	80%
carfanatic	638,720,256	80%
kamidela	51,025,493	100%

@ash · Feb 24 '17

steemit.com
protonmail.com
bitcointalk.org 

not affected by the way

👍 timsaid, ash, markopaasila, matrixdweller, the-ego-is-you, johnthehoan, kamidela

`author`	ash
`permlink`	re-ash-cloudbleed-psa-bitsharestalk-org-affected-change-your-passwords-20170224t063531918z
`category`	bitshares
`json_metadata`	{"tags":["bitshares"],"app":"steemit/0.1"}
`created`	2017-02-24 06:35:33
`last_update`	2017-02-24 06:35:33
`depth`	1
`children`	0
`last_payout`	2017-03-27 09:28:39
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	68
`author_reputation`	286,803,743,324,398
`root_title`	"Cloudbleed PSA: BitSharestalk.org affected. CHANGE YOUR PASSWORDS"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	2,580,891
`net_rshares`	392,154,327,112
`author_curate_reward`	""

properties (23)vote details (7)

voter	rshares	pct
markopaasila	34,385,946,768	100%
ash	100,227,170,054	100%
timsaid	230,108,481,098	100%
matrixdweller	22,434,458,881	100%
the-ego-is-you	4,656,084,656	100%
johnthehoan	291,160,162	100%
kamidela	51,025,493	100%

@intelliguy · Feb 24 '17

I've seen so many security exploits in basic things like libc, openssl, linux kernel in the last 12 months it's quite sick. We need to stop building new features and just re-audit all code, everywhere for the next 2 years.  It's so sad.

👍 j3dy, fractalnode

`author`	intelliguy
`permlink`	re-ash-cloudbleed-psa-bitsharestalk-org-affected-change-your-passwords-20170224t081257993z
`category`	bitshares
`json_metadata`	{"tags":["bitshares"],"app":"steemit/0.1"}
`created`	2017-02-24 08:13:48
`last_update`	2017-02-24 08:13:48
`depth`	1
`children`	1
`last_payout`	2017-03-27 09:28:39
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	236
`author_reputation`	62,276,657,564,898
`root_title`	"Cloudbleed PSA: BitSharestalk.org affected. CHANGE YOUR PASSWORDS"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	2,581,191
`net_rshares`	2,236,488,320
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
fractalnode	0 B		660,414,422	100%
j3dy	0 B		1,576,073,898	100%

@j3dy · Feb 25 '17

I feel ya man, open source does provide some places for exploitation, whos doing all that hacking btw

properties (22)

`author`	j3dy
`permlink`	re-intelliguy-re-ash-cloudbleed-psa-bitsharestalk-org-affected-change-your-passwords-20170225t141554728z
`category`	bitshares
`json_metadata`	{"tags":["bitshares"],"app":"steemit/0.1"}
`created`	2017-02-25 14:16:00
`last_update`	2017-02-25 14:16:00
`depth`	2
`children`	0
`last_payout`	2017-03-27 09:28:39
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	101
`author_reputation`	9,439,758,416,991
`root_title`	"Cloudbleed PSA: BitSharestalk.org affected. CHANGE YOUR PASSWORDS"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	2,590,421
`net_rshares`	0

@screenname · Feb 24 '17

Re: Cloudbleed PSA: BitSharestalk.org affected. CHANGE YOUR PASSWORDS

<p>This post has been ranked within the top 25 most undervalued posts in the first half of Feb 24. We estimate that this post is undervalued by $4.50 as compared to a scenario in which every voter had an equal say.</p> 
<p>See the full rankings and details in <a href="https://steemit.com/curation/@screenname/the-daily-tribune-most-undervalued-posts-of-feb-24---part-i">The Daily Tribune: Feb 24 - Part I</a>. You can also read about some of our methodology, data analysis and technical details in <a href="https://steemit.com/curation/@screenname/introducing-the-daily-tribune-most-undervalued-posts-of-nov-04---part-i">our initial post</a>.</p>
<p>If you are the author and would prefer not to receive these comments, simply reply "Stop" to this comment.</p>

properties (22)

`author`	screenname
`permlink`	re-cloudbleed-psa-bitsharestalk-org-affected-change-your-passwords-20170224t130625
`category`	bitshares
`json_metadata`	"{"replyto": "@ash/cloudbleed-psa-bitsharestalk-org-affected-change-your-passwords"}"
`created`	2017-02-24 13:06:27
`last_update`	2017-02-24 13:06:27
`depth`	1
`children`	0
`last_payout`	2017-03-27 09:28:39
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	762
`author_reputation`	46,276,338,038,330
`root_title`	"Cloudbleed PSA: BitSharestalk.org affected. CHANGE YOUR PASSWORDS"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	2,582,678
`net_rshares`	0

@the-ego-is-you · Feb 24 '17

As I replied to another post on the same subject already, this is an excellent reason for CoAgorism and to build better decentralized systems.

properties (22)