|
Title: Can we have a list of casinos that made use of Cloudflare? Post by: Kprawn on February 25, 2017, 04:56:21 PM We know a lot of sites are hiding behind Cloudflare and these sites might have been compromised and possibly affected by the CloudBleed. The
published list might be wrong, so if you can provide a comprehensive list for people or simply posting the site here, it would make things a bit easier. I have started to change passwords and to enable 2FA for the sites I am aware of that use Cloudflare. This sucks!!!!! >:( >:( >:( >:( Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: cpfreeplz on February 25, 2017, 05:05:23 PM Are you going to be adding it to the OP? Because I don't know how to find out who used Cloudflare or not. Could you add the sites that you've already changed your passwords to?
Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: Wendigo on February 25, 2017, 05:06:36 PM I am pretty sure NitrogenSports use Cloudflare so if you have an account there go change your password now.
https://nitrogensports.eu/blog/position-on-the-cloudflare-leak/ Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: debuni on February 25, 2017, 05:37:05 PM Almost all major Bitcoin Casinos...
You could check Cloudbleed Wiki (https://en.wikipedia.org/wiki/Cloudbleed) Here is the list of : Sites using CloudFlare (https://github.com/pirate/sites-using-cloudflare) Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: bajing on February 25, 2017, 06:48:36 PM We know a lot of sites are hiding behind Cloudflare and these sites might have been compromised and possibly affected by the CloudBleed. The If the site are already using cloudflare then you might have noticed IP address in DNS lookup get reflected with cloudflare. I think you not to be worries if now already use 2fa.published list might be wrong, so if you can provide a comprehensive list for people or simply posting the site here, it would make things a bit easier. I have started to change passwords and to enable 2FA for the sites I am aware of that use Cloudflare. This sucks!!!!! >:( >:( >:( >:( Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: JasonXG on February 25, 2017, 07:44:48 PM We know a lot of sites are hiding behind Cloudflare and these sites might have been compromised and possibly affected by the CloudBleed. The published list might be wrong, so if you can provide a comprehensive list for people or simply posting the site here, it would make things a bit easier. I have started to change passwords and to enable 2FA for the sites I am aware of that use Cloudflare. This sucks!!!!! >:( >:( >:( >:( Can't you first explain what you mean before saying all this ? What is cloudbleed ? Why are you worrying about cloudflare ? Did your account get hacked or lost or something ? I dont understand what the problem is but I am interested since you mentioned cloudflare and it is used on many sites so do you think you could clarify this for me please ? I'm interested to hear your reasons. Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: SyGambler on February 25, 2017, 07:48:28 PM We know a lot of sites are hiding behind Cloudflare and these sites might have been compromised and possibly affected by the CloudBleed. The published list might be wrong, so if you can provide a comprehensive list for people or simply posting the site here, it would make things a bit easier. I have started to change passwords and to enable 2FA for the sites I am aware of that use Cloudflare. This sucks!!!!! >:( >:( >:( >:( not sure about the sites but I'm sure that it's so hard to list all of them in general you should always set 2FA no matter what the site is using , it's a lot safer and you won't worry about your money or at least set 2FA for the sites that you use frequently and usually keep money on Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: lite on February 25, 2017, 07:54:24 PM We know a lot of sites are hiding behind Cloudflare and these sites might have been compromised and possibly affected by the CloudBleed. The If the site are already using cloudflare then you might have noticed IP address in DNS lookup get reflected with cloudflare. I think you not to be worries if now already use 2fa.published list might be wrong, so if you can provide a comprehensive list for people or simply posting the site here, it would make things a bit easier. I have started to change passwords and to enable 2FA for the sites I am aware of that use Cloudflare. This sucks!!!!! >:( >:( >:( >:( Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: MinerHQ on February 26, 2017, 12:05:10 AM We know a lot of sites are hiding behind Cloudflare and these sites might have been compromised and possibly affected by the CloudBleed. The If the site are already using cloudflare then you might have noticed IP address in DNS lookup get reflected with cloudflare. I think you not to be worries if now already use 2fa.published list might be wrong, so if you can provide a comprehensive list for people or simply posting the site here, it would make things a bit easier. I have started to change passwords and to enable 2FA for the sites I am aware of that use Cloudflare. This sucks!!!!! >:( >:( >:( >:( Yes, I do agree on this because once I also lost around 0.04BTC paid to my account from signature campaign but by the time I signed in into account someone else was played some games and lost all my money. It has happened in the beginning so after that I will always enable 2fa function. Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: adaseb on February 26, 2017, 12:45:23 AM Most use it. The most common ones like PrimeDice and Fortunejack use it for sure.
I already changed my passwords on those. However do you know if you need to change your 2FA? Could your secret code of been leaked somehow? Because all you do is type in the 6 digits which keep changing. Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: klf on February 26, 2017, 01:09:33 AM Most use it. The most common ones like PrimeDice and Fortunejack use it for sure. I already changed my passwords on those. However do you know if you need to change your 2FA? Could your secret code of been leaked somehow? Because all you do is type in the 6 digits which keep changing. Not only those two sites but most of the reputed sites provide that 2fa feature. Bitsler also has this feature, once you enable this feature even for withdrawing your funds also you need to enter 2fa feature password to send money. If I'm not wrong, fortunejack asks 2fa password only during login time and never ask while withdrawing funds. Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: BettorChain.com on February 26, 2017, 01:59:36 AM You can check if a website use cloudflare here: http://www.doesitusecloudflare.com/
Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: Qartersa on February 26, 2017, 02:54:35 AM Most use it. The most common ones like PrimeDice and Fortunejack use it for sure. I already changed my passwords on those. However do you know if you need to change your 2FA? Could your secret code of been leaked somehow? Because all you do is type in the 6 digits which keep changing. Not only those two sites but most of the reputed sites provide that 2fa feature. Bitsler also has this feature, once you enable this feature even for withdrawing your funds also you need to enter 2fa feature password to send money. If I'm not wrong, fortunejack asks 2fa password only during login time and never ask while withdrawing funds. So are you saying that 2fa is actually more harmful than it is helpful? Since everything got compromised due to the stupid cloudflare, which should actually be the protector of websites, mean that there is a possibility that the 2fa could have been stolen and used to withdraw? That would be scary to think that my money is now not safe from websites using cloudflare. Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: Zodiac1233 on February 26, 2017, 03:07:22 AM Most use it. The most common ones like PrimeDice and Fortunejack use it for sure. I already changed my passwords on those. However do you know if you need to change your 2FA? Could your secret code of been leaked somehow? Because all you do is type in the 6 digits which keep changing. Not only those two sites but most of the reputed sites provide that 2fa feature. Bitsler also has this feature, once you enable this feature even for withdrawing your funds also you need to enter 2fa feature password to send money. If I'm not wrong, fortunejack asks 2fa password only during login time and never ask while withdrawing funds. So are you saying that 2fa is actually more harmful than it is helpful? Since everything got compromised due to the stupid cloudflare, which should actually be the protector of websites, mean that there is a possibility that the 2fa could have been stolen and used to withdraw? That would be scary to think that my money is now not safe from websites using cloudflare. The keys used when you first setup your 2fa on sites could have been leaked as the bug was present for many months. 2fa would still keep your account secure, though, since you'd need your 2fa key and password stolen to have your account compromised on the affected sites as opposed to just your password alone. The odds of having your 2fa key and password both leaked for the same site are nearly zero. The recommendation is to still reset your 2fa (most sites should give you a new key if you do this), along with resetting your password. Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: coingamblingreviews on February 26, 2017, 03:22:23 AM Well this is a bit scary.
Just need to change my password and 2FA on all gambling sites to be safe? Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: NLNico on February 26, 2017, 04:06:46 AM I made a list of some bitcoin sites that use Cloudflare. While the chances are very small that your info was leaked, it can't hurt to change your passwords on these sites:
Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: carlfebz2 on February 26, 2017, 04:10:22 AM I made a list of some bitcoin sites that use Cloudflare. While the chances are very small that your info was leaked, it can't hurt to change your passwords on these sites: Thanks for this list atleast i do know now what sites do use cloudfare and seeing on it seems like i do have some accounts on those websites listed and i think theres more and people should really add it up here so that members or community would able to have awareness.
Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: piloder on February 26, 2017, 05:27:13 AM I made a list of some bitcoin sites that use Cloudflare. While the chances are very small that your info was leaked, it can't hurt to change your passwords on these sites: Thank you for the list just changed my password in poloniex and fortunejack. Yes its better not to take chance of getting hacked. Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: Loepuenkyou on February 26, 2017, 05:36:00 AM ussualy if you have much balance, in all service not only casino and gambling site
but exchanger and more always use 2FA, safe youre account iam many user in gambling site, directbet, crypto-game.nets, yolodice,primedice, duckdice but can't notification about must replace password iam only get notification from poloniex and kraken Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: milewilda on February 26, 2017, 05:43:53 AM I made a list of some bitcoin sites that use Cloudflare. While the chances are very small that your info was leaked, it can't hurt to change your passwords on these sites: Thank you for the list just changed my password in poloniex and fortunejack. Yes its better not to take chance of getting hacked. Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: sulendra12 on February 26, 2017, 07:29:57 AM ~snipped~ It doesn't hurt you much for doing this, only takes 5 minutes to do unless you are a lazy person.That's highly recommended to reset your 2FA as well like ICONOMI's email said. Gonna change my password now. :) Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: adaseb on February 26, 2017, 08:54:55 AM One thing I dont understand is why we have to disable 2FA and re-enable 2FA if we were using it in the past? The secret backup 2FA code shouldn't of been leaked in anyway. When we put in the 6 digit code, its after some type of hash and you can't reverse engineer it.
Even if you knew a bunch of codes in sequential order. So can someone clarify why we need to disable and enable 2FA? Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: BRE on February 26, 2017, 09:08:40 AM Hello, LuckyBit visitors! We are aware that LuckyBit is one of the sites affected by the CloudBleed Bug (https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/). We have performed a systemwide audit and determined that we are largely unaffected by the bug. Due to the on-chain nature of our game, no wallet data or personal information was placed at risk by the bug; only publicly available information would be available, so LuckyBit users have nothing to fear from their use of our site. LuckyBit Micro and LuckyBit Derby are also unaffected directly - their backends were not subject to the bug. We are also aware that MoneyPot is one of the affected sites and have taken the necessary precautions as advised by their administration. You can always log out of LuckyBit Micro/Derby and log back in to generate a new token, and this will protect you against any potential data theft. If you have questions or concerns, feel free to pop in to the chat at LuckyBit (https://luckyb.it/) and ask your question. Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: Lionidas on February 26, 2017, 09:14:47 AM I knew that Cloudbet used them but coinbase?
Oh this is worst then I expected it to be. And it just didn't effect these not so important bitcasino sites and exchanges and wallet sites as well. :-X Cloudbleed nice term to use for this utter failure of common sense on a massive scale here. Expect law suits to follow if anyone loses millions of dollars in bitcoin theft because of this breach in trust of a company whose sole purpose was to protect their clients from attacks on their sites so not to have their client and customer's account information secure in the first place. :-\ Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: ralle14 on February 26, 2017, 09:45:20 AM One thing I dont understand is why we have to disable 2FA and re-enable 2FA if we were using it in the past? The secret backup 2FA code shouldn't of been leaked in anyway. When we put in the 6 digit code, its after some type of hash and you can't reverse engineer it. It's up to you if you want to reset your 2fa or not but as what zodiac said the chances of both your pw and 2fa getting leaked from the same site is zero so resetting isn't necessary but others still do this just to be on the safer side of things.Even if you knew a bunch of codes in sequential order. So can someone clarify why we need to disable and enable 2FA? Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: ethereumhunter on February 26, 2017, 10:36:14 AM i think if we have activated our 2FA and change our password before, we can skip this step but i don't know is it affected to secure our account or not, i think its better we change it to prevent bad thing that might be happen to us. i hope that the bug is already fix so we don't have to thinking too much about this and we can continue to playing gambling games with safe.
Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: Slark on February 26, 2017, 12:36:16 PM It is not like your personal account details were leaked, the amount of sensitive data compromised by that security flaw is less than 0,00003%
If the service you are using is reliable they should send you a warning mail, that your account might be affected. If they didn't do it then, either: 1. They are confident it is not a problem and everything will be all right. 2. They don't want to cause panic and undermine consumer's trust in their service. 3. They are incompetent and don't care about security. Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: lsqgoddess on February 26, 2017, 01:36:57 PM I made a list of some bitcoin sites that use Cloudflare. While the chances are very small that your info was leaked, it can't hurt to change your passwords on these sites:
Very comprehensive list, thanks dude very much. Actually we need to modify our passwords, although it is unecessary because the probability of leaked info is extremely low, only 1 out of 3 million. Title: Re: Can we have a list of casinos that made use of Cloudflare? Post by: e-coinomist on February 26, 2017, 06:36:38 PM I made a list of some bitcoin sites that use Cloudflare. While the chances are very small that your info was leaked, it can't hurt to change your passwords on these sites:
Very comprehensive list, thanks dude very much. Actually we need to modify our passwords, although it is unecessary because the probability of leaked info is extremely low, only 1 out of 3 million. bitwala, the xapo card, trezor even! The miningpool that I have been trusting the most. This is worse than heartbleed been. And one against a million isn't unlikely :D from a gambler's perspective. Maybe bitcoins very own country has been exceptionally sensitive on DDoS attacks to run into this plot? Just mentioning none of my other payment services (FIAT based) got affected. |