Bitcoin Forum
September 19, 2018, 09:57:13 AM *
News: ♦♦ Bitcoin Core users must update to 0.16.3 [Torrent]. More info.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: CLOUDFLARE的出现漏洞,比特币交易所建议用户修改密码!  (Read 124 times)
japerrrr
Member
**
Offline Offline

Activity: 78
Merit: 10


View Profile
February 27, 2017, 07:47:10 AM
 #1

由于在网络安全公司Cloudflare中发现了一个漏洞,比特币交易所和其他在线服务供应商警告用户要修改密码了!

Cloudflare提供拒绝服务保护,在今天发布的博客文章中详细描述了这个问题。该漏洞最初是由Google网络安全研究员Tavis Ormandy发现的。

这是一个叫作‘Cloudbleed’的漏洞——参考2014年的Heartbleed漏洞,该漏洞被认为早在2016年9月就开始影响服务,导致密码和身份验证代币这样的敏感信息被泄露了。该公司说之后就对该漏洞打补丁了。

漏洞的新闻已经让诸如Poloniex和Kraken这样的交易所发出警告,建议用户更改密码、双因素身份验证和API密钥。从广义上来说,网络安全倡导者强烈建议使用了Cloudflare任何站点的用户更改密码以防后患。



在Cloudflare的博客文章中,对用户真正造成威胁的是搜索引擎补抓到的用户信息。

公司解释说:

“这次漏洞事件是非常严重的,因为泄露的信息可能包括私人信息,而且是搜索引擎缓存的信息。我们还没发现任何人在恶意利用漏洞或报告漏洞位置。受最多影响的时间是从2月13日和2月18日,通过Cloudflare的每3,300,000个HTTP请求中约有1个可能导致内存泄漏(约为请求的0.00003%)。”
GitHub上的用户列出了一个可能受到漏洞影响的站点列表,其中包括Coinbase、BitPay、Blockchain和LocalBitcoins等行业服务。

其他主要网站,包括Reddit,Uber和OKCupid,据说也受到影响。
1537351033
Hero Member
*
Offline Offline

Posts: 1537351033

View Profile Personal Message (Offline)

Ignore
1537351033
Reply with quote  #2

1537351033
Report to moderator
1537351033
Hero Member
*
Offline Offline

Posts: 1537351033

View Profile Personal Message (Offline)

Ignore
1537351033
Reply with quote  #2

1537351033
Report to moderator
1537351033
Hero Member
*
Offline Offline

Posts: 1537351033

View Profile Personal Message (Offline)

Ignore
1537351033
Reply with quote  #2

1537351033
Report to moderator
There are several different types of Bitcoin clients. The most secure are full nodes like Bitcoin Core, but full nodes are more resource-heavy, and they must do a lengthy initial syncing process. As a result, lightweight clients with somewhat less security are commonly used.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1537351033
Hero Member
*
Offline Offline

Posts: 1537351033

View Profile Personal Message (Offline)

Ignore
1537351033
Reply with quote  #2

1537351033
Report to moderator
1537351033
Hero Member
*
Offline Offline

Posts: 1537351033

View Profile Personal Message (Offline)

Ignore
1537351033
Reply with quote  #2

1537351033
Report to moderator
benjamin1880
Newbie
*
Offline Offline

Activity: 47
Merit: 0


View Profile
February 27, 2017, 09:03:54 AM
 #2

吓得我为了账户里的100块赶紧修改了密码
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!