
2/2/2019 · John Graham-Cumming
What this post added
This post details the Cloudbleed incident, a critical security vulnerability involving a memory leak that exposed sensitive data. It describes the discovery of the leak, the rapid response to stop it within 45 minutes, the subsequent massive cleanup effort involving search engines, and the transparent public disclosure. The post emphasizes the challenges of unknown impact, the importance of statistical analysis of limited logs to detect exploitation, and how the incident reinforced Cloudflare's culture of openness and customer trust.