⬇ Download holy card: ·
Saint Ticketbleed, Who Returned Other People's Memory
Patron of F5 BIG-IP load balancers, TLS session tickets, and the 31 bytes that should never have left.
Life
On 26 October 2016 Filippo Valsorda, then on Cloudflare's crypto team, described Ticketbleed: an F5 BIG-IP with TLS session tickets enabled could return up to 31 bytes of uninitialised memory on each connection. Inside could land other users' session IDs. It was Heartbleed's smaller cousin, with the same fault: answering with more data than was supplied.
Prayer
O Saint Ticketbleed, who shows everyone the thirty-one bytes too many, let our servers return only what they were given. Amen.
How to celebrate
Celebrated by disabling non-standard TLS session tickets on BIG-IP or updating the F5 firmware.
Answer with more than you're asked, and you answer with others' secrets.