Blessed Cloudbleed, Who Bled Into the Cache

Patron of reverse proxies, hand-written HTML parsers, and search engines that remember too much.

Life

On 18 February 2017 Tavis Ormandy of Google Project Zero warned Cloudflare that some pages served by its proxies contained chunks of other people's memory: cookies, tokens and messages from other sites. The culprit was an HTML parser that, in rare cases, read past the end of its buffer. Cloudflare switched off the features involved within hours, but before announcing it on 23 February it had to ask search engines to purge the copies they had already saved.

Prayer

O Blessed Cloudbleed, who scattered secrets across other people's pages, let our parsers know where the buffer ends. Amen.

How to celebrate

Celebrated by rotating sessions and passwords, checking the bounds of every pointer, and purging the world's caches.

Read past the end, and you'll tell everyone else's business.