Worth noting this statement by Cloudflare CTO:
"I am not changing any of my passwords. I think the probability that somebody saw something is so low it's not something I am concerned about."
"I am not changing any of my passwords. I think the probability that somebody saw something is so low it's not something I am concerned about."
Seems to me that management's attempt to downplay the problem exposes the company to as much risk as the original technical mistake.
In trying to downplay it, he's making the matter even worse.
And he's fairly active on these forums. That seems like such an odd thing to say given how important security is/should be at CF...curious if jgrahamc would further clarify his position here.
By citing a personal view point they're seeking to downplay the issue while providing little useful advice.