Eagle Eye Networks

Cloudflare Security Bug

February 27, 2017 Eagle Eye Networks

Eagle Eye Networks does not use Cloudflare – a website performance enhancement service.

cloudflare - Cloudflare Security Bug

There was a relatively severe security issue detected by Tavis Ormandy at Project Zero in the Cloudflare service. He found that certain private information could be extracted under some rare circumstances. It’s a severe security issue, but it’s been fixed.

It’s particularly interesting because once the vulnerability was known, Cloudflare was able to completely fix it in 7 hours and 47 minutes. That’s a great response time and is indicative of what you get with a professional cloud service.

In order to deliver that kind of service, companies need a full in-house engineering team, a top-notch operations team, and a full in-house security team. You are not going to get this level of response when outsourcing or using a service that is not fully staffed and professional. Too many operators in the physical security business operate using an outsourced model or lightly staffed security.

Eagle Eye has a full level of professional all in-house staff, and we work hard on our cybersecurity.

https://arstechnica.com/security/2017/02/serious-cloudflare-bug-exposed-a-potpourri-of-secret-customer-data/
https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/

Tags

Other posts that might interest you

loading

Beware of Cloud Imposters

We recently had a discussion with a customer regarding the cyber security of their “fake cloud” provider for access control. They had been sold a bill of goods for an…

July 20, 2017 Eagle Eye Networks

Canon Cameras Hacked in Japan

Today, the Japan Times reported that dozens of networked Canon surveillance cameras throughout Japan had been hacked. Limited information is available, but it appears surveillance for nursing homes to waterways…

May 8, 2018 Eagle Eye Networks

The 4 Cyber Security Risks for Video Monitoring Centers

Video Monitoring Centers are taking unnecessary cyber security risks daily just by working with video surveillance providers that are not cyber secure. But just because the video surveillance market stays…

November 2, 2017 Eagle Eye Networks