Explain how to 'prove' my sites were not affected about sites-using-cloudflare

[coderobe]

Whilst there is no reason to believe that low-profile sites were affected, it's entirely possible - because the cf servers apparently also leaked unrelated data if it happened to be on the same reverse-proxy node as a different website

This means that if your server was served on the same node as a high-profile site, and a login happened on your site during the last few months, it's completely possible that sensitive data has leaked through the high-profile sites

[pirate]

Can you list the domains you want removed, and whether or not they contain user data.
I will check if they are using the SSL proxy.

If your site is just a static site or has no personal user data, I'm happy to remove it.

[turtledude01]

******* has only 1 account which is mine so remove it. Friends site '********' has not had user accounds ever, tho I cant prove this... ******* has a couple of user accounts running through joomla

[pirate]

radicaldelta.org and turtle-mc.org are both returning server:cloudflare-nginx, codywentz.com is down so I cant check it.

[turtledude01]

like i said, ****** has ONLY 1 account which is MY OWN ACCOUNT and ******* is barely ever up, doesnt use cloudflare for anything other than dns, and doesnt have user accounts. ******* is the only one that could have 'potentially' (1 in ~2 trillion chance) have leaked information.

[coderobe]

describing the underlying tech stack would give some insight as well.

turtle-mc was likely affected, because it's using the cloudflare reverse proxy and runs joomla, which provides an account system

[turtledude01]

And if you refuse to remove ******** or believe that it 100% was compromised then i would be happy to force a reset on all user passwords, which will send the users an email with a link to reset their password. I refuse to 'prove' that this was done as that would be a security threat in itself

[turtledude01]

I just sent an email to every user of ****** explaining that their account may have been leaked and I might be resetting passwords. this better be enough to have it removed as its all i can do

[SpEcHiDe]

Can you remove shrimadhavuk.me also from the list, because it is just a static site hosted by GitLab Pages built using Jekyll? I do not think I collect any user-data on the given site.

[pirate]

@SpEcHiDe please submit a PR, I'll approve it if it's a static page.

@turtledude01 I'm closing this issue, as I said earlier, I'm only removing sites that are provably static content, contain no user data, or never used cloudflare during the affected period.