InCommon Operations Notifications

[Thomas Scavo <>]

You are receiving this message because you are an InCommon Site Administrator 
(or are otherwise subscribed to this mailing list). Your prompt action may be 
required. Please read this message carefully.

The Internet service provider Cloudflare has reported an incident that caused 
random information from one Cloudflare-backed site to leak across other 
Cloudflare-backed sites over a five-month period. It is thought that leaked 
information included email messages, personally identifying information, and 
possibly even user passwords. For more information about the incident, visit:

https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/

The InCommon Federation Manager (FM) has never used the Cloudflare service. 
However, if you use your FM password to log into other sites, and one of 
those sites uses the Cloudflare service, your FM password may have been 
leaked. In that case, you should change your FM password immediately.

If you used the Cloudflare service any time since September 2016 AND you 
reuse passwords across sites, you should probably change your FM password. If 
you use your FM password to log into ANY other site (except the FM), you 
should change your FM password immediately.

Password Reset for Site Administrators https://spaces.internet2.edu/x/4hP5AQ

If you have any difficulty using the automated password reset service, please 
contact us immediately at 


-----
Tom Scavo
For InCommon Operations