If you're changing passwords due to CloudBleed, remember, it's not the passwords that matter, it's the auth *tokens*.
-
-
Replying to @marcan42
Well-designed sites will revoke existing auth tokens on password change, but some won't, and on those, you're screwed.
2 replies 23 retweets 10 likes -
Replying to @marcan42
Your passwords only get sent to CloudFlare when you log in, but the tokens get sent *on every single request*.
1 reply 29 retweets 21 likes
That also means that if you have any apps that use services behind CloudFlare, you need to revoke their authorizations and re-authorize them
9:01 PM - 23 Feb 2017
0 replies
26 retweets
12 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.