Hacker News Reader

Comment by dsp1234 | Hacker News Reader

It doesn't have to be a secret crawler. Just one that wasn't contacted by cloudflare (I didn't see any non-US search providers mentioned).

View on HN

In other words, Baidu are currently sitting on a treasure trove of keys and passwords.

Possibly not, Baidu and CloudFlare have a well-documented long-term partnership.

Maybe there's much more to worry about Baidu's particular not-so-well documented, but longer-term partnerships.

Oh, absolutely. Baidu's relationship with their host nation should be a source of concern for us all. I've heard some interesting and unusual stories.

But they're probably aware of this issue and know enough to go looking to purge their caches.

Or Baidu know enough to not purge their caches. Think of the amount of tangible gratitude that their host nation would show them for access to some potentially tasty information....

Swap baidu for google or microsoft in that sentence and it still has the same problems. Every government 3 letter agency has a vested interest in the secrets.

They're not all 3 letters. (e.g. GHCQ, ASIO, CSIS, DGSI, etc.)

It's an expression

Whether you believe it or not, there is actually a tangible difference between the relationships US corporations have with the USG vs other nations and their corporate entities.

Well, purge their public cache, after taking a private dump and supplying it to those who would find value in such a thing.

>"I've heard some interesting and unusual stories."

Do you care to share or elaborate on this?

They're not my stories to share, I'm afraid.

+Yandex

I wonder if archive.org or archive.is have anything cached...

archive.is was red, meaning it uses Cloudflare....

www.doesitusecloudflare.com

The concern isn't that they use Cloudflare. The concern is that they're spidering the Internet, and therefore might be storing cached data that Cloudflare leaked.

while the internet archive / wayback machine do spider, I think archive.is only archives a site "on demand"

Yes but with all the people and even automated 3rd-party scripts making use of archive.is, it is practically a spider.

No TLS on this site?

Reply on news.ycombinator.com