Author

Topic: Cloudflare question (Read 428 times)

legendary
Activity: 2296
Merit: 1014
January 08, 2017, 08:34:15 AM
#6
so im running a website which is a gambling site on cloudflare, my questoin is if someone has access to my cloudflare account is he able to take all the Money out off the hot wallet?
Im quite sure he cannot. He could do it indirectly tho, i mean, through control of your domain he could fool you to give him admin access to website/server.
legendary
Activity: 3612
Merit: 5297
https://merel.mobi => buy facemasks with BTC/LTC
January 08, 2017, 06:47:38 AM
#5
While an attacker with access to your Cloudflare account would not gain access to your servers, there are other ways he could do lots of harm. For example, by rerouting your traffic to his own site, he could potentially steal their credentials and any deposits they make during that time.

I was thinking the same thing: if an attacker gained acces to your cloudflare account, he could change your complete DNS records... Usually, you buy a domain at your registrar, and you point the nameserver to cloudflare's nameservers.
Within the cloudflare dns records, you specify the ip of your server...
An attacker can rip the whole site design, host it on his own server, change your ip by his ip in the cloudflare menu, and your visitors would be entering their username/passwords on the attacker's server without ever being able to realise this. So the attacker could do all kinds of harm (like stealing usernames, passwords, redirecting to porn, popups, harvesting emails,...)
sr. member
Activity: 528
Merit: 368
January 08, 2017, 06:34:54 AM
#4
While an attacker with access to your Cloudflare account would not gain access to your servers, there are other ways he could do lots of harm. For example, by rerouting your traffic to his own site, he could potentially steal their credentials and any deposits they make during that time.
staff
Activity: 3458
Merit: 6793
Just writing some code
January 08, 2017, 12:08:22 AM
#3
so im running a website which is a gambling site on cloudflare, my questoin is if someone has access to my cloudflare account is he able to take all the Money out off the hot wallet?
No. Cloudflare does not have access to your servers so nothing on Cloudflare's end can take the money out of the hot wallet.
newbie
Activity: 47
Merit: 0
January 07, 2017, 11:54:41 PM
#2
so im running a website which is a gambling site on cloudflare, my questoin is if someone has access to my cloudflare account is he able to take all the Money out off the hot wallet?

Why not just message cloudflare support directly? They probably have a live support too.
newbie
Activity: 31
Merit: 0
January 07, 2017, 11:47:02 PM
#1
so im running a website which is a gambling site on cloudflare, my questoin is if someone has access to my cloudflare account is he able to take all the Money out off the hot wallet?
Jump to: