Cloudflare WAF Managed Rules have a habit of changing underneath you, and old SSRF names can linger long after the protection has gone. I prefer to check the live block logs, then test the ugly request shapes my applications actually accept, because that is where gaps tend to hide.
Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's...
Cloudflare WAF WordPress XSS detection now has a cleaner CVE label, but the behaviour has not changed; the rule still blocks the same traffic, just...
Cloudflare Turnstile siteverify is the bit that matters, not the widget on the page. I have seen too many setups that look protected until you replay...
Cloudflare WAF Managed Rules have a habit of changing underneath you, and old SSRF names can linger long after the protection has gone. I prefer to check the live block logs, then test the ugly...
Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.
Cloudflare WAF WordPress XSS detection now has a cleaner CVE label, but the behaviour has not changed; the rule still blocks the same traffic, just with less guesswork when I am reading logs. The...
Cloudflare Turnstile siteverify is the bit that matters, not the widget on the page. I have seen too many setups that look protected until you replay the same token and watch the backend wave it...
Cloudflare WAF scheduled release is one of those updates I trust less when it sounds tidy. Log-only first is sensible, because a fresh SQLi signature can look convincing right up until it starts...
Cloudflare’s shift from log-only to blocking for vBulletin exploit traffic is the sort of change I prefer, boring and effective. Cloudflare WAF vBulletin RCE detection now does something useful by...
Cloudflare Realtime SFU DataChannels are easy to get half right, which is usually how I end up debugging them at midnight. Set `maxRetransmits` deliberately, because ordered delivery and retry budgets...
Cloudflare Gateway package registry security only becomes useful once TLS is decrypted, because the package name, version, and namespace live inside the request, not on the outside. I prefer to test...
Cloudflare Artifacts jurisdictions are fixed at namespace creation, so the choice is made once and lived with. I prefer that sort of bluntness, because if you get the API payload wrong, the only fix...
Cloudflare Access for Workers finally fixes a mess I have tripped over more than once, where protection lived beside the Worker and drifted the moment a route or workers.dev URL changed. The new model...
