Tech News
← Home  ·  All topics

Cloudflare

81 GoKawiil briefs on this topic

Google Ads flags RACE terminal app and site as 'malicious software' without evidence

The developer of RACE, a native macOS terminal multiplexer written in Rust, ran a $500 Google Ads campaign for the app and its companion site race-term.com, only to have the account suspended for 'Malicious software' and 'Compromised Site' violations. Despite the app being signed and notarized and the static site containing no third-party trackers beyond Cloudflare Analytics, an appeal was rejected with no explanation of what was flagged, leaving the developer pointed toward generic account deletion or EU redress options.

Cloudflare co-founder Lee Holloway's early path from Apple upbringing to CTO role traced in new profile

A profile traces the early life of Lee Holloway, Cloudflare's co-founder and former CTO, who built core technologies like Anycast and same-IP access before stepping down due to frontotemporal dementia. The piece covers his upbringing in Cupertino, his early programming work at HomeWarehouse.com (acquired by Walmart), his computer science studies at UC Santa Cruz, and his meeting with future Cloudflare co-founder Matthew Prince through a professor.

New open-source library brings Durable Objects model to Postgres, SQLite, MySQL

A developer released Solid Objects, an open-source library that replicates the Durable Objects programming model—one identity, one state, one ordered mailbox per object—without requiring a dedicated vendor runtime or daemon. Instead, it runs directly on databases developers already operate, including SQLite, PostgreSQL, and MySQL. The release follows the creator's frustration with vendor lock-in and unpredictable metered billing tied to existing Durable Objects platforms.

Cloudflare fronts 89.6% of European firms that use a CDN, CipherCue data shows

CipherCue analyzed 44,143 European companies with an identifiable content delivery network and found 39,547 of them, or 89.6%, run behind Cloudflare. Amazon's CloudFront trails far behind at 3,112 companies, followed by Fastly with 1,299 and Akamai with 396. The figures only cover firms that use a CDN at all, excluding those serving sites directly from their own servers.

Blogger's server-side rules reclassify most 'browser' traffic as bots—without JavaScript

A blog operator built network and header-based rules on a Cloudflare Worker to sort incoming traffic without relying on JavaScript, and found that 277 of 372 requests bearing browser User-Agent strings were actually not genuine browsers—74.5% of the total. Comparing this edge-based counting with Cloudflare Web Analytics page loads over two days revealed persistent gaps between the two measurement methods, exposing bugs in the HTML-acceptance check and missing provenance markers, both since fixed.

Swedish developer launches Statichost.eu for fully European static site hosting

Eric Selin, founder of Statichost.eu based in Stockholm, has launched a static website hosting service built entirely on European infrastructure. The platform avoids American providers like AWS and Cloudflare at every layer, from git-based deployment to content delivery.

ChatGPT, Claude and Grok suffer simultaneous outages with no confirmed shared cause

On Thursday, OpenAI's ChatGPT, Anthropic's Claude, and xAI's Grok all experienced outages within the same window, though the scope varied by provider. OpenAI attributed its disruption to a routing error around 7:43 am PT that was resolved by 8:17 am PT, while Anthropic said only its Opus 4.8 and Opus 5 models were hit and xAI reported broader failures. No common infrastructure failure has been confirmed, with Cloudflare denying any service disruption on its end.

Coder's Cloudflare-hosted registry hijacked to serve credential-stealing Terraform modules

Attackers breached Coder's Cloudflare infrastructure and inserted rogue servers into registry.coder.com's IP pool, causing some requests to be routed to malicious infrastructure instead of Coder's own. For roughly 14 hours on August 31, these servers distributed tampered Terraform modules containing code designed to harvest secrets from developer machines.

Microsoft flags TerminalFix, a fake-CAPTCHA malware campaign targeting Windows users

Microsoft has identified a malware campaign named TerminalFix that mimics Cloudflare and other trusted verification pages to trick Windows users into pasting commands into PowerShell or Command Prompt. Unlike earlier ClickFix attacks that used the Run dialog for simpler commands, TerminalFix's terminal-based approach lets attackers run longer, multi-stage scripts that establish persistent proxy access into a victim's machine and network.

Developer builds spam-resistant 11ty contact form using Cloudflare Workers and reCAPTCHA v3

A blogger detailed how they replaced their static site's contact form backend with Cloudflare Pages Functions, combining reCAPTCHA v3 (or optionally Cloudflare Turnstile) with the Resend email service to block spam submissions. The setup collects a visitor's name, email and message, then routes it through a Worker to a custom email address for filtering. The approach was inspired by a prior migration guide from Netlify to Cloudflare by developer Sia Karamalegos.

Cloudflare tests Zstandard compression in Pingora to shrink cache storage

Cloudflare built a prototype called Cache Transcoding, developed during an intern project, that compresses eligible cached assets with Zstandard before writing them to disk inside its Pingora proxy. Assets stay compressed while stored and while moving between data centers via Tiered Cache, then get decoded only when served to the client. Early tests show this shrinks eligible assets to about a third of their original size with only a small CPU overhead.

Microsoft details 'TerminalFix' ClickFix variant targeting enterprise networks via PowerShell

Microsoft has identified a new ClickFix-style social engineering campaign called TerminalFix, which uses fake Cloudflare CAPTCHA prompts to trick users into pasting malicious commands into Windows Terminal or PowerShell. Once executed, the command triggers a multi-stage attack chain designed to give attackers a persistent foothold inside enterprise systems.