June 15, 2020 12:00PM
Using data science and machine learning for improved customer support
Machine Learning
Data
Support
Engineering
In this blog post we’ll explore three tricks that can be used for data science that helped us solve real problems for our customer support group and our customers. Two for natural language processing in a customer support context and one for identifying attack Internet attack traffic....
April 17, 2020 1:00PM
Time-Based One-Time Passwords for Phone Support
Security
2FA
Support
Authentication
Cloudflare Enterprise customers can now authenticate themselves for phone support using TOTP tokens, either by using an authenticator app or generating single-use tokens from the Cloudflare Dashboard....
April 07, 2020 12:00PM
Project Crossbow: Lessons from Refactoring a Large-Scale Internal Tool
Tools
Cloudflare Access
Support
Spectrum
Crossbow is a tool that is now allowing Cloudflare’s Technical Support Engineers to perform diagnostic activities from running commands (like traceroutes, cURL requests and DNS queries) to debugging product features and performance features using bespoke tools....
March 04, 2020 1:00PM
Pwned Passwords Padding (ft. Lava Lamps and Workers)
Passwords
Serverless
Security
Cryptography
Cloudflare Workers
LavaRand
Starting today, we are offering a new security advancement in the Pwned Passwords API - API clients can receive responses padded with random data....
December 25, 2018 5:42PM
Concise Christmas Cryptography Challenges 2019
Crypto
Cryptography
Security
Holidays
Fun
We've put together some Christmas Cryptography questions. Do you think you can solve them?...
December 20, 2018 4:13PM
Ten new data centers: Cloudflare expands global network to 165 cities
Cloudflare Network
Data Center
Middle East
North America
United States
Pakistan
Vietnam
Russia
Cloudflare is excited to announce the addition of ten new data centers across the United States, Bahrain, Russia, Vietnam, Pakistan and France (Reunion)....
December 20, 2018 1:00PM
Banking-Grade Credential Stuffing: The Futility of Partial Password Validation
Passwords
Security
Recently when logging into one of my credit card providers, I was greeted by a familiar screen. After entering in my username, the service asked me to supply 3 random characters from my password to validate ownership of my account....
August 09, 2018 4:42PM
Optimising Caching on Pwned Passwords (with Workers)
Cloudflare Workers
Cache
Cache Everything
Speed & Reliability
Serverless
In February, Troy Hunt unveiled Pwned Passwords v2. Containing over half a billion real world leaked passwords, this database provides a vital tool for correcting the course of how the...
July 24, 2018 6:32PM
Going Proactive on Security: Driving Encryption Adoption Intelligently
HTTPS
Chrome
SSL
Support
Security
It's no secret that Cloudflare operates at a huge scale. Cloudflare provides security and performance to over 9 million websites all around the world, from small businesses and WordPress blogs to Fortune 500 companies. That means one in every 10 web requests goes through our network....
July 14, 2018 6:13PM
DNS-Over-TLS Built-In & Enforced - 1.1.1.1 and the GL.iNet GL-AR750S
1.1.1.1
DNS
TLS
Privacy
Resolver
IoT
Security
Back in April, I wrote about how it was possible to modify a router to encrypt DNS queries over TLS using Cloudflare's 1.1.1.1 DNS Resolver and a GL.iNet router; the folks at GL.iNet read that blog post and decided to bake DNS-Over-TLS support into their new router using the 1.1.1.1 resolver....
April 09, 2018 8:20PM
Privacy-Protecting Portable Router: Adding DNS-Over-TLS support to OpenWRT (LEDE) with Unbound
1.1.1.1
Privacy
Encryption
TLS
DNS
Security
This blog post explains how you can configure an OpenWRT router to encrypt DNS traffic to Cloudflare Resolver using DNS-over-TLS....
February 21, 2018 7:00PM
Validating Leaked Passwords with k-Anonymity
Passwords
Best Practices
Security
Today, v2 of Pwned Passwords was released as part of the Have I Been Pwned service offered by Troy Hunt. Containing over half a billion real world leaked passwords, this database provides a vital tool for correcting the course of how the industry combats modern threats against password security....
February 21, 2018 7:00PM
How Developers got Password Security so Wrong
Passwords
Best Practices
Security
Developers
Both in our real lives, and online, there are times where we need to authenticate ourselves - where we need to confirm we are who we say we are. This can be done using three things....
December 26, 2017 4:53PM
Concise (Post-Christmas) Cryptography Challenges
Crypto
Community
Security
It's the day after Christmas; or, depending on your geography, Boxing Day. With the festivities over, you may still find yourself stuck at home and somewhat bored....
December 25, 2017 3:32PM
Simple Cyber Security Tips (for your Parents)
Security
Tips
Best Practices
2FA
HTTPS
Today, December 25th, Cloudflare offices around the world are taking a break. From San Francisco to London and Singapore; engineers have retreated home for the holidays (albeit with those engineers on-call closely monitoring their mobile phones)....
December 13, 2017 2:00PM
The Curious Case of Caching CSRF Tokens
Cache Everything
Page Rules
SaaS
Speed & Reliability
HTTPS
Debugging
Cache
It is now commonly accepted as fact that web performance is critical for business. Slower sites can affect conversion rates on e-commerce stores, they can affect your sign-up rate on your SaaS service and lower the readership of your content....
November 23, 2017 3:28AM
The New DDoS Landscape
DDoS
Attacks
Security
Reliability
Mitigation
DNS
News outlets and blogs will frequently compare DDoS attacks by the volume of traffic that a victim receives. Surely this makes some sense, right? The greater the volume of traffic a victim receives, the harder to mitigate an attack - right?...
October 20, 2017 5:23PM
Performing & Preventing SSL Stripping: A Plain-English Primer
SSL
Crypto
HTTPS
Security
Attacks
TLS
Over the past few days we learnt about a new attack that posed a serious weakness in the encryption protocol used to secure all modern Wi-Fi networks....
October 12, 2017 3:17PM
Cloudflare London Meetup Recap
MeetUp
Cloudflare Meetups
Events
Developers
Cloudflare Apps
Cloudflare helps make over 6 million websites faster and more secure. In doing so, Cloudflare has a vast and diverse community of users throughout the world....
September 23, 2017 1:01AM
A New API Binding: cloudflare-php
php
API
Programming
Developers
Python
Back in May last year, one of my colleagues blogged about the introduction of our Python binding for the Cloudflare API and drew reference to our other bindings in Go and Node. Today we are complimenting this range by introducing a new official binding, this time in PHP....