Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet.
Generated code in v0 sandboxes queries Snowflake, but the OAuth token never enters the sandbox. A protocol-aware proxy injects credentials at request time, and blind replacement was itself a leak.
RFC 9234 lets routers reject route leaks on their own, using BGP Roles and the Only to Customer attribute. We measured who has deployed it, and found two Tier 1 networks unexpectedly stripping OTC.