
The RADIUS protocol is commonly used to control administrative access to networking gear. Despite its importance, RADIUS hasn’t changed much in decades. We discuss an attack on RADIUS as a case study for why it’s important for legacy protocols to keep up with advancements in cryptography
GM
Goldbe, Miro Haller·July 9, 2024Security 
A few sirens went off a couple of weeks ago when the CSS Working Group (CSSWG) resolved to add an if() conditional to the CSS Values Module Level 5

In this blog I decided to show some insights into what can be done by using AI to generate data structures for PostgreSQL.

Drag-and-drop is a highly interactive and visual interface. We often use drag-and-drop to perform tasks like uploading files, reordering browser bookmarks, or even moving a card in solitaire.

Check the dynamics of the 2024 French legislative elections, the surprising election results’ impact on Internet traffic changes, and the cyber attacks targeting political parties

The next step in our GitHub for Beginners series is learning how to add files and folders to your GitHub repository.

Entering text in the terminal is complicated

Visualize the user experience with user journey maps. Here are some helpful templates, real-world applications, and insights on the importance of mapping both successful and unsuccessful touchpoints. Part of [Smart Interface Design Patterns](https://smart-interface-design-patterns.com) by yours truly.

Here, we explore the dynamics of Internet traffic and cybersecurity during the UK’s 2024 general election, highlighting late-day traffic changes and a post-vote attack on a political party

On June 27, 2024, a small number of users globally may have noticed that 1.1.1.1 was unreachable or degraded. The root cause was a mix of BGP (Border Gateway Protocol) hijacking and a route leak

Function streaming now framework-agnostic on Vercel.

To help preserve a safe Internet for content creators, we’ve just launched a brand new “easy button” to block all AI bots. It’s available for all customers, including those on our free tier
AB
Alex Bocharov, Santiago·July 3, 2024AI & ML 
How Cloudflare mitigated DDoS attacks targeting French political parties during the 2024 legislative elections, as detailed in our ongoing election coverage

Reasons to use your shell's job control

Read about my impressions from the Swiss PGDay 2024 and learn why you should attend PostgreSQL conferences yourself.

Slack Data Engineering recently underwent data workload migration from AWS EMR 5 (Spark 2/Hive 2 processing engine) to EMR 6 (Spark 3 processing engine). In this blog, we will share our migration journey, challenges, and the performance gains we observed in the process. This blog aims to assist Data Engineers, Data Infrastructure Engineers, and Product…

Car rides have become connected and interactive these days with drivers jamming to music or catching up on podcasts or audiobooks while they’re on the road. A big portion of Spotify listening happens in the car — a key reason why it’s important for Spotify to ensure users have a smooth experience in the car, striking the perfect balance between safety, simplicity, and control. Achieving such balan
MKMaheen Khalid, Senior Engineer·July 1, 2024Engineering 
Let’s welcome the new month with some fresh desktop wallpapers! Created by artists and designers from across the globe, they come in versions with and without a calendar for July 2024. Enjoy!


See how the first 2024 US presidential debate between Biden and Trump influenced Internet traffic patterns, email trends, and heightened cybersecurity concerns across digital platforms

Hyperdrive (Cloudflare’s globally distributed SQL connection pooler and cache) recently added support for Postgres protocol-level named prepared statements across pooled connections. We dive deep on what it took to add this feature

I know this is something Chris has wanted forever, so it's no surprise he's already got a fantastic write-up just a day after the news broke. In fact, I first


At Slack, we’re committed to security that goes beyond the ordinary. We continuously strive to earn and maintain user trust by safeguarding critical components integral to every user’s experience. From passwords to session cookies, and tokens to webhooks, we prioritize protecting everything essential to how users log into the platform and remain authenticated. Through proactive…

Interface copy plays a crucial role in the overall user experience, helping guide users smoothly, allowing them to navigate easily through the app, discover and start using product features, and more. In this article, you’ll find simple, practical tips and a checklist to help you create a clear and concise microcopy, ensuring a seamless user experience.

Introducing a new way to do function calling in Workers AI by running function code alongside your inference. Plus, a new @cloudflare/ai-utils package to make getting started as simple as possible

A new DDoS rule resulted in an increase in error responses and latency for Cloudflare customers. Here’s how it went wrong, and what we’ve learned
LJ
Lloyd, Julien Desgats·June 26, 2024Security 
polyfill.io, a popular JavaScript library service, can no longer be trusted and should be removed from websites
MP
Matthew Prince, John Graham Cumming·June 26, 2024Frontend 
Oh, hey there! It’s been a hot minute, hasn’t it? Thought I’d pop in and say hello while we get to know the Popover API a bit.

An exploration of the problems that AI can currently solve, and where there is whitespace to go beyond that.
KRKris Rasmussen·June 26, 2024AI & ML 
As AI democratizes product development, design will be the differentiator. But what exactly does “good” look like, and what does it mean for our craft? Four Figma designers weigh in.

Jason Ballard, co-founder and CEO of Icon, explains why AI and his fleet of 3D-printing robots may be our ticket to more affordable housing.

Two creatives behind the browser that’s breaking the internet discuss what Zadie Smith, A24, and sunspots have to do with building a product.

Humanoid robots are here, and they’re asking us to come face to face with the promises and pitfalls of AI.

Our biggest redesign of Figma’s interface in five years clears space on the canvas for designers to turn their wildest imagination into reality.

As many focus on the possibilities and limitations of AI tools and their output, Ovetta Sampson reminds us to pay attention to the power of the input.

We’re launching a redesigned Figma, Figma Slides, and a new suite of AI features, along with major updates to Dev Mode and usability improvements.

AI promises to reinvigorate the way we design and build, but how we realize that potential is still an open question.

We’re introducing a suite of AI-powered features to help you push past creative blocks and bring your best ideas to life.
KRKris Rasmussen·June 26, 2024AI & ML 
Say goodbye to lackluster presentations. Today, we’re announcing the open beta of Figma Slides, here to set a new standard for telling visual stories that move work forward.

As part of a broader effort to refine our billing model, we are sharing our roadmap to better address the needs of independent freelancers and agencies.

In this post, I’ll exploit CVE-2024-3833, an object corruption bug in v8, the Javascript engine of Chrome, that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.

Gaining buy-in for accessibility can be challenging due to common myths and misunderstandings. For many, accessibility remains a big mystery. Here are some practical techniques for winning stakeholder support. Part of [Smart Interface Design Patterns](https://smart-interface-design-patterns.com) by yours truly.

This article explains how to examine the PostgreSQL visibility map and showcases performance improvements added in recent releases.

The history of Rust at Meta goes all the way back to 2016, when we first started using it for source control. Today, it has been widely embraced at Meta and is one of our primary supported server-side languages (along with C++, Python, and Hack). But that doesn’t mean there weren’t any growing pains. Aida […]

In November 2020, we introduced the concept of prioritized load shedding at the API gateway level in our blog post, Keeping Netflix Reliable Using Prioritized Load Shedding. Today, we’re excited to…

Our usage-based product integrates naturally alongside your other billing pathways, while scaling with you as your usage-based pricing ambitions grow.

Cloudflare's Bot Management team has released a new Machine Learning model for bot detection (v8), focusing on bots and abuse from residential proxies
BA
Bob Aminazad, Santiago·June 24, 2024AI & ML 
To help protect against account compromise via credential stuffing attacks, Cloudflare will notify dashboard users when we detect that a password was found in an external data breach

CSS Meditation #8: .work + .life { border: 10px solid #000; }

CSS Meditation #7: Nobody is perf-ect.

CSS Meditation #6: The color space is always calc(rgb(0 255 0)+er) on the other side of the fence.

CSS Meditation #4: Select, style, adjust. Select, style, adjust. Select, sty…

CSS Meditation #5: :where(:is(.my-mind))

CSS Meditation #3: A pseudo is as a pseudo does.

CSS Meditation #2: Who gives a flying frick what constitutes a “programming” language.

CSS Meditation #1: If the code works as expected and it fits your mental model, then it’s perfect.

Git started on your first repository in the third installment of GitHub for Beginners. Discover the essential features and settings to manage your projects effectively.

We’re sharing how we streamline system reliability investigations using a new AI-assisted root cause analysis system. The system uses a combination of heuristic-based retrieval and large language model-based ranking to speed up root cause identification during investigations. Our testing has shown this new system achieves 42% accuracy in identifying root causes for investigations at their […] Read