Securing Cloudflare with Cloudflare: a Zero Trust journey
A deep dive into how we have deployed Zero Trust at Cloudflare while maintaining user privacy
Simpler migration from Netskope and Zscaler to Cloudflare: introducing Deskope and a Descaler partner update
Today, Cloudflare is excited to expand the Descaler program to Authorized Service Delivery Partners (ASDPs) who will now have exclusive access to the Descaler toolkit. Cloudflare is also launching Deskope, a new set of tooling to also help migrate existing Netskope customers to Cloudflare One
Protecting APIs with JWT Validation
Cloudflare customers can now protect their APIs from broken authentication attacks by validating incoming JSON Web Tokens (JWTs) with API Gateway
Announcing two highly requested DLP enhancements: Optical Character Recognition (OCR) and Source Code Detections
Cloudflare One now supports Optical Character Recognition and detects source code as part of its Data Loss Prevention (DLP) service
Patterns of Legacy Displacement
When faced with the need to replace existing software systems, organizations often fall into a cycle of half-completed technology replacements. Our experiences have taught us a series of patterns that allow us to break this cycle, relying on: a deliberate recognition of the desired outcomes of displacing the legacy software, breaking this displacement in parts, incrementally delivering these parts
Sometimes the dam breaks even after plenty of warnings
Improving Shopify App’s Performance - Shopify
As an integral part of Shopify's ecosystem, our mobile app serves millions of merchants around the world every single day. It allows them to run their business from anywhere and offers vital insights about store performance, analytics, orders, and more. Given its high-engagement nature, users frequently return to it, underscoring the importance of speed and efficiency. At the beginning of 2023, we
Changing the industry with CISA’s Secure by Design principles
Security considerations should be an integral part of software’s design, not an afterthought. Explore how Cloudflare adheres to CISA’s Secure by Design principles to shift the industry
Cloudflare announces Firewall for AI
Cloudflare is one of the first providers to safeguard LLM models and users in the era of AI
Defensive AI: Cloudflare’s framework for defending against next-gen threats
From identifying phishing attempts to protect applications and APIs, Cloudflare uses AI to improve the effectiveness of its security solutions to fight against new and more sophisticated attacks
Cloudflare launches AI Assistant for Security Analytics
Introducing AI Assistant for Security Analytics. Now it is easier than ever to get powerful insights about your web security. Use the new integrated natural language query interface to explore Security Analytics
Introducing behavior-based user risk scoring in Cloudflare One
Cloudflare One is introducing user risk scoring, a new set of capabilities to detect risk based on user behavior, so that you can improve security posture across your organization
Dispelling the Generative AI fear: how Cloudflare secures inboxes against AI-enhanced phishing
Generative AI is being used by malicious actors to make phishing attacks much more convincing. Learn how Cloudflare’s email security systems are able to see past the deception using advanced machine learning models
Navigating the maze of Magecart: a cautionary tale of a Magecart impacted website
E-commerce websites were targeted by a sophisticated Magecart attack, involving a hidden JavaScript code designed to secretly steal Personally Identifiable Information (PII) and credit card details from users
Open source key areas for digital autonomy
The main questtion is: How do you bring free and open source initiatives and something as regulated as the European Union?
Keeping repository maintainer information accurate
Discover how keeping repository maintainer information accurate through CODEOWNERS files and automating maintenance with tools like cleanowners fosters efficient collaboration and sustainable software projects.
GitHub Copilot Learning Pathway: Accelerate your business with AI
Learn what GitHub Copilot can help your business achieve in this expert-guided GitHub Learning Pathway, featuring insights from tech leaders at top organizations.
Welcome to Security Week 2024
Cloudflare’s Chief Security Officer introduces 2024 Security Week by sharing insights into the past year of threats, security incidents and key priorities and concerns for global CISOs
Face cams: the missing guide
I try to avoid doing “meta” / “behind the scenes” stuff, because I usually feel like it has to be “earned”. How many YouTube channels are channels about making YouTube videos? Too many. Regardless, because I’ve had the opportunity to make my own mistakes now for a few years (I started doing the video thing in earnest in 2019), and because I’ve recently made a few leaps in quality-of-life re: shoot
How web bloat impacts users with slow devices
Modern CSS Tooltips And Speech Bubbles (Part 1) — Smashing Magazine
Tooltips are a very common pattern used in CSS for years. There are a lot of ways to approach tooltips in CSS, though some evoke headaches with all the magic numbers they require. In this article, Temani Afif presents modern techniques to create tooltips with the smallest amount of markup and the greatest amount of flexibility.
Risk-Aware Product Decisions in A/B Tests with Multiple Metrics
TL;DR We summarize the findings in our recent paper, , where we explain how Spotify’s decision-making engine works and how the results of multiple metrics in an A/B test are combined into a single product decision. Metrics can be of different types, and we consider success metrics (superiority tests), guardrail metrics (non-inferiority tests), deterioration metrics (inferiority tests), and quality
Introducing AI SDK 3.0 with Generative UI support
Stream React Components from LLMs to deliver richer user experiences
polyfill.io now available on cdnjs: reduce your supply chain risk
Polyfill.io is now available on cdnjs to reduce the risk of supply chain attacks. Replace your polyfill.io links today for a seamless experience
Zaraz launches new pricing
The new Cloudflare Zaraz pricing makes Zaraz the most affordable way to load third-party tools on your website, starting with 1 million free events per month and all features unlocked
How we engineer feedback at Figma with eng crits
A behind the scenes look at engineering crits at Figma.
Game Bytes
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! 🕹️
Meet Kayla: A college student and open source ambassador
From learner to mentor, Kayla, an All In for Students ambassador, has become an open source leader on her campus.
Keeping secrets out of public repositories
With push protection now enabled by default, GitHub helps open source developers safeguard their secrets, and their reputations.
Today's only half of the leap year fun
Waiting For Spring (March 2024 Wallpapers Edition) — Smashing Magazine
Do you need a little inspiration boost? Well, then our new batch of desktop wallpapers is for you. Designed by artists and designers from across the globe, they come in versions with and without a calendar for March 2024. Enjoy!
The Frontend Cloud: Resiliency for global web applications
Optimize your web presence for maximum uptime, scalability, and security. Discover the power of frontend clouds for enterprise resilience.
Open sourcing Pingora: our Rust framework for building programmable network services
Pingora, our framework for building programmable and memory-safe network services, is now open source. Get started using Pingora today
Customizing and fine-tuning LLMs: What you need to know
Learn how your organization can customize its LLM-based solution through retrieval augmented generation and fine-tuning.
How we’re using GitHub Projects to standardize our workflows and stay aligned
Learn how we’re managing feature releases and establishing best practices within and across teams at GitHub using GitHub Projects.
Periodic Face-to-Face
GitHub Copilot Enterprise is now generally available
Our most advanced AI offering to date is customized to your organization’s knowledge and codebase, infusing GitHub Copilot throughout the software development lifecycle.
Reporting Core Web Vitals With The Performance API — Smashing Magazine
The Performance API is a set of standards for measuring and evaluating performance metrics with JavaScript. This article demonstrates how to use the Performance API to generate performance metrics directly in the DOM to create your own reporting.
TDE: A dive into encrypted data
In this article we will tell you how you can find out, if your TDE works and if files on disk are encrypted.
Running HUGE numbers of migrations
CYBERTEC Migrator allows you to run huge numbers of migrations by cloning definitions and re-running the same process over again.
Kubernetes- and OpenShift- ready migration to PostgreSQL
CYBERTEC Migrator is fully Kubernetes- and OpenShift-ready. We rely on modern container technology, which is perfect for quick deployment.
How AI will influence creative tools: A conversation with Replit’s David Hoang
Replit's VP of Marketing and Design David Hoang talks about how AI is reshaping the future of product design and development.
How DotSlash makes executable deployment simpler
Andres Suarez and Michael Bolin, two software engineers at Meta, join Pascal Hartig (@passy) on the Meta Tech Podcast to discuss the ins and outs of DotSlash, a new open source tool from Meta. DotSlash takes the pain out of distributing binaries and toolchains to developers. Instead of committing large, platform-specific executables to a repository, […]
A Designer’s Accessibility Advocacy Toolkit — Smashing Magazine
Digital designer Yichan Wang has put together this collection of strategies and selling points to help you encourage and advocate for accessibility in your place of work, including useful scripts you can use as starting points.
Deploying safely on Vercel without merge queues
Deploy quickly and safely with Vercel without merge queues
1 << n vs. 1U << n and a cell phone autofocus problem
Highlights from Git 2.44
The first Git release of 2024 is here! Take a look at some of our highlights on what’s new in Git 2.44.
How AI code generation works
Explore the capabilities and benefits of AI code generation, and how it can improve the developer experience for your enterprise.
Insider newsletter digest: Cook up a controller with GitHub Copilot
Whether you’re coding up a storm or cooking up code, building a controller function with AI is your secret sauce to a flavorful app.
Vanilla JavaScript, Libraries, And The Quest For Stateful DOM Rendering — Smashing Magazine
It’s well-established that the web faces wide-ranging usability and performance issues, from user-hostile UI patterns and twisted search results to sluggish performance and battery-draining bloat. In this article, Frederik examines one small-but-significant aspect where developers take the reins: Painting pixels on the screen.
The disruption the auto industry has been waiting for
Leading auto companies are partnering with Stripe to better serve their customers and find new revenue opportunities.
Repo-jacking explained: How it works and how to protect your GitHub projects
Repo-jacking is a specific type of supply chain attack. This blog post explains what it is, what the risk is, and what you can do to stay safe.
Empowering all developers to build without barriers
GitHub has been awarded the 2024 Axe Accessibility at Scale Award from Deque Systems. Read more about how we’ve implemented accessibility at scale.
A vintage network attack called smurf
Maximize Uptime with Vercel's Frontend Cloud: How Vercel ensures highly available, globally performant dynamic applications. Even during massive traffic spikes.
Vercel's Frontend Cloud is designed with high availability at its core, to maintain uptime for dynamic applications.
Aligning Velox and Apache Arrow: Towards composable data management
We’ve partnered with Voltron Data and the Arrow community to align and converge Apache Arrow with Velox, Meta’s open source execution engine. Apache Arrow 15 includes three new format layouts developed through this partnership: StringView, ListView, and Run-End-Encoding (REE). This new convergence helps Meta and the larger community build data management systems that are unified, […]
A Practical Guide To Designing For Colorblind People — Smashing Magazine
Color accessibility is more than just ticking boxes. Even with good contrast, some color palettes can make interfaces challenging for users. Here are some practical guidelines to ensure more inclusive design for colorblind people. An upcoming part of Smart Interface Design Patterns.
PostgreSQL to Microsoft Excel via Npgsql
Find out how you can integrate and store the use of data in PostgreSQL from Excel with Npgsql. For all Excel heroes here.
Mobile Accessibility Barriers For Assistive Technology Users — Smashing Magazine
Accessibility goes beyond making products user-friendly. It can significantly impact the quality of life for people with disabilities. Kate Kalcevich shares lessons she learned from assistive technology users — challenges and barriers they encounter on mobile devices.
Monitoring machine learning models for bot detection
We recently shared an introduction to Cloudflare’s approach to MLOps, which provides a holistic overview of model training and deployment processes at Cloudflare. In this post, we will dig deeper into monitoring, and how we continuously evaluate the models that power Bot Management
