cloudflare
5 posts
Cloudflare shipped an authorization boundary in 2025
How x402 charge gateways behind Cloudflare turn old CDN misconfigurations - origin IP exposure, cache deception, verify-settle races - into priced exploitation.
Bypassing the paywall is not a billing bug
Cloudflare's x402 monetization gateway collapses payment and access enforcement onto one bypassable point, turning a billing layer into a single failure domain.
Cloudflare's self-managed OAuth secures nothing by default
Cloudflare's self-managed OAuth moves the enforcement point from provider to user. An unconfigured access control is an open path, not a safe default.
One vendor, one subpoena, one reach
Cloudflare's VoidZero acquisition collapses the vendor boundary between build tooling and edge runtime. Attestation reduces to self-reporting.
Why Cloudflare CLI Automation Fails Without Verification
Cloudflare CLI automation fails without verification. This post explains why input validation, output checking, and idempotency are essential for reliable deployments-without speculative claims or exaggerated risks.