A revisit of remote Spectre attacks on Cloudflare Workers
7 by albertpedersen | 0 comments on Hacker News.
Paper: https://ift.tt/RMweGzn ("Remote-Timer-as-a-Service: Efficient Microarchitectural Leakage in the Cloud with Remote Timers")
Wednesday, August 19, 2026
Tuesday, August 18, 2026
Monday, August 17, 2026
Sunday, August 16, 2026
New top story on Hacker News: Tell HN: Cloudflare silently injects its analytics when you switch nameservers
Tell HN: Cloudflare silently injects its analytics when you switch nameservers
36 by stagas | 3 comments on Hacker News.
A few hours ago I switched my nameservers to Cloudflare in order to enable R2 bucket serving through my own subdomain, and I found out that it silently had injected a JS analytics snippet in my HTML-only JS-free site textlog.cc — I had to go to the Analytics dashboard, Add the site to the analytics and then disable the snippet. I find this approach entirely invasive, you should opt-in to features like that not have to opt-out. Just a warning out there to folks who might not be aware of this.
36 by stagas | 3 comments on Hacker News.
A few hours ago I switched my nameservers to Cloudflare in order to enable R2 bucket serving through my own subdomain, and I found out that it silently had injected a JS analytics snippet in my HTML-only JS-free site textlog.cc — I had to go to the Analytics dashboard, Add the site to the analytics and then disable the snippet. I find this approach entirely invasive, you should opt-in to features like that not have to opt-out. Just a warning out there to folks who might not be aware of this.
Saturday, August 15, 2026
Friday, August 14, 2026
Subscribe to:
Posts (Atom)