News for hackers. Stuff that matters.

A comment on Camelgate NPM Outage (Cloudflare). Parent comment

Re:Camelgate NPM Outage (Cloudflare) by lynnesbian on Tuesday April 01, 2025 @08:37PM (#43552686)
> a product that mostly doesn't do anything except for occasionally break the internet

I wouldn't say that. The postmortem you referred to links to another CloudFlare blog post - one about a pretty serious RCE vuln in Microsoft SharePoint that was blocked by their WAF: https://blog.cloudflare.com/stopping-cve-2019-0604/

[ Parent | on HN ]
Re:Camelgate NPM Outage (Cloudflare) by pvg on Tuesday April 01, 2025 @11:29PM (#43553386)
I mean, it's hardly surprising CloudFlare will tell you this is a useful product. But it is to securing a web application what regex is to parsing HTML.
[ Parent | on HN ]
Re:Camelgate NPM Outage (Cloudflare) by jiggawatts on Wednesday April 02, 2025 @04:15AM (#43554621)
Sadly I work with web developers that all assume they don’t need to bother too much with security “because we have a WAF”.
[ Parent | on HN ]