Posted by tuyuri 14 hours ago
apt upgrade
I have not seen confirmation Cloudflare is doing anything except playing whack a mole with certain request patterns. PHP Core Devs have been clear you need to upgrade. If this is true, it's disgustingly opportunistic that Cloudflare is using this critical security time to lie to people that they are safe.
Anyone from Cloudflare want to speak to this?
These were rolled out before the exploit became public.
I would wouldn't describe that as damning.
Why is word circulating that you can just sign up for Cloudflare and be 100% protected from this? They are burying the leed and trying to get new customers, and it's working.
The old way of doing things like putting old unpatched stuff behind firewalls is pretty much a dead pattern today.