Audit: Vuln-discovery agent reimplementing the Cloudflare Project Glasswing
Reimplementation of Cloudflare's Project Glasswing as an open-source vuln-discovery agent.
Other
35 items kept · 48 classified · 48 sourced · 4 deduplicated.
Reimplementation of Cloudflare's Project Glasswing as an open-source vuln-discovery agent.
Other
Stainless, acquired by Anthropic, worked with Cloudflare and other companies, providing SDKs and automation tools.
Other
Using Workflows' step context to obtain information
Workflows
User observes browser-specific behavior with Cloudflare WARP connection and IP address display.
Zero Trust
Discussion on Cloudflare's use of lava lamps for cryptography entropy
Other
User asks why Cloudflare WARP allows YouTube but blocks Twitter and AI chats in a censored country.
Zero Trust · WARP
Cloudflare uses LavaRand for randomness, with a wall of lava lamps as a source of physical entropy.
Other
User tests tracking demo, finds it ineffective with Cloudflare CDN scripts enabled and XHR/websockets blocked.
Cloudflare CDN
User considers using InsForge for hobby projects, currently using Cloudflare for deployment.
Workers · Other
Small-scale user experiences slow billing support response from Cloudflare regarding unexpected KV charges.
KV
Commenter discusses lessons from Project Glasswing, mentions Cloudflare's Cyber Frontier Models
Other
User seeks help with CloudFlare Tunnel and Minecraft server setup, trying to close port 25565.
CloudFlare Tunnel
Discussion on custom vs. agentic-coding harnesses, referencing Cloudflare's Cyber Frontier Models blog post.
Other
Commenter calls Cloudflare a security vulnerability, citing man-in-the-middle concerns.
Other
Using Cloudflare to block AI bot spam in a GitHub repo with a custom CI script and captcha challenge.
Other
Project Glasswing and lessons from Mythos, a Cloudflare project.
Other
Mention of Cloudflare blog post on deploying Mythos for security
Other
Commenter explains sudden spike in .at domain resolutions on Cloudflare Radar.
Other
Critique of Cloudflare's Project Glasswing announcement, feeling it lacked clarity and rehashed previous info.
Other
Commenter questions Cloudflare's access to Mythos compared to cURL's experience.
Other
Commenter questions Cloudflare's promotion of Anthropic, citing competition with open weights models.
Other
Commenter critiques Cloudflare's blog post on Project Glasswing, finding it unimpressive and repetitive.
Other
Commenter discusses Cloudflare's findings on memory-unsafe languages and false positives.
Other
User asks for clarification on Cloudflare's announcement about supporting MCP servers.
Other
User questions the significance of .at TLD on Cloudflare's radar
Other
Mention of Cloudflare's Lava Lamp wall, a hardware random number generator.
Other
Commenter discusses Cloudflare's cryptographic competence in relation to CSPRNG.
Other
Mention of Cloudflare proxy in discussion about IP addresses and encryption.
Other
Commenter criticizes Cloudflare's blog content, mentioning AI-generated output.
Other
Commenter questions what Cloudflare found using Mythos, a vulnerability scanner.
Other
Using Cloudflare to block IP addresses, but noting it can be bypassed by botnet operators.
Other
Commenter discusses limitations of verifying Cloudflare's internal findings on LLM interpolations.
Other
Praise for Cloudflare's blog content over the years.
Other
User struggles with uMatrix and Cloudflare's 'Verify you are human' Challenge page
Other
Mention of Cloudflare's shift towards remote attestation for proof-of-humanity.
Other