head of experience & design @cloudflare | founder @outerbase (acquired)
Joined January 2011
- Tweets3.3K
- Following742
- Followers12K
- Likes17.6K
pro ai, but anti slop
back home from cloudflare connect and filled with creative energy
this surprised me too — not what you would expect from a tech conference and very counter to the “everything is ai slop now” narrative, but let me share just a few examples i found inspiring and artful
humans are creative creatures and i don’t see that changing with ai, only shining more
realized i forgot to share the actual post,
tl;dr it's often faster for me to generate an entirely new view than to learn how to hold your interface the right way, excited to see this trend continues to develop
burcs.dev/notes/interfaces-a…
i want to start writing more...
of course that required an overhaul of my site, i also wanted to make it personal, so i made my handwriting into a font, then of obviously i had to hand draw my icons, and finally it needs to be interactive!
check it out: burcs.dev/
i want to start writing more...
of course that required an overhaul of my site, i also wanted to make it personal, so i made my handwriting into a font, then of obviously i had to hand draw my icons, and finally it needs to be interactive!
check it out: burcs.dev/
overwhelmed by the php vulns and not sure how or where to get started?
we've added a copyable prompt to the cloudflare blog that you can feed your agent
blog.cloudflare.com/php-vuln…
brandon retweeted
The new capability that we built to help defend php2shell is live.
The @Cloudflare WAF now has full transaction detection that evaluates the request and the origin response together, and response rules block a match before it reaches the requester.
Example from the post: unauthenticated hit on /admin that comes back 200 text/html. Block it. Auth failures and redirects can then pass through untouched.
blog.cloudflare.com/full-tra…
The Cloudflare's writeup on our php2shell response is up.
Rules went live at 03:02 UTC, about 9 hours before disclosure. Unfortunately the vulnerability leaked early, so we were already watching attackers mutate payloads against the rules and updating as variants appeared.
New rules keep landing in the WAF changelog.
Expect updates through out the day. We will have a more thorough post of what we had to build to better protect people coming shortly.
PHP runs almost 70% of websites. The flaw is in the runtime, so updating plugins won't fix it. Patch PHP.
blog.cloudflare.com/php-vuln…
it's kind of wild to work at a company that can basically flip a switch and protect 20% of the internet from critical vulns
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
make sure you have it enabled:
xitter.cf/BraydenWilmoth/status/…
One-click mitigation for php2shell vulnerability:
If you have Cloudflare in front of your PHP website, please login to the dashboard and click this button to make sure you are protected.
dash.cloudflare.com/?to=/:ac…
This reduces your risk but doesn't fix the vulnerabilities in PHP. We recommend updating PHP to a patched version.
brandon retweeted
Kicking off Cloudflare Connect 2026 and for the first time, we are hosting it in San Francisco. I am so excited for the next two days with an incredible group of customers, developers, partners, analysts, journalists, Board Members, artists, speakers and fellow teammates.
brandon retweeted
a brand new model paradigm! introducing 𝚌𝚕𝚊𝚒𝚛𝚒𝚌: a system one model for extracting, computing, estimating, and predicting values from unstructured inputs.
blog.cloudflare.com/clairic-…
cloudflare mentioned 👀
however thanks to distributed compute, your tesla and ai gf are going to be just fine
the enemy cannot push a button, if you have to find it in the aws console
