Garrul: The Audit Found My Rate Limiter
A security audit of Garrul, my Cloudflare Workers comment system, found 2 critical bugs. Both had the same root cause as one I had already fixed in June.
All the articles with the tag "serverless".
A security audit of Garrul, my Cloudflare Workers comment system, found 2 critical bugs. Both had the same root cause as one I had already fixed in June.
A WordPress login bot burned 90% of my Cloudflare Workers free tier in two hours attacking a site that has never run PHP. Here's what actually stopped it.
Cloudflare Durable Objects solve the one thing serverless can't: coordination. Storage API, WebSocket hibernation, gotchas, and a working rate limiter build.
I looked at a lot of self-hosted comment systems. None of the ones I wanted ran on Cloudflare Workers. So I wrote one. Here's the story and the deploy.
Cloudflare Workers run your JS at the edge, no servers, no cold starts, 100k free req/day. Here's what they're actually good for.