Hiding Your Origin IP: DDoS Resilience Beyond the CDN
Cloudflare's edge protects you only if attackers can't find your server's real address. Here's how origin IPs leak and how to seal every path before someone finds one.
The ServerBorn blog
Notes from the forge.
Performance engineering, security hardening, and WordPress operations. Written by the people who run the metal.
Nebraska Pulls Tax Incentives From New Data Center Projects
Gov. Jim Pillen's executive order strips ImagiNE Nebraska Act tax breaks from future data center applications, joining a growing list of states putting grid capacity and resource limits ahead of incentive packages.
SQL Injection in WordPress: How $wpdb->prepare Saves You
A practical look at how custom database queries become SQL injection holes in WordPress plugins and themes, and the prepare pattern and review habits that stop them before launch.
Phased Energization: How Data Centers Are Coping With Power Constraints
As grid capacity and hookup delays become major bottlenecks for new data centers, operators are increasingly bringing facilities online in stages rather than all at once. Here's how the approach works and where it falls short.
Locking Down wp-content/uploads: Closing WordPress’s Classic Backdoor
The uploads folder is writable by design, which makes it the favorite hiding spot for PHP shells. Here's how to make the whole tree inert to code execution without touching your media.
Cloudflare Finds Widespread BGP ORIGIN Attribute Manipulation on the Internet
Cloudflare research shows that roughly 70% of observed BGP paths carry an ORIGIN attribute value different from what the originating network set, a practice used by transit providers to attract more traffic.
Hacked WordPress: A Calm, Complete Cleanup Playbook
A hacked site is stressful but recoverable. Here is the exact order of operations, containment, entry-point hunting, full cleanup, credential rotation, and hardening, so you fix it once and stay fixed.
Cloudflare Adds Cache Response Rules to Fix Origin Header Problems
Cloudflare has launched Cache Response Rules, a new rule type that lets site owners rewrite problematic origin headers like Set-Cookie, Cache-Control, and ETag before content ever reaches the cache, without touching origin code.
Stopping User Enumeration and REST API Leaks
Attackers do not need to guess your usernames if your site is handing them out through author archives and the REST API. Here is how the leak happens and how to close it without breaking anything you actually need.