How Piracy Sites Disguise Video as Fonts to Abuse Cloudflare Caching
piracystreamingcloudflarecachingsecurityvideofontsexploitinvestigationnetsec
The post describes an investigation into how pirate streaming sites rename MPEG-TS video segments to .woff2 font files to exploit Cloudflare's default caching behavior. The technique works because Cloudflare caches font files by default but not video files. The author's write-up covers how the trick works, what was verified during the investigation, and why the practice is difficult to prevent.