The idea that the attacker knew about the bug is, I think, a remote but intriguing idea. Wonder if Cloudflare need to do some tests along the lines of: A) Lis

The idea that the attacker knew about the bug is, I think, a remote but intriguing idea. Wonder if Cloudflare need to do some tests along the lines of: A) List up all the types of rules we usually use to mitigate these situations. B) Run those rules on a test router with wildly unusual input values, as was the case in this situation. C) Send test traffic using that wildly unexpected input to see what happens. Basically a bit of manual fuzzing Time-consuming and maybe not worthwhile, but it could save against another full system death.