Maxime Guerreiro

Principal Software Engineer at Cloudflare. This blog is a mix of hand-written notes and experiments orchestrated by AI agents — both kinds of posts live here.

2026  14

May  13

Making CEL faster: from AST interpreter to compiled closures

May 27, 2026 · 10 min · Maxime Guerreiro

RTX 5090 power scaling: 450W vs 575W training

May 21, 2026 · 7 min · Maxime Guerreiro

How I use agents to write this blog

May 21, 2026 · 5 min · Maxime Guerreiro

Soft distillation vs. gradient boosting on fraud

May 20, 2026 · 15 min · Maxime Guerreiro

Replicating Talking Trees: LLMs for fraud detection

May 20, 2026 · 6 min · Maxime Guerreiro

Allocator shootout for async Rust on ARM64

May 19, 2026 · 14 min · Maxime Guerreiro

Fine-tuning TabICL: when 30 epochs of GPU time buys you 0.3 pp

May 18, 2026 · 8 min · Maxime Guerreiro

Agent architecture: where the work runs

May 18, 2026 · 5 min · Maxime Guerreiro

When stacking works: it depends on which features your models look at

May 17, 2026 · 15 min · Maxime Guerreiro

TabPFN3 vs TabICL: a matched-size fraud-benchmark sweep

May 16, 2026 · 15 min · Maxime Guerreiro

Inlining Tokio MPSC recv: removing the async tax

May 16, 2026 · 3 min · Maxime Guerreiro

Tokio MPSC Sweep: message size vs latency

May 15, 2026 · 2 min · Maxime Guerreiro

Amortizing tokio’s global queue acquisitions

May 14, 2026 · 4 min · Maxime Guerreiro

March  1

Announcing Cloudflare Account Abuse Protection: prevent fraudulent attacks from bots and humans

March 12, 2026 · 1 min · Maxime Guerreiro

2025  1

May  1

Forget IPs: using cryptography to verify bot and agent traffic

May 15, 2025 · 1 min · Maxime Guerreiro

2024  1

September  1

Introducing Ephemeral IDs: a new tool for fraud detection

September 23, 2024 · 1 min · Maxime Guerreiro

2023  1

September  1

Cloudflare is free of CAPTCHAs; Turnstile is free for everyone

September 29, 2023 · 1 min · Maxime Guerreiro

2022  2

September  1

Announcing Turnstile, a user-friendly, privacy-preserving alternative to CAPTCHA

September 28, 2022 · 1 min · Maxime Guerreiro

June  1

Eliminating CAPTCHAs on iPhones and Macs using new standard

June 8, 2022 · 1 min · Maxime Guerreiro

2020  3

October  1

CVE-2020-26886: Local Privilege Escalation using softaculous/bin/soft

October 31, 2020 · 4 min · Maxime Guerreiro, swapgs

September  1

suPHP - The vulnerable ghost in your shell

September 21, 2020 · 6 min · Maxime Guerreiro, swapgs

May  1

Enabling LSFileQuarantineEnabled on cli binaries

May 2, 2020 · 9 min · Maxime Guerreiro

2019  1

June  1

Protecting Project Galileo websites from HTTP attacks

June 13, 2019 · 1 min · Maxime Guerreiro

2018  1

September  1

Information leak in Minecraft 1.8

September 12, 2018 · 4 min · Maxime Guerreiro

2017  1

September  1

USB Port Security: Where to Begin?

September 16, 2017 · 4 min · Maxime Guerreiro