Meanwhile: https://textslashplain.com/2026/08/04/security-is-hard-yall/

> The Cloudflare folks apparently want security issues reported via HackerOne (which wouldn’t let me log in because the Cloudflare CAPTCHA HackerOne uses seems to be broken…).