netflixJul 31, 2026

Modeling Device Capabilities for Analytics (opens in new tab)

Netflix models device capabilities to determine which features can be safely supported across its diverse hardware ecosystem. By tracking hardware, software, and platform limitations in scalable analytical datasets, Netflix can measure feature reach and identify adoption bottlenecks. This enables more precise feature management for capabilities such as 4K, spatial audio, cloud gaming, and new UI experiences. ## Building a Device Capability Model - Devices vary significantly in RAM, CPU cores, display resolution, audio support, and platform capabilities. - Netflix maintains detailed capability data for each device model, including: - Screen dimensions and resolution - Supported video profiles and codecs - Surround sound support - RAM capacity - Software version and platform information - Internal feature flags are integrated into the model to connect device capabilities with feature availability. ## Cumulative Tables for Current Device State - Netflix uses a cumulative table to track the latest known capabilities for each device. - Capabilities are stored in a structured format, such as supported screen sizes and video profiles. - This design supports large-scale analytics and reporting by providing an up-to-date view of device functionality. ## Histogram Tables for Feature Distribution - A histogram table measures active devices over the previous 28 days. - Results are broken down by device model and software version. - The table also counts how many devices support particular capabilities. - For example, Netflix can analyze external display support on streaming sticks: - 100% of devices may support the HD PlayReady profile. - Only 20% may support the UHD HEVC profile. ## Using Analytics for Feature Management - Netflix uses these datasets to evaluate feature penetration for products such as: - 4K Ultra HD - Netflix Spatial Audio - Cloud Gaming - Updated user interfaces - Capability data helps teams identify hardware or software bottlenecks. - Feature decisions can therefore be made at a more granular level, improving performance, reliability, and user experience. Netflix’s approach demonstrates that a detailed, analytics-focused capability model is essential for managing features across a global and highly varied device ecosystem.

analyticsdata-modelingvideo-streamingcloud-gaming+2

cloudflareApr 6, 2026

How we built Organizations to help enterprises manage Cloudflare at scale (opens in new tab)

Cloudflare’s new Organizations feature helps enterprises centrally manage users, policies, accounts, and analytics across multiple Cloudflare Accounts. It preserves least-privilege access by allowing teams to remain separated while giving designated organization administrators broader oversight. Initially available in public beta for enterprise customers, Organizations is designed to reduce administrative complexity without granting unauthorized access. ## Why Enterprises Use Multiple Accounts - Separate accounts help teams manage their own resources and limit permissions. - Fine-grained RBAC can still be cumbersome when administrators must enumerate individual resources. - Central administrators currently need access to every account for reporting and policy management. - This setup is fragile because account-level administrators can remove those central administrators. ## Organization Structure and Account Management - Organizations add a management layer above individual Cloudflare Accounts. - The core feature is a flat list of accounts onboarded into the organization. - An account can be added only by someone who is a Super Administrator for that account. - Organizations are built on Cloudflare’s existing Tenant system, originally developed for partners. ## Organization Super Administrators - Org Super Administrators have Super Administrator permissions across every account in the organization. - They do not need memberships in child accounts and do not appear in account-level user interfaces. - The new role is the first of several planned organization-level roles. - Cloudflare consolidated legacy authorization paths into domain-scoped roles. - The permissions overhaul added approximately 133,000 lines of code and removed 32,000. - Permission checks for enumeration endpoints such as `/accounts` and `/zones` became 27% faster, especially for users with access to thousands of accounts. ## Organization-Wide Analytics - Org Super Administrators can view aggregated HTTP traffic analytics. - The dashboard combines data across all accounts and zones in the organization. - Cloudflare plans to add analytics for additional products over time. ## Shared Configurations - Organizations allow centrally managed policy sets to be shared across accounts. - Initial examples include WAF and Gateway policies. - Authorized users in the source account can update shared policies for the broader enterprise. - Security analysts can therefore manage enterprise-wide WAF rules without becoming organization or account administrators everywhere. ## Roadmap and Availability - The beta initially targets enterprise customers. - Cloudflare plans to expand access to pay-as-you-go and other customers, followed by the partner ecosystem. - Planned capabilities include: - Organization-level audit logs - Billing reports - More analytics dashboards - Additional organization user roles - Self-service account creation ## Security-First Rollout - Cloudflare will not automatically create organizations through account backfilling. - A self-service invitation process ensures that no user gains access without approval from a relevant Super Administrator. - The first eligible Super Administrator to claim the company’s organization can add other accounts where they also hold Super Administrator access. - If another employee has already claimed the organization, administrators must coordinate invitations or account-level approval. - Cloudflare Support will not configure organizations on customers’ behalf. Enterprise customers can claim an organization from the Cloudflare Dashboard’s Organizations tab at no additional cost. Companies should coordinate internally with their Super Administrators to ensure all relevant accounts are added securely.

analyticsdatabase-designcloudflareweb-application-firewall+4

stripeMar 24, 2026

How Stripe Radar helps prevent free trial abuse (opens in new tab)

Free trial abuse is accelerating, particularly among AI companies whose trials provide access to costly compute resources. Stripe detected 6.2 times more abusive trials between November 2025 and February 2026, with self-serve AI startups facing especially high exposure. Stripe argues that AI-powered fraud detection can identify abuse at signup and prevent substantial downstream losses. ## The rise of free trial abuse - Fraudsters increasingly cycle through free trials or use invalid payment methods without converting to paid plans. - AI companies are especially vulnerable because free trials can grant access to expensive compute and APIs. - AI startups with self-serve signup and direct API access experience 10 times more attempted abuse than enterprise AI companies. - Similar patterns affect SaaS companies, marketplaces, and other businesses offering free trials. ## Stripe Radar’s abuse-prevention controls - Stripe Radar now offers a one-click control to detect behavior violating common trial terms, including repeated signups and missed cancellations. - The system predicts abusive behavior with 90% accuracy. - A new analytics page displays blocked high-risk payments and, for unenrolled businesses, shows transactions that would have been blocked. - The model analyzes payment instruments, devices, payment history, card BIN data, virtual card indicators, email domains, session timing, and other risk signals across Stripe’s network. ## Results for AI companies - Cursor and other AI businesses use Radar to block suspicious users before they consume costly compute. - Within two months, Stripe blocked over 550,000 high-risk free trials across four high-growth AI companies. - Stripe estimates this prevented $4.4 million in downstream compute-related losses. Stripe recommends its free trial abuse control for businesses across industries. Companies interested in early access can contact Stripe directly.

analyticsaistripesaas+4