Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers.
-
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes This is literally how some of the pull requests look today at work. People vibe code; don't even look at the output; git push if the app works; ask for review/approvals; get annoyed, when you question why there are two identical files; pass your comments to the bot; push again without checking when it finishes; manager advises you to tame down your perfectionism; also asks why do you do less tickets than others.
-
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes seems like the sort of thing @davidgerard would like to read
-
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes sasuga Buttflare
-
@JadedBlueEyes seems like the sort of thing @davidgerard would like to read
@beejeebus @JadedBlueEyes for horrified and appalled levels of "like"
so i guess that's a yes
-
https://lobste.rs/s/csxfc6/cloudflare_claimed_they_implemented#c_gychiy
Quoting from one of my chat rooms:
> Distributed protocols get extra complex once cryptography and security get in the mix and without a domain expert
authentication isn't "extra complex", you literally removed signature checking. and hashes. And fucking authentication.
> ensure this handles the myriad of edge cases that regularly plague Matrix implementations
YOU REMOVED. AUTHENTICATION. THIS ISN'T SOME WEIRD EDGE CASE WITH STATE RESETS. YOU REMOVED AUTHENTICATION AND VALIDATION.
Are they upload the code to public repo AS IS?
If so, we are in a deep shit.
If not, maybe they publish the open-source boilerplate, when the auth was proprietary -
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes
It's just like that time I implemented Matrix in ActivityPub! -
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes Slop like this is so disrespectful to the time of everyone who reads the blog post. Jerks who are too lazy to do their job properly and expect others to fix their careless mistakes existed before LLMs but I swear this technology is like rocket fuel for these people.
-
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes umm is the internet dying already? i thought we had time
-
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes >Matrix is the gold standard for decentralized, end-to-end encrypted communication.
they lost me on the first line, lol
-
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes they lost me already with "serverless" and "post-quantum" and when I saw "cloudflare" I completly turned away
-
Oh look, they’re trying to cover up what they did too
https://github.com/nkuntz1934/matrix-workers/commit/2d3969dd5e795caa3641d0e237e2b52ca0502463
Archive link for posterity:
@JadedBlueEyes lol
-
@GossiTheDog @JadedBlueEyes fucking OUCH
@siguza @GossiTheDog @JadedBlueEyes I’m holding out for serverless CloudFlare Gas Town.
-
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes not to pile on matrix, but "Matrix is the gold standard for decentralized, end-to-end encrypted communication" also seems bold. I have never had a good experience using matrix, nor heard anyone describing one
-
@JadedBlueEyes not to pile on matrix, but "Matrix is the gold standard for decentralized, end-to-end encrypted communication" also seems bold. I have never had a good experience using matrix, nor heard anyone describing one
@JadedBlueEyes to be very fair, I tried it a few times and do not interact with people who use it, so my sample size and experience is low. I would love if it overcame usability issues and replaced discord!!!
-
@JadedBlueEyes not to pile on matrix, but "Matrix is the gold standard for decentralized, end-to-end encrypted communication" also seems bold. I have never had a good experience using matrix, nor heard anyone describing one
True (it's also my experience) but it’s still a huge deal that the German and French militaries are actually putting their weight behind Matrix...
-
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes this whole thing is so bad. The title makes it seem like they updated the matrix protocol to use post-quantum cryptography, but all they did was toggle a switch for cloudflare TLS connections
-
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes We published a response on the Matrix side at https://matrix.org/blog/2026/01/28/matrix-on-cloudflare-workers/
-
Holy crap. I would not expect this from an industry giant (Though I guess I should.)
That certainly shatters my trust in cloudflare a bit. #devops #programming #networking
Seeing two basically back-to-back Cloudfare outages is a span of a month last year, both of which had a really good technical blog posts - that boiled down to being a minor programmer error, got me suspicious that LLMs are involved.
I mean, I remember like 1 other CF outage before that, and two major outages in a month?
This kind of explains it. It's what happens when you turn to LLMs for your development (see i.e recent Windows bugs).
Tech will suck so much now
-
Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
https://blog.cloudflare.com/serverless-matrix-homeserver-workers/
@JadedBlueEyes @joeress if you haven't seen this yet, I could see you discussing it on one or more of your podcasts
-
@JadedBlueEyes We published a response on the Matrix side at https://matrix.org/blog/2026/01/28/matrix-on-cloudflare-workers/
@matrix @JadedBlueEyes I do understand that matrix.org should really not pile on and at least maintain a good relationship with cloudflare, but this blogpost seems a bit too starry-eyed about cloudflare building a shitty excuse for a matrix server and having the audacity of calling their crap a "serverless" matrix server.
Also, like mentioned elsewhere in this thread: even if cf built something halfway decent, that really just gives them a position where they can vendorlock anyone who uses it.
