Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers.

[elilla@transmom.love]

@wyldtom @JadedBlueEyes for me the funniest part is

> a serverless architecture where operations disappear, costs scale to zero when idle, and every connection is protected by post-quantum cryptography by default.

I don't know about the post-quantum cryptography, but I'll grant them that their homeserver is serveless and costs scale to zero (on account of it not existing)

[dio9sys@haunted.computer]

@JadedBlueEyes ah yes, AI. The technology of the future right?

...right??

[ivan@possum.city]

@JadedBlueEyes@tech.lgbt

What in absolute fuck is a serverless server

[moin@gruene.social]

@JadedBlueEyes
They seem to do there Global deployment this way...

[flesh@transfem.social]

@elilla@transmom.love @wyldtom@chaos.social @JadedBlueEyes@tech.lgbt Not even a quantum computer can get your data from the system without authorisation.

[grumpasaurus@infosec.exchange]

@JadedBlueEyes aewwwww2 crap

[elilla@transmom.love]

@flesh @wyldtom @JadedBlueEyes Cloudflare truly has mastered the definite Matrix security approach (not sending messages at all)

[phryk@mastodon.social]

@algernon @JadedBlueEyes "Remove PII" is always a banger of a commit to have public.

[flesh@transfem.social]

@joepie91@fedi.slightly.tech @JadedBlueEyes@tech.lgbt It seems minor in comparison, because we're so far down along the tracks, but it's still a line we never should have allowed to be crossed.

[airshipper@cloudisland.nz]

@kieran @JadedBlueEyes addressed todos, ready to ship!

[markasspandi@shrimpnet.gej.pet]

@JadedBlueEyes It started off okay, mostly because they said it was a proof of concept and an experiment, but then I saw that "it is arguably one of the most secure ways to deploy a homeserver today" and just
lmfao

[viss@mastodon.social]

@JadedBlueEyes

"build a serverless home server" is the most fucking brainrot, dipshit, nonsense thing ive read in a while

[jadedblueeyes@tech.lgbt]

@MarkAssPandi They updated the text

[jadedblueeyes@tech.lgbt]

For those coming in now, they updated the blog post to include a disclaimer. Original post:
https://archive.is/AbxU5

[swags@social.treehouse.systems]

@JadedBlueEyes Serverless is exactly how matrix shouldve been built anyway. Cuz I dont wanna use this crap anymore.

[goopadrew@infosec.exchange]

@JadedBlueEyes lol, "unknown error" should imply the existence of a known error

[gudenau@hachyderm.io]

@JadedBlueEyes I know someone Tibet works there that has openly admitted to changing their workflow to `while (testsFailing()) doLlmSlop()` and it really shows.

[jadedblueeyes@tech.lgbt]

[U-turn in the readme, too](https://github.com/nkuntz1934/matrix-workers/commit/fd412f41f98c0f3f360f5c4034443ef80680de49), and an employee trying to do damage control on lobsters too

[jadedblueeyes@tech.lgbt]

https://lobste.rs/s/csxfc6/cloudflare_claimed_they_implemented#c_gychiy

Quoting from one of my chat rooms:

> Distributed protocols get extra complex once cryptography and security get in the mix and without a domain expert

authentication isn't "extra complex", you literally removed signature checking. and hashes. And fucking authentication.

> ensure this handles the myriad of edge cases that regularly plague Matrix implementations

YOU REMOVED. AUTHENTICATION. THIS ISN'T SOME WEIRD EDGE CASE WITH STATE RESETS. YOU REMOVED AUTHENTICATION AND VALIDATION.

[ricko@tech.lgbt]

@JadedBlueEyes Eeek. That || instead of ?? is just painful to see. Repeatedly.

At my previous company we had one of our mid-level devs fall into this trap last year. Ended up failing in production in almost exactly this type of scenario, where the dev expected an array or undefined, but got true.

I have to wonder if this is an artifact of the initial training for these systems being on Python, which doesn't have a strong equivalent for ??. And, you know, the fact that these things don't actually understand the code they generate, as much as anyone may claim otherwise.