Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers.

[jadedblueeyes@tech.lgbt]

https://lobste.rs/s/csxfc6/cloudflare_claimed_they_implemented#c_gychiy

Quoting from one of my chat rooms:

> Distributed protocols get extra complex once cryptography and security get in the mix and without a domain expert

authentication isn't "extra complex", you literally removed signature checking. and hashes. And fucking authentication.

> ensure this handles the myriad of edge cases that regularly plague Matrix implementations

YOU REMOVED. AUTHENTICATION. THIS ISN'T SOME WEIRD EDGE CASE WITH STATE RESETS. YOU REMOVED AUTHENTICATION AND VALIDATION.

[ricko@tech.lgbt]

@JadedBlueEyes Eeek. That || instead of ?? is just painful to see. Repeatedly.

At my previous company we had one of our mid-level devs fall into this trap last year. Ended up failing in production in almost exactly this type of scenario, where the dev expected an array or undefined, but got true.

I have to wonder if this is an artifact of the initial training for these systems being on Python, which doesn't have a strong equivalent for ??. And, you know, the fact that these things don't actually understand the code they generate, as much as anyone may claim otherwise.

[chris_colvin@mastodon.social]

@JadedBlueEyes don't worry

"* This post was updated at 11:45 a.m. Pacific time to clarify that the use case described here is a proof of concept and a personal project. Some sections have been updated for clarity."

[h5e@tech.lgbt]

@JadedBlueEyes They updated their post, it now says Synapse instead of Tuwunel.

[jadedblueeyes@tech.lgbt]

I swear every iteration of the blogpost is somehow worse. No, your starting point wasn’t Synapse either. Your starting point was the claude opus chatbox

[jadedblueeyes@tech.lgbt]

@h5e https://tech.lgbt/@JadedBlueEyes/115968861622285804

[amd@gts.amd.im]

@JadedBlueEyes thank you for your work on continuwuity. An actually good matrix implementation.

[gossithedog@cyberplace.social]

@JadedBlueEyes lol

[h5e@tech.lgbt]

@JadedBlueEyes oh sorry I missed that!

[h5e@tech.lgbt]

@JadedBlueEyes ah we posted around the same time. I did check

[eflex@social.spejset.org]

@JadedBlueEyes I am so glad we are well invested, giving all of the moneys to Cloudflare.

[joshbal4@m.fa.gl]

@JadedBlueEyes it’s post-quantum security: if you observe it it’s not there

[lappenjammerdiezweite@social.vivaldi.net]

@JadedBlueEyes Is this "blue screen of death" cloudflare?

[bumbervevo@easymode.im]

@DDRitter@neopaquita.es @JadedBlueEyes@tech.lgbt puts a paper plate on top of your server
Yeah that feels secure enough

[womble@infosec.exchange]

@bitofabother in fairness, people are also very bad at ORMs...

[apophis@kill-corporations.enterprises]

@tauon @JadedBlueEyes true but this is the giant rock excavator hitting a whole new substrate of rock bottom

[fsoc@infosec.exchange]

@JadedBlueEyes

Thank you for bringing your attention to this matter.

This #slopshard

[bredroll@mas.to]

@JadedBlueEyes did anyone fork thier repo?

[ariadne@social.treehouse.systems]

@JadedBlueEyes does it scale? does it have the ability to delete CSAM when stupid edgelords device to upload it to your homeserver and then get you swatted?

as always I want to believe there is a usable matrix homeserver... but it seems there is always a catch.

[peturdainn@mastodon.social]

@JadedBlueEyes I stopped reading after:
"But there is a "tax" to running it. Traditionally, operating a Matrix homeserver has meant accepting a heavy operational burden. You have to provision virtual private servers (VPS), tune PostgreSQL for heavy write loads, manage Redis for caching, configure reverse proxies, and handle rotation for TLS certificates. It’s a stateful, heavy beast that demands to be fed time and money, whether you’re using it a lot or a little."

Mine runs on a small NAS ‍️