@h5e https://tech.lgbt/@JadedBlueEyes/115968861622285804

I swear every iteration of the blogpost is somehow worse. No, your starting point wasn’t Synapse either. Your starting point was the claude opus chatbox

https://lobste.rs/s/csxfc6/cloudflare_claimed_they_implemented#c_gychiy

Quoting from one of my chat rooms:

> Distributed protocols get extra complex once cryptography and security get in the mix and without a domain expert

authentication isn't "extra complex", you literally removed signature checking. and hashes. And fucking authentication.

> ensure this handles the myriad of edge cases that regularly plague Matrix implementations

YOU REMOVED. AUTHENTICATION. THIS ISN'T SOME WEIRD EDGE CASE WITH STATE RESETS. YOU REMOVED AUTHENTICATION AND VALIDATION.

[U-turn in the readme, too](https://github.com/nkuntz1934/matrix-workers/commit/fd412f41f98c0f3f360f5c4034443ef80680de49), and an employee trying to do damage control on lobsters too

For those coming in now, they updated the blog post to include a disclaimer. Original post:
https://archive.is/AbxU5

@MarkAssPandi They updated the text

@josh @dcousineau oh god I didn't even look at the client code

@outsidecontext Same. It’s the fastest way to resolve it, and that means it’s the best, right?

@darkcat09 Conduit started with Sled, and then moved to a KV abstraction that let them add RocksDB and SQLite support. Conduwuit then removed everything but RocksDB, which is what Tuwunel and Conduwuit are forked from

Oh look, they’re trying to cover up what they did too

https://github.com/nkuntz1934/matrix-workers/commit/2d3969dd5e795caa3641d0e237e2b52ca0502463

Archive link for posterity:

https://web.archive.org/web/*/https://github.com/nkuntz1934/matrix-workers/commit/2d3969dd5e795caa3641d0e237e2b52ca0502463

@agowa338 They’re trying to clean up their tracks https://github.com/nkuntz1934/matrix-workers/commit/2d3969dd5e795caa3641d0e237e2b52ca0502463

I'm also giving a talk about some of the actual work that goes into building this software in a few days at FOSDEM, if you want to learn more:

https://tech.lgbt/@JadedBlueEyes/115956965835059690

For those of you that don't know, I develop https://continuwuity.org - a Rust based Matrix homeserver that actually works, and that you can run on a Raspberry Pi, rather than someone else's centralized cloud infrastructure

@poitzorg per-request pricing is just not the right model for that

@poitzorg Even only counting valid events, a normal matrix server is still consistently serving millions of requests a month!

The pricing comparisons are stupid, by the way, too - a bunch of us in the matrix chatrooms got out how many HTTP requests per day we were serving and the per-request cost of Workers would be more expensive than dedicated VPSs - not even counting CPU time or storage costs!

@barometz Post quantum openness

Honestly this is almost insulting to me, as someone who has spent a nontrivial amount of effort developing a Matrix homeserver, with how low effort it is. And what’s the point? Marketing? I’m not gonna be trusting anything Cloudflare after this.

Oh and to top things off, they make trivially false claims in their post. Tuwunel and its predecessors do not and have never used Postgres or Redis.

Rather than implementing the critical state resolution algorithm that's the core of Matrix, they just directly insert the latest state into the database. That'll instantly lead to diverging views of the room and incompatibility with every other implementation - and it's also a massive security hole.