Cloudflare just published a vibe coded blog post claiming they implemented Matrix on cloudflare workers. They didn't, their post and README is AI generated and the code doesn't do any of the core parts of matrix that make it secure and interoperable. Instead it's littered with 'TODO: Check authorisation' and similar
Rather than implementing the critical state resolution algorithm that's the core of Matrix, they just directly insert the latest state into the database. That'll instantly lead to diverging views of the room and incompatibility with every other implementation - and it's also a massive security hole.
Honestly this is almost insulting to me, as someone who has spent a nontrivial amount of effort developing a Matrix homeserver, with how low effort it is. And what’s the point? Marketing? I’m not gonna be trusting anything Cloudflare after this.
The pricing comparisons are stupid, by the way, too - a bunch of us in the matrix chatrooms got out how many HTTP requests per day we were serving and the per-request cost of Workers would be more expensive than dedicated VPSs - not even counting CPU time or storage costs!
For those of you that don't know, I develop continuwuity.org - a Rust based Matrix homeserver that actually works, and that you can run on a Raspberry Pi, rather than someone else's centralized cloud infrastructure
I swear every iteration of the blogpost is somehow worse. No, your starting point wasn’t Synapse either. Your starting point was the claude opus chatbox
@JadedBlueEyes They probably asked claude or chatgpt or whatever the name of the latest slop machine that's just gpt with a different initial prompt is to fix the blogpost, too.
![// Process incoming PDUs Nick Kuntz, 6 days ago
for (const pdu of pdus || []) {
try {
// TODO: Validate PDU signature
// TODO: Check authorization
// TODO: Store event
pduResults[pdu.event_id] = {};
} catch (e: any) {
pduResults[pdu.event_id] = {
error: e.message || 'Unknown error',
};
}
}](https://shrimp.thesoftestpaws.net/files/original-74cbaefa-118d-4aeb-af72-330ee0d719b8.png "// Process incoming PDUs Nick Kuntz, 6 days ago
for (const pdu of pdus || []) {
try {
// TODO: Validate PDU signature
// TODO: Check authorization
// TODO: Store event
pduResults[pdu.event_id] = {};
} catch (e: any) {
pduResults[pdu.event_id] = {
error: e.message || 'Unknown error',
};
}
}")
