Hacker Newsnew | past | comments | ask | show | jobs | submit | SCUSKU's commentslogin

I would love if there was some content here besides vague posting about Cloudflare bad. Like why? There truly is no thesis to convince me right now.

Also love the irony of getting an HN hug of death w/o Cloudflare


I can't shake the feeling that since its dealing with a huge amount of network traffic and it also strips SSL from every connection before passing it onto origins, they are a very juicy target for a certain three letter agency to place a tap.

The bit I'm less bothered about is the centralising effect it has on the internet.


Nah, they only recently got FedRAMP high. The real traffic still can't use it.

> strips SSL from every connection before passing it onto origins

What do you mean? You definitely can serve with TLS end-to-end with CF, it's called Full (strict) mode, or something like that.


They're still decrypting on their nodes, and then re-encrypting before sending to the origin. There's no getting around the fact they can see the traffic as plain text.

And they leaked said decrypted traffic at one point...

Full Strict just means that CF verifies your origin cert against actual CAs (or the private CA they issue you a cert for). "Full" means they don't verify the certificate authority of your origin, which technically is _a lot worse_ because that means you could be getting silently MITMd by some middlebox, since Cloudflare will accept whatever self-signed certificate your origin presents.

For almost all of Cloudflare's features. CDN, WAF, and all the compute features require seeing, storing, and caching content in plaintext. CF doesn't have much of a value proposition if all they're doing is handling Layer 3/4 DDOS prevention (most DDOS hits even back in 2015 were done on the protocol layer, or at least most DDOSes that actually showed up or impacted the underlying service).


I don't think anybody uses that mode.

And they issue certs in your name, right?

I finally ran Astra on a dashboard feature today, and while I was vibing it looked great, but then when it came time to actually read the code I was appalled because it was the worst looking code I had seen from an LLM since like last November. I mean it was just the definition of slop, not re-using anything, super terse with mega-ternaries, re-writing functions that should be using standard library packages, etc, etc. I think for coding I'm gunna stick with the 5.6 series of models, or maybe try out Anthropic again...

I've heard of orbs but what is it actually?


It’s basically self-contained cloud agents. I’m not sure why they’re called that but I think it’s just the next grift, kinda like “loops”…


I was expecting some intense clicking game that would give me carpal tunnel lol


I was thinking a clicker game where your mouse gets harder to move as you click.


These graphics are great. Makes for a skimmable high signal article, nice work!


My girlfriend works at Broadcom doing chip design, and based on what she's told me they JUST got claude code like 3 weeks ago, so I really doubt this means anything beyond them vibe coding some scripts or something...


I have this problem too. The only thing that has 10x'd is my boss's expectations and the number of draft PRs I have open...


Aged like milk for sure.


Anecdotally, my friend's grandma was an almond farmer. As they drove past a river in the Central Valley, she exclaimed "Why is there water in that river?! Those could be watering my almond trees!"


I think you can just click anywhere within it and click and drag it


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: