Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudflare claimed they implemented Matrix on Cloudflare workers. They didn't

tech.lgbt

Post reply on HN
Print view View original

111–120 of 231 posts

Re: Cloudflare claimed they implemented Matrix on Cloudflare workers. They didn't

#111

Post by palata »

parliament32 wrote: post #105
palata wrote: post #96

Earlier quoted context omitted.

[flagged]

In a real "engineering" role, this person would be stripped of their license for stamping "production grade" on a bunch of AI slop. That doesn't exist in our trade, so yeah, public shaming is the next best thing. I sincerely hope links to this incident will haunt him every time someone googles his name forevermore.

As you say, it's pretty hard to say that the average quality of software engineering makes it deserve the word "engineering" at all. Most software is bad accross the board, and developers on average get pretty good salaries for... whatever they bring to the world.

Still I don't think that some random employee deserves to be harassed and publicly shamed for a bad blog post.

Re: Cloudflare claimed they implemented Matrix on Cloudflare workers. They didn't

#112

Post by ectospheno »

InsideOutSanta wrote: post #103
bob1029 wrote: post #37

Earlier quoted context omitted.

I also use this as a simple heuristic: https://github.com/nkuntz1934/matrix-workers/commits/main/ There exist only two commits. I've never seen a "real" project that looks like this.

I think that's a reasonable heuristic, but I have projects where I primarily commit to an internal Gitea instance, and then sometimes commit to a public GitHub repo. I don't want people to see me stumbling around in my own code until I think it's somewhat clean.

I have a similar process. Internal repo where work gets done. External repo that only gets each release.

Re: Cloudflare claimed they implemented Matrix on Cloudflare workers. They didn't

#113

Post by alex_sf »

tamnd wrote: post #71
godelski wrote: post #62

Earlier quoted context omitted.

Here's the post on LinkedIn https://www.linkedin.com/posts/nick-kuntz-61551869_building-...

https://www.linkedin.com/in/nick-kuntz-61551869/ DevSecOps Engineer United States Army Special Operations Command · Full-time Jun 2022 - Jul 2025 · 3 yrs 2 mos Honestly, it is a little scary to see someone with a serious DevSecOps background ship an AI project that looks this sloppy and unreviewed. It makes you question how much rigor and code quality made it into their earlier "mission critical" engineering work.

Tbf, there is no one with a ‘serious DevSecOps background’. It’s an incredibly strong hint that the person is largely a goof.

Re: Cloudflare claimed they implemented Matrix on Cloudflare workers. They didn't

#114

Post by [deleted] »

palata wrote: post #89
OsrsNeedsf2P wrote: post #83

Earlier quoted context omitted.

> They start by saying they "wanted to see if it was possible" That's a generous read. From the actual article: > We wanted to see if we could eliminate that tax entirely. Spoiler: We could.

Sure it's a bad post. But the guy did not make a nazi salute at a meeting...

[deleted]

Re: Cloudflare claimed they implemented Matrix on Cloudflare workers. They didn't

#115

Post by SahAssar »

OsrsNeedsf2P wrote: post #76
Fokamul wrote: post #38

nkuntz1934 Senior Engineering TPM @ Cloudflare Of course, this is done by a manager. Classic corporate mindset, I can do what these smelly nerds do every day, hold my bear. He doesn't even know how git works, huh? What a clown.

TPM isn't manager. It's basically a PM, but they're (supposed) to be technical

Does TPM not mean Technical Program Manager or Technical Product Manager?

Re: Cloudflare claimed they implemented Matrix on Cloudflare workers. They didn't

#116

Post by huimang »

PUSH_AX wrote: post #110
parliament32 wrote: post #102

Earlier quoted context omitted.

The learning is "they lied". After all, apart from marketing materials making a claim, where is the evidence?

Wait, we think they’re lying because an advisory was eventually found? We think that should be impossible with people involved?

To me it's likely, given the extremely rudimentary nature of that issue.

Re: Cloudflare claimed they implemented Matrix on Cloudflare workers. They didn't

#118

Post by yjftsjthsd-h »

palata wrote: post #109
wswope wrote: post #100

Earlier quoted context omitted.

I’m plenty calm. There’s just nothing to debate here: the blog post and repo are a conscious, deliberate, and egregious misrepresentation of fact. I would absolutely say exactly the same things to the author’s face as I’m saying right now. I would never work for a company that condones this in a million years, as a matter of principle.

And I didn't say that you cannot criticise it (or did you think I was talking to you personally?). I just see a lot of comments from people who just seem happy to see that they can contribute to ruining someone else's day (or more).

> or did you think I was talking to you personally?

You wrote,

> May I kindly ask you to calm the fuck down?

So yes, a reasonable person would conclude that you were talking to them.

> I just see a lot of comments from people who just seem happy to see that they can contribute to ruining someone else's day (or more).

Which comments do you see doing that? Exactly?

Re: Cloudflare claimed they implemented Matrix on Cloudflare workers. They didn't

#119

Post by parliament32 »

PUSH_AX wrote: post #110
parliament32 wrote: post #102

Earlier quoted context omitted.

The learning is "they lied". After all, apart from marketing materials making a claim, where is the evidence?

Wait, we think they’re lying because an advisory was eventually found? We think that should be impossible with people involved?

If you're asking in good faith,

> Every line was thoroughly reviewed and cross-referenced with relevant RFCs

The issue in the CVE comes from direct contradiction of the RFC. The RFC says you MUST check redirect uris (and, as anyone who's ever worked with oauth knows, all the functionality around redirect uris is a staple of how oauth works in the first place -- this isn't some obscure edge case). They didn't make a mistake, they simply did not implement this part of the spec.

When they said every line was "thoroughly reviewed" and "cross referenced", yes, they lied.

Re: Cloudflare claimed they implemented Matrix on Cloudflare workers. They didn't

#120

Post by huckery »

Bloody hell that's embarrassing, for both Cloudflare and the blog author. Did he not have anyone review it before publishing?

So many failures coming out of Cloudflare these days, feels like they peaked a while ago and are slowly declining into incompetence.

Post reply on HN