Cloudflare

Cloudflare's experimental Rust port of the TypeScript compiler claims up to 8x speed and about 70% less memory than TypeScript 7.0, with the code written by frontier models in days.

A TypeScript team member says much of the speed is not language choice, and some of it is already landing in TypeScript 7.1.

Several users confirmed that Web Analytics can add JavaScript when Cloudflare is proxying traffic, while DNS-only domains do not pass through that HTML-rewriting path.

The sharper complaint was the control surface: one commenter said they had to enable analytics merely to find the setting that disables it.

Cloudflare's Workers, Durable Objects, and R2 gave readers practical reasons to defend the platform. Critics focused on who gets excluded when a central layer decides what a legitimate client looks like.

The dispute was not about whether the company ships. It was whether the convenience of an opinionated platform leaves room for nonstandard clients on the open web.

Cloudflare OS offers an agent and workspace built around a company’s systems and knowledge. The company’s explanation emphasizes isolated app instances—called Gadgets—whose access control is managed by the platform and whose users can modify their own copies with an agent.

The HN thread objected to the “OS” label, then supplied the useful distinction: a familiar agent interface may sit on top of a security model designed to let non-technical users change software without granting it broad access.

Several HN readers described abrupt account locks, weak support, or similar takeovers at other registrars. The recurring advice was operational rather than ideological: use domain privacy, keep recovery information current, and make a migration plan before an emergency.

The thread also undercuts the easy explanation that one company is uniquely broken—social engineering remains a human process wherever a support channel can reset access.

Bento packs a full PowerPoint-equivalent — slide editing, live viewing, embedded data, real-time collaboration — into a single HTML file you can open in any browser, no install, no account, no server-rendered app.

The creator showed up in the thread to explain the internals: readable JSON slide data up top, a compressed app shell that inflates in-browser, and end-to-end encrypted collaboration running through Cloudflare Durable Objects.

One pointed question in the thread: why does the homepage mention AI over twenty times, wrapped in walls of obfuscated base64 — a fair complaint about marketing noise on a genuinely clever piece of engineering.

The catch: the scan only sees who answers the DNS query, the front CDN, not where the data actually lives. Cloudflare 'wins' every market precisely because it's the proxy, not the host.

So one reader re-ran the question against 50,000 API subdomains with the CDN fronts stripped out and got the reverse answer: Europe leans on OVH and Hetzner more than AWS. Another, claiming access to better data, said the numbers are off by roughly half.

The surprise is in the invoice: requests that used to be free, like static assets and worker-to-worker calls over service bindings, now bill at the standard request rate because each one first checks the cache.

One developer's flat verdict on the new charges: 'that sounds like a bug that just happens to generate them more money.'

Vite+ unifies Vite 8, Vitest, Rolldown, tsdown, Oxlint and Oxfmt plus a cached monorepo task runner, MIT-licensed. A power user already running the full stack in production reports it 'just works.'

The skeptics circled two things: why a build tool should manage your Node runtime at all ('extraordinarily opinionated'), and whether another layer over Vite's five-majors-in-four-years churn is worth it. The '+' also set off a reflex fear of monetization — though the Cloudflare acquisition may have taken that motive off the table.

Cloudflare's Monetization Gateway revives the dormant HTTP 402 status code: any page, API, dataset or MCP tool behind Cloudflare can now return a price that AI agents pay in stablecoins, settled in under a second. Sample pricing runs to $0.001 per call plus $0.01 per MB.

The catch the thread seizes on: payment is stablecoin-only and Cloudflare-brokered. A developer who shipped a Bitcoin Lightning version of this eight years ago notes such paywalls have existed for years and never reached critical mass.

EuroISPA is asking the EU to make rightsholders financially liable for collateral damage from overbroad site-blocking. Its examples are concrete: Italy's Piracy Shield hit over 7,700 domains and once knocked a Portuguese host's email offline for 16 days; Spain's LaLiga blocks shared IPs so aggressively that banking and developer tools vanish during matches.

One reader's caution cut through the cheering: model-training firms also want a looser grip on content, so a win framed as protecting users could quietly become a fight over who profits.

Bunny DNS isn't a 1.1.1.1-style resolver — it's authoritative DNS with a routing engine that already steers 200 billion queries a month across 119 locations. Killing the per-query meter removes the one unpredictable line on the bill.

Then a user tried to open an account and couldn't get DNS without the $1 minimum spend, calling the 'free' headline 'verging on dishonest' — while others argued that exact floor is the anti-abuse feature.

Roughly 99.9% of ATProto accounts sit on Bluesky's own servers and never register a backup rotation key. That single gap turns the operator into a custodian who can impersonate you across Tangled, Grain, and Leaflet, not just one app.

The theory said you would hold the private keys. The product decided otherwise, because making millions of people manage cryptographic material would have crushed signups.

The fix is unglamorous: make backup-key enrollment mandatory at account creation, baked into the client.

`wrangler deploy --temporary` provisions a working account with no registration, live for 60 minutes, claimable into a permanent one via a link. The failure message tells the agent the flag exists, so it self-discovers the path.

One developer called handing deploy control to a non-deterministic process 'madness'. The simpler objection: humans get pushed into endless Turnstile loops while bots get a frictionless lane.