Cloudflare Drop

https://www.cloudflare.com/drop/

by coloneltcb • 14 days ago

524 270 14 days ago

cloudflare.com

ChrisArchitect2• 14 days ago

No account needed. Deployment is active for 60 minutes, then expires unless you claim it.

(https://x.com/BraydenWilmoth/status/2074894829616509358)

simonw• 14 days ago

Same deal as their Cloudflare Workers previews from a few weeks ago: https://blog.cloudflare.com/temporary-accounts/

Bender4• 14 days ago

There must be some really good protection on this. If I enabled such a thing on any of my servers it would be full of warez, porn, malware, CSAM and who knows what else within minutes. Curious how they manage to keep it clean.

DakotaR• 14 days ago

Yeah, I was going to start a file drop site like 0x until realizing what it'd be used for

mattlondon• 14 days ago

Only live for an hour.

But that won't stop people doing bad stuff for an hour I guess. Vibe code up some on-demand thing that you ping...

Y-bar• 14 days ago

One hour is great for spearphishing attacks, once the victim has been infected their IT department will have no trace of the source.

hoppp5• 14 days ago

They already allow hosting static websites so I think the same guardrails are implemented.

Bender4• 14 days ago

I've never used CF so I could be ignorant in this matter. I assumed perhaps incorrectly that people had to verify their email address and delegate their domain(s) to CF including setting the glue records in the TLD servers meaning there is possibly a financial trail somewhere probably in the DNS registrars and perhaps a mail provider, whereas this is just drag-and-drop with no money trail.

I have no idea what guardrails they have in place in the background that blocks malware, CSAM, warez and such on their free accounts.

inigyou4• 14 days ago

The protection is that they're rich enough to handle requests from law enforcement without going to jail themselves. They'll certainly pass your IP address to law enforcement if asked.

busymom0• 14 days ago

At least when it comes to bad types of porn, it's be similar to Imgur allowing anonymous uploads. They already do CSAM scanning on uploads to their R2 storage:

https://blog.cloudflare.com/a-simpler-path-to-a-safer-intern...

Bender4• 14 days ago

That makes sense. In that case I have to assume that Cloudflare will not permit encrypted archive files as one can hide the image fingerprints all together.

ChrisArchitect2• 14 days ago

Extension of the temporary accounts they needed to enable for Agents https://blog.cloudflare.com/temporary-accounts/

smalltorch• 14 days ago

Hmm, that's fun and useful. Here is snake game for 60 minutes.

https://drop-e7e6d363-601.important-seat.workers.dev

copper-float• 14 days ago

What an honor. I got a high score of seven.

tengbretson• 14 days ago

Your code appears to have a bug where if the arrow keys trigger a change of direction twice in a single frame interval, it can mistakenly send the snake back on itself.

Self-Perfection• 14 days ago

$ curl -I https://drop-e7e6d363-601.important-seat.workers.dev/ curl: (7) Failed to connect to drop-e7e6d363-601.important-seat.workers.dev port 443 after 47 ms: Couldn't connect to server

Tried from two hosts, different countries.

tmp10423288442• 14 days ago

Yes, it's expired I think - it only lasts for 1 hour

janandonly• 14 days ago

Makes sense. It plays nicely with the vibe code kids who don’t know how to do GitHub or don’t know to ask their LLM about it.

navigate8310• 14 days ago

From FTP to CI/CD to drag and drop, society is going backwards

_pdp_• 14 days ago

It is cool to see not sure why you would use it.

Also it seems to me that this is a good way to exfiltrate data, rubber stamped by cloudflare themselves.

gruez• 14 days ago

Isn't there already thousands of ways for exfiltrating data that must be whitelisted by corporate firewalls? office365/gsuite, for instance. Not to mention the classics like dns.

sgt• 14 days ago

Tried uploading a ZIP and got:

"Something went wrong An unexpected error occurred. Please try again or contact support."

TZubiri3• 14 days ago

When contacting support:

"Please upload a screenshot of the error by dragging a zip of the png file."

grg0• 14 days ago

Please zip the contact by dragging a support of the screenshot.

throwaway815233• 14 days ago

Wait, my first impression was that it points a local browser to your local browser. Now it looks like it uploads your folder to Cloudflare and temporarily serves it over the web. But is that different from what we used to do with FTP? Are there any databases or anything like basic PHP hosts supply? It's just static sites?

Is this a product or what? What's the purpose? Is there an API?

joenot443• 14 days ago

A minute ago I had an HTML doc I wanted to share with a PM. It was a Claude prepared demo of a hypothetical feature. Lots of screenshots.

I ended up just embedding them directly in the HTML as base64 and sending him a 15mb file, but hypothetically this would have been a nice solution instead.

throwaway815233• 14 days ago

You could just upload to a personal or other website? I sometimes do that. Is there any security or privacy (e.g. password protection) for this Cloudflare Drop site?

pantelisk• 14 days ago

There are also solutions for sharing your homelab with others (basically tunneling from your machine->server (internet accessible) <-> client. Though, if your machine would go to sleep that whole chain would fall apart. A few good automatic solutions out there that solve the problem (no "just replace dropbox with ftp" type of argument).

However, I see the appeal of this. Kind of surprised it hasn't happened yet to be honest.

qingcharles• 14 days ago

Absolutely agree. There's an insane "feature" of Claude Design which means you can only share the link to the design with other users on your account?! You can export the design, though, but then you need somewhere to quickly drop a bunch of HTML + assets. This would be perfect for that.

efields2• 14 days ago

I built a tool _just the other day_ for this exact purpose. Now my agents proactively make disposable links for me: https://jlnk.us

dmillar2• 14 days ago

Replit is used a lot in this context. Their agent is good, but their circumvent-policies-to-get-something-in-front-of-execs-quickly is an amazing and mis-priced feature.

vulture916• 14 days ago

Check out Tailscale - they have TUNS + share the source files with someone else in tailnet.

amaldavid• 14 days ago

Been through the exact same issues and built a publishing workflow over cloudflare a few weeks back and did decent reception from HN as well

you can check it out here: https://github.com/Amal-David/pagecast

andrethegiant• 14 days ago

Netlify made this 10 years ago... they even copied the name! https://app.netlify.com/drop

brightball• 14 days ago

There are numerous products like this out there. Isn’t that where Dropbox got its name in the first place?

latchkey2• 14 days ago

Don't forget Digital Ocean Droplets.

scubbo• 14 days ago

I was always under the impression that that was referencing the notion from spycraft.

hoherd2• 14 days ago

I thought it was a reference to the Mac OS X `~/Public/Drop Box` directory, which was a write-only place for people to send files to your user, which has been around since the first OS X beta came out in 2000.

forgotusername6• 14 days ago

A drop box is a real physical thing, where you drop items for other people to collect.

tech234a• 14 days ago

And BitBalloon before that (which Netlify acquired) http://web.archive.org/web/20131028083240/https://www.bitbal...

gfat• 14 days ago

Loved this app. What is old is new again.

neom3• 14 days ago

BitBalloon was the original project from Matt, the founder of Netlify!

dmillar2• 14 days ago

Low barrier services don't care who's first in this epoch.

ares623• 14 days ago

But this time it's with ~blockchain~ AI!

wartywhoa23• 14 days ago

Oh, how I miss the golden days of blockchain hype so much.

The luxury blockchain resort island is just soaking somewhere in the ocean, collecting dust and guano, while its former inhabitants are all the rage about AI now :'(

r_lee• 14 days ago

ouch... I get that it's a simple concept but darn it really does seem like ctrl c ctrl v lmao

giancarlostoro3• 14 days ago

Its not exactly a very elaborate name.

arm322• 14 days ago

My... Aviato?

oasisbob3• 14 days ago

Elaborate enough?

Funny story: I used to work for a startup which had a trademark on "Airdrop". When Apple announced that feature, it took everyone there by surprise. Ended up reaching out and selling it to them for a buck or two in favor of maintaining goodwill.

hliyan• 14 days ago

Isn't this what we used to do with Geocities a quarter century ago? And with most other websites that offered FTP upload? You didn't have to be very technical -- there were windows FTP clients where you could just type in the IP, username, password and see an explorer-like view, onto which you could just drag and drop your HTML and image files.

xnx• 13 days ago

Most browsers even had (read only?) FTP clients built in.

Cider9986• 14 days ago

Something went wrong An unexpected error occurred. Please try again or contact support.

I have a few qualms with this app.

collabs3• 14 days ago

Congratulations on launching!

I tried uploading a git repository that I have previously successfully published on Github pages. This is a "no build" website I have built with the help of Claude. It should just work but I keep getting an error. Who can I reach out to give them steps to reproduce? The website repository is public and I feel like anyone at Cloudflare who wants to reproduce my problem can quite literally clone my repo and upload it to cloudflare drop.

Please drop your cloudflare email address and I will reach out to you with my repository information.

turtlebits• 14 days ago

Or you could do some of your own troubleshooting? Uploading a git repo is different than uploading a zipped/folder, especially if your index.htm/l isn't at the root.

collabs3• 14 days ago

Thank you for the reply. Index dot html is already at the root of the folder and it deploys just fine on GitHub pages.

aetherspawn• 14 days ago

Hey stranger, welcome to 2026. It’s somewhat different to what you’re used to in 2035. We do things differently here.

collabs3• 13 days ago

I copied the folder to a new folder without the `.git` folder and that deployed just fine. Thank you to everyone who helped me.

altairprime• 14 days ago

Hah! This is exactly how I’m serving the vestigial remnant of my blogging in the early 2000s from a ZIP-backed Cloudflare Worker today. Should I rebuild my site with Drop+Claim or is it fine as-is? I kind of feel like ‘if what I have works, don’t change it’ is the best path.

heipei• 14 days ago

Cloudflare is really good at launching features that facility low-friction deployment of malicious content (such as phishing) on the Internet, piggybacking on their hosting reputation and the fact that you can't easily block their ASN or domains.

Waterluvian• 14 days ago

Be the change you want to see to make the world of your dreams.

And then sell its denizens malice protection services.

simultsop3• 14 days ago

I don't know your experience. Once I was toying around and doing a basic auth with registration and so. The weekend was over and couldn't get back to that couple of months. The worker was quarantined and marked as phishing automatically. So I believe they have something in place to prevent those you complain.

jszymborski• 14 days ago

Your anecdote just illustrates that their system detects legit uses as abuses, not that they have a system that effectively detects abuses.

cute_boi2• 14 days ago

Cloudflare is also like a Chinese copycat machine. They mostly copy some successful project and sell it at cheap price.

system2• 14 days ago

It would be nice if we could see some information such as file size limitations, demos, link structure, management, etc. Am I expected to upload a random HTML file and see how it works?

Fergusonb• 14 days ago

Yep, I chucked it a file on my desktop: index.html present Max individual file size 25MB Total file count <2000 Total size less than 100MB

petee• 14 days ago

Yeah I'm very lost on what this is supposed to do -- "Summon your site" is quite vague. "see it live", like a demo? or is this actually published somewhere? Is it forever?

Desktop mode doesn't show any more information either

ricardobeat• 14 days ago

I remember doing this in 2006. FTP. Good times.

barnacs• 14 days ago

I remember making a Qt app for a friend that would upload dropped files via ftp and copy the link to the clipboard. Good old days!

sleepynoodle• 14 days ago

This is so cool.

S0y2• 14 days ago

Cloudflare has the astonishing ability to make me hate them more as a company every new feature they launch.

vevoe• 14 days ago

why?

S0y2• 14 days ago

Every new feature they've launched recently can be used to make the web more dangerous for everyone except those who use Cloudflare.

toomuchtodo2• 14 days ago

Cloudflare folks: Please consider supporting WARC archives for deployment.

hoppp5• 14 days ago

Is that something you use often?

toomuchtodo2• 14 days ago

When I want to serve an archived website in read only mode, yes.

https://news.ycombinator.com/item?id=48808481

https://github.com/SpeedcubeDE/speedcube.de-forum-archive is an example use case.

Sort of, but not quite, like cherry-picking files out of an archive blob in S3.

(I’ll see if Claude and I can come up with a WARC archive->zip file converter too)

jonluca• 14 days ago

Wow the people in this thread are a huge bummer. This is much cooler and I doubt this is a real safety issue. You can already sign up for a free cloudflare account and deploy it for free, on your own, on a free workers.dev domain. The friction removal here isn't going to meaningfully change the security / amount of malicious content.

superjose• 14 days ago

Agreed I think this is pretty solid especially since you get all the Cloudflare benefits like CDN from the get-go.

combyn8tor• 14 days ago

Well according to the people in this thread it was previously impossible for bad actors to host a website, and CloudFlare has now given them this unique ability.

judge2020• 14 days ago

I really hope/imagine this project specifically has a LLM of some kind doing real-time analysis on the uploaded files for malware from the get-go. How good that is could be is anyone's guess (and chances are there would be blind spots / evasion techniques).

0xcafefood• 14 days ago

Why would Cloudflare do that? They shouldn't help bad actors.

ForHackernews• 14 days ago

Same folks who are very concerned AI will give malicious actors the ability to produce text containing falsehoods.

arcatech2• 14 days ago

When you see a group of people being critical, you can either see it as a “bummer”, or you can see it as people critically thinking about a thing.

Is it really more useful to have everyone expressing how much they like something instead of identifying problems?

Is seeing people talking about the things they don’t like something that makes you unhappy? Why?

dryarzeg• 14 days ago

Is seeing people talking about the things they don’t like something that makes you unhappy? Why?

Probably (I'm just assuming) because that person observes negative/cautious/"I don't like this because X and Y and also Z"/etc sentiment too much and feels like people are only quick to notice issues while forgetting about good sides.

It's only an assumption, though.

ddtaylor• 14 days ago

I think the HN rule for "curmudgeonly" applies.

Don't be curmudgeonly. Thoughtful criticism is fine, but please don't be rigidly or generically negative.

https://news.ycombinator.com/newsguidelines.html

I think HN should be a place where I am excited to see what others have to add. When I see a post I am excited to see what takes and spins others have on it. I do want real criticism and a lively debate about important things, but there has to be a balance.

I want to see other comments that seem like they genuinely want to help steer something or build people up. Sometimes I get the impression that's not happening on HN.

Nifty3929• 14 days ago

The problem is that everything is negative, all the time. Nothing good is allowed to be acknowledged. Everything someone or some company does must not be acknowledged to have any redeeming value- it’s all just negative

Which is sad, because so much amazing stuff is happening on the world right now, and seems to be only accelerating. For everybody.

sandcat_• 14 days ago

It may not be critical thinking though, but simply being contrarian, which is one of the easiest ways to sound smart without necessarily providing much of value or substance. And strangely, seeing as it’s relatively rare IRL, seemingly the default on the internet. Blindly praising isn’t worth much either, but I doubt that’s what jonluca is encouraging. It’s possible to “yes, and” without resorting to either sycophancy or relentless negatively.

camillomiller2• 14 days ago

This is what the influencer propaganda machine on social media has done to people's view of critical thinking.

adithyassekhar• 14 days ago

I think they are all bots or threatened to see their little hobby now being accessible, classic gatekeeping.

esjeon3• 14 days ago

Corporations acting as if naive is a bit of problem in reality. For one thing, CF is probably the largest entity serving pirated content internationally while hiding the identities of actual perpetrators for privacy.

Same here: CF is basically giving malicious actors an ability to ship contents/data publicly while laundering the legal responsibility of those actors.

Now tell me what is cool

x-complexity• 14 days ago

Now tell me what is cool

Not immediately being a copyright bootlicker.

The fact that you went straight to "BuT pIrAtEs" already shows who you actually care: Corpos, not people.

MallocVoidstar• 14 days ago

For one thing, CF is probably the largest entity serving pirated content internationally while hiding the identities of actual perpetrators for privacy.

That's awesome, glad to hear it

stackghost5• 14 days ago

Now tell me what is cool

Piracy is cool. Information wants to be free.

I hate the corporate bootlicking that is so prevalent here.

itzjacki• 14 days ago

CF is probably the largest entity serving pirated content internationally while hiding the identities of actual perpetrators for privacy.

I'm already on board, you don't need to sell it to me!

pegasus• 14 days ago

You're encountering the "contrarian dynamic" which dang described in this post (which also explains why your own anti-contrarian comment reached the top) https://news.ycombinator.com/item?id=24215601

rolfus• 13 days ago

Thanks for linking that comment! I wasn't familiar with the term, but it perfectly describes the pattern that manifests in every single HN thread about certain topics. The Grok announcement thread that is on the main page today is another perfect example.

croes• 14 days ago

But why need they so much license rights?

https://news.ycombinator.com/item?id=48841559

camillomiller2• 14 days ago

Oh poor you, bummed by people WHO ACTUALLY care about the web.

thenthenthen• 14 days ago

After my hoster started asking me for 700€ for a year of hosting a static website of like 100Mb i moved to CF worker and github. I would selfhost but thats not allowed without license

djfobbz• 14 days ago

Yet I can't drag and drop a plain old HTML file without putting it in a folder or a ZIP file first.

spartanatreyu• 14 days ago

You can, the file just has to be named "index.html".

rickcarlino4• 14 days ago

Desktop operating systems should be able to run zipped web apps the way Electron apps run today. It ought to just be part of the OS.

TZubiri3• 14 days ago

And if there's a form or something with a backend? Just break?

ubertaco• 14 days ago

Adobe Air, for the obscure nostalgia bomb

rickcarlino4• 14 days ago

I was going to mention Microsoft Active Desktop in the original comment, but I didn’t want HN to know how old I am.

dghlsakjg2• 14 days ago

Unzip it.

Double click the html file.

The OS will run the web app using a browser that is just part of the OS.

rickcarlino4• 14 days ago

You have clearly never actually tried that.

AlienRobot3• 14 days ago

CORS issues due to trying to a .json via file://.

CORS issues on a tainted canvas if you try to render an image from a file:// src.

remix2000• 14 days ago

https://en.wikipedia.org/wiki/HTML_Application always been there waiting to be discovered

nalekberov• 14 days ago

The internet will soon be flooded with even more scam landing pages.

cute_boi2• 14 days ago

And you should be using cloudflare to protect yourself...

worldthruword• 14 days ago

Is cloudflare a religion now? Identify/Provide/Tell people that normal life is a problem to be solved and then sell the solution.

BoppreH• 14 days ago

Dropped a folder with a small HTML project, and after 20 seconds got "Something went wrong. An unexpected error occurred. Please try again or contact support.".

Note how the error has zero information.

Looking in the network tab, a POST request to /upload returned 403 and an HTML page starting with "Sorry, you have been blocked", and to "email the site owner to let them know you were blocked".

I'm very tired of this adversarial approach to software coupled with vague errors.

EDIT: it was the file './git/hooks/fsmonitor-watchman.sample' created by default on git init. Maybe because it's Perl. Worse-than-useless "please try again" and "you've been blocked" for committing the sin of uploading a folder that's a git repository. Sigh...

alberth• 14 days ago

Reminds me of web development in the 1990s.

I honestly miss those days of deployment simplicity.

gesis• 14 days ago

FTPing files to `~/public_html` was the best... Miss those days.

hoppp5• 14 days ago

It still works...

anonymousiam• 14 days ago

Odds are that this new feature will not suffer the same outcome as Megaupload, because of Cloudflare's close relationship with the USG.

bossyTeacher• 14 days ago

It could be fun to use a temporary Mediafire/Rapidshare/Megaupload service. Especially if you need to transfer something between an Android and an iPhone.

fragmede• 14 days ago

KDEconnect will do that locally.

nickgray• 14 days ago

This is cool and I like it.

grepsedawk• 14 days ago

This is pretty cool, thanks for sharing. It really enables less tech savvy users. It would really enable frontpage/dreamworks-like flows for some people

ed_mercer• 14 days ago

Cool, just 20 years too late.

hoppp5• 14 days ago

I can see this interface is for vibe coders haha

I have been hosting static websites with cloudflare for years and finding how to do it on the UI is getting harder as they add more things and reoranize.

asasidh2• 14 days ago

exactly this. This is why i ended up moving to other platforms like vercel for random vibe coded projects than wrestle with cloudflare admin portal.

lenkite2• 14 days ago

Does the T&C differ if you do it the old fashioned way ?

jjcm• 14 days ago

Cloudflare is obviously more trustworthy/robust here, but if name of the url matters to you, my site non.io [1] allows for named uploads, ie https://html.non.io/solara [2]

Somewhat useful if you want a url that isn't a hash / is more self descriptive.

[1] Launch discussion: https://news.ycombinator.com/item?id=36296695

[2] This was a demo of the output of a design tool I'm working on, only the home/accommodations/about pages work.

steve_adams_86• 14 days ago

Cool, it worked!

https://drop-1e1a536f-10d.honeysuckle-gull.workers.dev/

It's minesweeper, but the logic uses xstate/store. The link in the bottom is broken; it's supposed to go to `building-minesweeper-with-xstate-store.html`

I have no need for this but I love that my friends could vibe out a website, drop it here, claim it, and host it for pennies. This is great.

"Your site is reachable within ~32ms of 95% of the world’s Internet-connected population" isn't new but it's cool to see that achieved so trivially.

arm322• 14 days ago

This definitely won't get used to host unlimited phishing sites. /s

dmd2• 14 days ago

All I ever get is "Something went wrong An unexpected error occurred. Please try again or contact support."

inigyou4• 14 days ago

I think that means you're a bot.

dmd2• 14 days ago

beep boop

jeffgreco• 14 days ago

What is this for?

neom3• 14 days ago

I have hosted my personal site on Netlify for many many years because it's just basic js/html/css, I picked Netlify because I can just updated the index.html in the "website" folder on my desktop and literally drag it to Netlify to update it, saves a lot of time/thinking if you need something simple online quickly to show someone etc. I presume this is a similar idea.

AlienRobot3• 14 days ago

Serverlessless web apps.

xyst• 14 days ago

geocities/angelfire but for Gen Z and A

deeprack4sure2• 14 days ago

Look. Guys (?)

If cloudflare wants to be the next "Megaupload" what business is it of yours?

There is a guy named kim DOT com. That is actually fucking cool. Whether or not he himself is actually cool. Or in prison.

altbdoor• 14 days ago

They had a short blog post about this:

https://developers.cloudflare.com/changelog/post/2026-07-08-...

anshumankmr• 14 days ago

JAMstack for the rest of us I suppose.

PaybackTony• 14 days ago

There is a reason I had to lock my better version of this (https://quickish.site) behind Google OAuth to start. Like it or not, this type of stuff is going to be more popular than it was when Netlify / Heroku was doing it a decade ago.

asasidh2• 14 days ago

I think this is great. As usual the reaction from HN folks is on brand.

luciana1u• 14 days ago

Cloudflare Drop: finally, a domain registrar that understands the real use case is buying 47 domains at 3am and never deploying anything to any of them

bart3r• 14 days ago

So, if I need a company website, can i do the following:

- drop my html into Cloudflare drop

- setup a CNAME DNS for my domain to point at cloudflare URL

- profit

teddyh• 14 days ago

No, a CNAME can only point to a host name, not a URL. So Cloudflare’s servers would need to know about, and be configured to serve the correct web page for, the “real” name from your side.

mybbor• 14 days ago

I co-founded a page builder for WordPress. Myself and my co-founders would joke about the "friends and family" problem. When friends or family asked us to help build their website, we usually pointed them away from our tool+WordPress for something simpler. It's nice to see more options out there that reduce the friction from someone with an idea to something published and sharable.

Several weeks ago, I got frustrated hitting the free tier limits on Netlify, and was looking for a self-hosted solution for this problem. I built it using a DO VPS and Caddy in the backend. It's free on Github. I was able to get the whole thing set up in an hour or two with the help of an agent. Feel free to give it a spin.

https://github.com/RobbyMcCullough/honeydrop

jatins• 14 days ago

oh wow, a blast from the past. I remember a site called staticdrop or statichost like a decade ago, before vercel and everything that did the same thing

Good to see great ideas making a comeback

dowonseo• 14 days ago

I thought cf dns was down again

jaideepjagyasi• 14 days ago

shitty app, doesnt even exclude hidden folders

jsabess24• 14 days ago

Interesting

millsau• 14 days ago

What about the databases?

forgot_old_user• 14 days ago

what about them?

jcode1• 14 days ago

you cant drag and drop them not now

AlienRobot3• 14 days ago

Not even Sqlite?

karlkloss• 14 days ago

Does nobody read the fineprint?

By submitting, posting, or publishing your content, suggestions, enhancement requests, recommendations, feedback, information, data, or comments (“Content”) to any Website or Online Service, you are granting Cloudflare a perpetual, irrevocable, worldwide, non-exclusive, royalty-free right and license (with the right to sublicense) to use, incorporate, exploit, display, perform, reproduce, distribute, and prepare derivative works of your Content.

If you're ok with that, fine. But I'm not.

sevenzero2• 14 days ago

People are losing the ability to read. Lots of high schoolers are incapable of reading properly already. Attention spans shrink. We got some fun times ahead of us.

We need these legal texts as short form TikTok content I am afraid.

gmac2• 14 days ago

I have plenty of ability to read, but I never read these T&Cs because they’re usually dozens of pages long and life’s too short (or, if you prefer, the cost/benefit doesn’t support it). For consumers in Europe, at least, it’s usually safe to assume that anything too shitty is unenforceable, which helps.

nvme0n1p1• 14 days ago

Here's Cloudflare's T&C in comic form, for those with short attention spans.

https://nedroidcomics.tumblr.com/post/41879001445/the-intern...

9dev• 13 days ago

We need the polar opposite of that: Laws that ensure companies can’t put unreasonable clauses in fine print or long EULAs. That’s the way it works in many EU countries, and it’s a blessing.

Nobody except lawyers should have to bother with legalese.

vinothkumarnaga• 14 days ago

Thank you for highlighting this :)

thelibrarian• 14 days ago

If you don’t give them a license to display the works you give them to display, how can they legally display it?

dminik• 14 days ago

Perpetual and irrevocable? And with the right to modify, not just display?

You do not need all that.

gpt5• 14 days ago

Perhaps the same way that Github works when you host your web page there. I.e. A revocable, limited license, where you retain full ownership, and only grant them permission to host and serve your content + a limited set of other uses, and you dictate external licensing?

tritiy• 14 days ago

It states more than just display: 'to use, incorporate, exploit, display, perform, reproduce, distribute, and prepare derivative works'

simonjgreen• 14 days ago

Perpetual and irrevocable? Derivative works?

yread• 14 days ago

With the right to sublicense. They can literally sell your stuff

harrouet• 14 days ago

You beat me to it, I was going to post the same.

Clear red flag, only useful for whistleblowers.

aweb• 14 days ago

I'm always really doubtful this is applicable in the end, especially in the EU. You can't give up all your copyright like this

jwr2• 14 days ago

You can't give up the right to sign your work with your name. But you can definitely share rights to reproduce your work etc — although perhaps not in a clickable EULA.

tjoff• 14 days ago

Regardless, I'm not one to use or otherwise promote such shitty behavior.

Not sure why cloudflare seems to be in such good standing on hn.

jampekka• 14 days ago

Maybe, but you may not afford to find out.

josu• 14 days ago

It's a spectrum. I don't think that they will be able to sell t-shirts using a drawing you've uploaded. But it will probably allow them to defend themselves a bit better if they get sued for selling the data for LLM training.

pjc50• 14 days ago

This is true, but: you should see how many other cloud services have these terms. It's very insidious.

Razengan2• 14 days ago

They will train AI on your shit.

zeratax• 14 days ago

every website ever (except for github) has this exact same clause and everytime it's posted online, people freak out about it lol

jkman• 13 days ago

"everyone is doing it so stop complaining bro!!!!"

small_model• 14 days ago

No body is stealing your blog, relax its boiler plate

blueflow• 14 days ago

your content

Wouldn't it be fun to upload content of a big music label or smth like that?

throawayonthe• 13 days ago

By submitting, posting, and publishing your Content, you represent and warrant that your Content, does not: (i) infringe, violate, or misappropriate any third-party right, including any copyright, trademark, patent, trade secret, moral right, privacy right, right of publicity, or any other intellectual property or proprietary right; or (ii) slander, defame, or libel any third-party.

konnor• 13 days ago

Have you read the fine print for other platforms?

This is standard boilerplate for hosting companies so they don't run into issues putting your content on distributed CDNs, or if things are in their logs, etc.

https://vercel.com/legal/terms#feedback

https://fly.io/legal/terms-of-service/#2-ownership

https://www.netlify.com/legal/terms-of-use/#3-your-content

I want to be mad at Cloudflare as much as the next person, but Vercel, Netlify, Fly.io all have the same "legal-ese". I don't agree with it and it feels overly broad, but it seems hosting companies, at least US based ones, all have this same standard boilerplate around your content.

millerm2• 12 days ago

Sure, but right now we are talking about Cloudflare Drop. Whataboutism doesn't dismiss this specific issue. What we need then is someone that is good at collecting, digesting, and disseminating this information to the masses so that people can make better and informed decisions. I'm not good at much of anything these days, so unfortunately that isn't me as I have given up on just about everything. I think one of the real key areas is people seeing how their information is used. How much value it holds. Even if it's $0.50, if the companies had to pay this out to others each time they used the data then they couldn't afford it. That's the real issue at hand. People are working for free and making others powerful. They are unconsciously building a system where its main intent is to exploit the minds of the masses by weaponizing their behavior. It's all disgusting.

I hate AI with every fiber of my being. Yes, there are a few areas where it's beneficial, but in total it's a disaster for us. I don't need to get further into that discussion here as it's irrelevant to the initial topic.

Have a good day!

millerm2• 12 days ago

Wow, that's awful! Considering how incredibly easy they open anyone up to uploading sensitive content, it's ridiculously unsafe to have open like that. I only saw the home page, and clicked the buttons to see what they asked for. Absolutely not! I won't even attempt a simple hello.txt file. This is some dark pattern stuff. Plus AI, I reject it all.

You are now making me rethink using any of Cloudflare's tech. I need to go and read the fine print for their DNS (1.1.1.1). I also wonder what their Turnstile conditions are being imposed on all of us.

That sort of condition is disgusting.

rvba• 11 days ago

If someone drops the Taylor Swift discography there, does Cloudflare get righs to it too?

Is this some "smart" way to get the Books2 dataset and claim it was uploaded by its owners?

R_Spaghetti• 14 days ago

I dropped a static html page and all I got was Cloudflares well known 'Performing security verification' (and so did a Google pagespeed check).

mohsen1• 14 days ago

This is perfect for my Chrome Extension for recording sessions and capturing screenshots, audio narration and videos. The output is a zip file with everything so if user wants to share they can use this

https://github.com/mohsen1/session-recorder-chrome-extension

I built above chrome extension because anything in this area has been trying to monetize the solution. I wanted a free and open source version of this to exist.

monooso• 14 days ago

Really excited about the upcoming Cloudflare FTP.

dirkc• 14 days ago

Cloudflare seems to be an example of a company massively upping their output in the last year or so. And a lot of it seems AI driven.

I'm definitely keeping an eye on them to see if it works out for them. And if I will need to start routing around them to sleep easily at night.

iLoveOncall• 14 days ago

Some new slopware from CloudFlare. They've really lost the plot since they've gone all-in on AI development.

rldjbpin• 14 days ago

good tool for adding as a skill for someone making their own lovable clone!

VimEscapeArtist• 14 days ago

Cloudflare gives me mixed feelings. The services are good and well priced. What bothers me is that they've become infrastructure nobody opted into - you don't have an account, you just pass through their network on the way to a large share of what you visit. They terminate TLS, so it's plaintext on their side.

layer8• 14 days ago

It’s funny the EU hasn’t designated Cloudflare as a Gatekeeper yet.

mrngld• 14 days ago

The people who own the content you decide to visit opted into it though, and they're the ones paying for it, right? No one accidentally sets up a CDN. I'm struggling to imagine workable economics where we have the rich services that we have today on the web but individual users get to dictate to sites they visit what their tech stack needs to be in real time. Imagine visiting your banks website and they're using Cloudflare, and you decide nope, I want the data delivered by CloudFront. Then the next person 20ms after you decides they don't like either of those, they really want the world to burn so they demand Azure.

That at least would bring back local bank branches at least. And movie rentals by mail.

socketcluster• 14 days ago

This is neat. I've been dreaming of something like this to host frontends connected to my backend platform https://saasufy.com - I can get Claude Code to create a data-driven app entirely inside an index.html file on my computer's file system, then, because it's built with WebSockets, it doesn't have CORS limitations so I can open it directly from the file system by double-clicking it (served via file:// protocol) then, when I'm happy, I can drag that file and drop it on Cloudflare Drop and then it's deployed online. No text editor/IDE, no server needed in the entire process.

amelius• 13 days ago

I don't want to "drop".

I want to push. And then edit. Commit. And push again.

adamddev1• 13 days ago

I found https://surge.sh to be a nice version of this kind of thing. Just go into a folder and type `surge` and there you go.

szczepano• 13 days ago

Works only if there is index.html file present in zip https://drop-e25b96d5-5ed.elite-seed.workers.dev

dorongrinstein• 12 days ago

Looks like Cloudflare copied https://boomurl.com which I published a few weeks ago. It is possible they were working on it independently, but the timing is funny. Anyway. https://boomurl.com does a lot more and gives you a permanent URL for free.

Cloudflare Drop

Related Stories