Today we are releasing Cloudflare OS, a chatbot with connectors, just like every other tech company is doing.
Except actually, it's different. This is a remake of Sandstorm[.]io, my startup from 10 years ago, except this time built on Cloudflare Workers (the platform I've spent the last 9 years building) and deeply leveraging AI. This is more or less the culmination of my secret 10-year master plan.
This is a full-on personal app vibe coding platform, in which the sandbox is so secure that you can pretty much go wild -- the AI cannot introduce a significant security bug. We believe a company's security team can feel comfortable giving non-technical users permission to vibe code and then sleep soundly at night.
How is that possible? It's the Sandstorm security model, revisited. A "Gadget" is the same thing as a Sandstorm "Grain": a fine-grained app instance. For example, if you have a document editor app, each document runs as a separate instance of the app, in a separate sandbox (one "Gadget").
This means two things, both of which I think are Big Deals:
1. The platform can manage all access control, by controlling who can access the Gadget at all. There is no way the Gadget can accidentally leak itself to an attacker -- even an attacker who has access to other Gadgets based on the same app.
2. Since everyone is running their own copy of the code, everyone can freely *modify* their copy of the code.
Think about #2 a bit more.
What if, when you wanted a new feature in the software you are using, you could just prompt your agent to add it?
This doesn't work in the cloud Software-as-a-Service model, because you are not running your own copy of the app.
Sandstorm tried to change that 10 years ago, but the world wasn't ready, because not enough people had the skills or patience to actually modify their software. AI has changed that. Now you just ask the agent -- the same agent that you are using to help you interact with the Gadget can also modify the code of the Gadget.
And it is so fun.
https://t.co/qzwdrAQhtK
Saddened to announce the passing of Dory Funk, Jr.
From the Double Cross Ranch to the @WWE Hall of Fame, Dory’s style inspired countless performers in our industry. Whether it was at WrestleMania 2, WCW, ECW, or the dozens of NWA-affiliated promotions, his travels across North America and Asia were a part of the early blueprint that helped build this business into a global phenomena. A hard-nosed and fierce competitor, his rugged in-ring style was only eclipsed by the decades he spent training athletes to perform in the squared circle he loved so much. My thoughts and those of the entire @WWE Universe are with his loved ones during this difficult time.
‼️ BREAKING: An active npm supply chain attack has compromised at least 868 packages carrying over 2 billion monthly installs with a credential-stealing worm. Shai-Hulud is back.
It started with the compromise of the GitHub account of the maintainer behind keyv, a library with roughly 127 million weekly npm downloads.
A preinstall hook fires on npm install and drops a stealer that sweeps npm, GitHub, AWS, Kubernetes and Vault secrets, and then spreads to more maintainers.
BBC literally built the greatest sound library on the internet.
It is called BBC Sound Effects, and it gives you access to more than 30,000 recordings from around the world.
Just search any word, and it instantly finds matching sounds.
You can filter them by category, duration, and even the continent where the sound was recorded.
Every sound can be previewed inside your browser, downloaded, or added to the built-in mixer so you can layer multiple recordings together.
And the archive gets insanely specific.
You can find creaking ships, old typewriters, jungle ambience, distant church congregations, and even someone vigorously washing their hands.
There is a good chance a BBC engineer recorded the exact sound you need decades before you were born.
https://t.co/vdOBewxyg3
Doomsday arrives December 18th.
Experience Avengers: Doomsday on bigger, brighter, & more immersive screens. Tickets are now on sale exclusively for Infinity Vision certified theaters: https://t.co/GfzAkVCjDg