Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

  • Hacker News
  • A few months back I was building a product and wanted to add domains. My first choice would have been to use Cloudflare as the registrar, but they didn't support buying domains via the API.

    I wonder if this means I can now also buy a domain via the API?

    *update* - seems so, but with some limitations: https://developers.cloudflare.com/registrar/registrar-api/#b...

  • One of the well-kept secrets about Cloudflare is:

    You can have a zero-cost inbox.

    Earlier, I was using Zoho and FastMail (however you dice it, it will use some money, $12 a year for Zoho and $7 per month for FastMail? Even then, perhaps you only get one mailbox and some aliases)

    but with this method, I get unlimited aliases, domains, and mailboxes:

    Now, I wrote a script which captures the email and saves attachments to S3 using the HTTP API (why S3 and not R2? Because Cloudflare wanted a credit card, and I was too lazy to add it there lol) and emails to D1.

    This uses an email -> webworker workflow.

    I use an API to fetch my emails.

    This means all my inbound emails are now handled by Cloudflare, and I can easily use all of it with zero payment.

    The best part is this supports tokenised emails, so I can provide a unique email address to each service I sign up for.

    I am using SES as the sender. I’ve set up one script which auto-sets up any domain in SES and auto-verifies the sender email.

    The funniest thing is I am receiving zero spam? As if other email providers sell my email?

  • Industry really went from "prove you are not a robot", to "but also if you are, this way please"
    by dgan
  • This feels less like a major AI milestone and more like "the raccoons learned how to open the cooler.”

    Agents can now participate in the oldest internet tradition: impulsively creating weird little websites at 2 am with unjustified confidence. But with no alcohol involved, which removes 93.74% of the impressiveness.

    In a sense, AI has finally progressed to the point where Drew Curtis started fark.com, and I'm hesitant to label that a 'milestone'.

  • That is ironic. Four years ago, cloudflare didn’t let human me have an account / buy domains because I signed up, never used a single service but didn’t respond to a request to verify my drivers license

    > This account is in violation of Cloudflare's Terms of Service. Specifically fraud. The suspension is permanent.

    (Yes that’s really it. Sincerely. No “but I also abused X”)

  • The agent starts a phone call, listens to the person on the line, analyzes which fraud bucket they fall into, and start the process.

    While they are on the phone with the agent, it buys a domain relevant to the victim, the agent codes and deploy the website specially catered to them and the fraud bucket. Collect payment, destroy the website, redirect the domain to google.com. no need to start a new call because you had several agents committing the same fraud in parallel.

    It can also be used to make art.

  • The reason this blog post does not come with any concrete examples how to use this enablement for useful and constructive things tells you something very important - it is a toy and they do not know who and how they will use it.

    It is cool feature but to what end? Buying a domain is not something you have to do daily to require any kind of automation.

    I am also not sure who Stripe Atlas for. I am genuinely confused. It is definitely not something a developer will use.

    I understand that you can bootstrap a number of systems but that is like half-hour of work and arguably it is probably a good idea to do it manually to make sure you have strong foundations.

    I've have personally never seen a good example where a cross vendor account provisioning actually working. For example, Fly.io used to provision Sentry accounts automatically which you could not access in any other way but through Fly.io. I mean the Sentry account was effectively locked to a project that you cannot transfer - hijacking the actual global alias as well. Vercel did something similar with PostgreSQL via Neon and Redis via Upstash resulting in painful migration processes.

    I can imagine ending in some kind of deadlock between services due to security hence why the 30 minutes initial setup is kind of time well spent to avoid future issues.

    Maybe it's me.

Explore Birbla archives