8 ms·
Cloudflare Drop
- R_Spaghetti 2mo agoI dropped a static html page and all I got was Cloudflares well known 'Performing security verification' (and so did a Google pagespeed check).
- grepsedawk 2mo agoThis is pretty cool, thanks for sharing. It really enables less tech savvy users. It would really enable frontpage/dreamworks-like flows for some people
- millsau 2mo agoWhat about the databases?
- forgot_old_user 2mo agowhat about them?
- jcode1 2mo agoyou cant drag and drop them not now
- AlienRobot 2mo agoNot even Sqlite?
- ChrisArchitect 2mo ago> No account needed. Deployment is active for 60 minutes, then expires unless you claim it. (https://x.com/BraydenWilmoth/status/2074894829616509358 https://x.com/BraydenWilmoth/status/2074894829616509358)
- simonw 2mo agoSame deal as their Cloudflare Workers previews from a few weeks ago: https://blog.cloudflare.com/temporary-accounts/ https://blog.cloudflare.com/temporary-accounts/
- Bender 2mo agoThere must be some really good protection on this. If I enabled such a thing on any of my servers it would be full of warez, porn, malware, CSAM and who knows what else within minutes. Curious how they manage to keep it clean.
- DakotaR 2mo agoYeah, I was going to start a file drop site like 0x until realizing what it'd be used for
- mattlondon 2mo agoOnly live for an hour. But that won't stop people doing bad stuff for an hour I guess. Vibe code up some on-demand thing that you ping...
- Y-bar 2mo agoOne hour is great for spearphishing attacks, once the victim has been infected their IT department will have no trace of the source.
- hoppp 2mo agoThey already allow hosting static websites so I think the same guardrails are implemented.
- Bender 2mo agoI've never used CF so I could be ignorant in this matter. I assumed perhaps incorrectly that people had to verify their email address and delegate their domain(s) to CF including setting the glue records in the TLD servers meaning there is possibly a financial trail somewhere probably in the DNS registrars and perhaps a mail provider, whereas this is just drag-and-drop with no money trail. I have no idea what guardrails they have in place in the background that blocks malware, CSAM, warez and such on their free accounts.
- hoppp 2mo ago
- ChrisArchitect 2mo agoExtension of the temporary accounts they needed to enable for Agents https://blog.cloudflare.com/temporary-accounts/ https://blog.cloudflare.com/temporary-accounts/
- smalltorch 2mo agoHmm, that's fun and useful. Here is snake game for 60 minutes. https://drop-e7e6d363-601.important-seat.workers.dev https://drop-e7e6d363-601.important-seat.workers.dev
- copper-float 2mo agoWhat an honor. I got a high score of seven.
- tengbretson 2mo agoYour code appears to have a bug where if the arrow keys trigger a change of direction twice in a single frame interval, it can mistakenly send the snake back on itself.
- Self-Perfection 2mo ago$ curl -I https://drop-e7e6d363-601.important-seat.workers.dev/ https://drop-e7e6d363-601.important-seat.workers.dev/ curl: (7) Failed to connect to drop-e7e6d363-601.important-seat.workers.dev port 443 after 47 ms: Couldn't connect to server Tried from two hosts, different countries.
- tmp10423288442 2mo agoYes, it's expired I think - it only lasts for 1 hour
- janandonly 2mo agoMakes sense. It plays nicely with the vibe code kids who don’t know how to do GitHub or don’t know to ask their LLM about it.
- navigate8310 2mo agoFrom FTP to CI/CD to drag and drop, society is going backwards
- _pdp_ 2mo agoIt is cool to see not sure why you would use it. Also it seems to me that this is a good way to exfiltrate data, rubber stamped by cloudflare themselves.
- gruez 2mo agoIsn't there already thousands of ways for exfiltrating data that must be whitelisted by corporate firewalls? office365/gsuite, for instance. Not to mention the classics like dns.
- sgt 2mo agoTried uploading a ZIP and got: "Something went wrong An unexpected error occurred. Please try again or contact support."
- throwaway81523 2mo agoWait, my first impression was that it points a local browser to your local browser. Now it looks like it uploads your folder to Cloudflare and temporarily serves it over the web. But is that different from what we used to do with FTP? Are there any databases or anything like basic PHP hosts supply? It's just static sites? Is this a product or what? What's the purpose? Is there an API?
- joenot443 2mo agoA minute ago I had an HTML doc I wanted to share with a PM. It was a Claude prepared demo of a hypothetical feature. Lots of screenshots. I ended up just embedding them directly in the HTML as base64 and sending him a 15mb file, but hypothetically this would have been a nice solution instead.
- throwaway81523 2mo agoYou could just upload to a personal or other website? I sometimes do that. Is there any security or privacy (e.g. password protection) for this Cloudflare Drop site?
- pantelisk 2mo agoThere are also solutions for sharing your homelab with others (basically tunneling from your machine->server (internet accessible) <-> client. Though, if your machine would go to sleep that whole chain would fall apart. A few good automatic solutions out there that solve the problem (no "just replace dropbox with ftp" type of argument). However, I see the appeal of this. Kind of surprised it hasn't happened yet to be honest.
- inigyou 2mo agoSSH remote port forwarding. ssh -R 0.0.0.0:80:127.0.0.1:80 Requires the server's sshd config to have GatewayPorts yes, or the server will bind to 127.0.0.1 instead
- qingcharles 2mo ago
- andrethegiant 2mo agoNetlify made this 10 years ago... they even copied the name! https://app.netlify.com/drop https://app.netlify.com/drop
- brightball 2mo agoThere are numerous products like this out there. Isn’t that where Dropbox got its name in the first place?
- forgotusername6 2mo agoA drop box is a real physical thing, where you drop items for other people to collect.
- latchkey 2mo agoDon't forget Digital Ocean Droplets.
- frankdenbow 2mo agoOr Drop.io which got bought by Meta
- neom 2mo agoFWIW, We called them droplets because drop of water in the (Digital)Ocean.
- scubbo 2mo agoI was always under the impression that that was referencing the notion from spycraft.
- hoherd 2mo agoI thought it was a reference to the Mac OS X `~/Public/Drop Box` directory, which was a write-only place for people to send files to your user, which has been around since the first OS X beta came out in 2000.
- Cider9986 2mo ago>Something went wrong An unexpected error occurred. Please try again or contact support. I have a few qualms with this app.
- collabs 2mo agoCongratulations on launching! I tried uploading a git repository that I have previously successfully published on Github pages. This is a "no build" website I have built with the help of Claude. It should just work but I keep getting an error. Who can I reach out to give them steps to reproduce? The website repository is public and I feel like anyone at Cloudflare who wants to reproduce my problem can quite literally clone my repo and upload it to cloudflare drop. Please drop your cloudflare email address and I will reach out to you with my repository information.
- turtlebits 2mo agoOr you could do some of your own troubleshooting? Uploading a git repo is different than uploading a zipped/folder, especially if your index.htm/l isn't at the root.
- collabs 2mo agoThank you for the reply. Index dot html is already at the root of the folder and it deploys just fine on GitHub pages.
- aetherspawn 2mo agoHey stranger, welcome to 2026. It’s somewhat different to what you’re used to in 2035. We do things differently here.
- collabs 2mo agoI copied the folder to a new folder without the `.git` folder and that deployed just fine. Thank you to everyone who helped me.
- altairprime 2mo agoHah! This is exactly how I’m serving the vestigial remnant of my blogging in the early 2000s from a ZIP-backed Cloudflare Worker today. Should I rebuild my site with Drop+Claim or is it fine as-is? I kind of feel like ‘if what I have works, don’t change it’ is the best path.
- heipei 2mo agoCloudflare is really good at launching features that facility low-friction deployment of malicious content (such as phishing) on the Internet, piggybacking on their hosting reputation and the fact that you can't easily block their ASN or domains.
- Waterluvian 2mo agoBe the change you want to see to make the world of your dreams. And then sell its denizens malice protection services.
- simultsop 2mo agoI don't know your experience. Once I was toying around and doing a basic auth with registration and so. The weekend was over and couldn't get back to that couple of months. The worker was quarantined and marked as phishing automatically. So I believe they have something in place to prevent those you complain.
- jszymborski 2mo agoYour anecdote just illustrates that their system detects legit uses as abuses, not that they have a system that effectively detects abuses.
- simultsop 2mo agoBut it is not that they have nothing. It was my laziness that I could not setup dev prod env's. When you develop on preview, I don't think they will do much.
- cute_boi 2mo agoCloudflare is also like a Chinese copycat machine. They mostly copy some successful project and sell it at cheap price.
- system2 2mo agoIt would be nice if we could see some information such as file size limitations, demos, link structure, management, etc. Am I expected to upload a random HTML file and see how it works?
- Fergusonb 2mo agoYep, I chucked it a file on my desktop: index.html present Max individual file size 25MB Total file count <2000 Total size less than 100MB
- petee 2mo agoYeah I'm very lost on what this is supposed to do -- "Summon your site" is quite vague. "see it live", like a demo? or is this actually published somewhere? Is it forever? Desktop mode doesn't show any more information either
- rickcarlino 2mo agoDesktop operating systems should be able to run zipped web apps the way Electron apps run today. It ought to just be part of the OS.
- TZubiri 2mo agoAnd if there's a form or something with a backend? Just break?
- ubertaco 2mo agoAdobe Air, for the obscure nostalgia bomb
- rickcarlino 2mo agoI was going to mention Microsoft Active Desktop in the original comment, but I didn’t want HN to know how old I am.
- dghlsakjg 2mo agoUnzip it. Double click the html file. The OS will run the web app using a browser that is just part of the OS.
- rickcarlino 2mo agoYou have clearly never actually tried that.
- deleted 2mo ago[deleted]
- rifty 2mo agoI don't know about Windows, but on macOS you can. If you wanted to try yourself you could use SingleFile to export a webpage as a .html zip file which you could then just 'open' into the web browser. For a web app, you might have to unzip it and launch the .html inside. CyberChef for example does offer a downloadable copy of its web app instructing you do just that. [1]: https://gchq.github.io/CyberChef/ https://gchq.github.io/CyberChef/
- ricardobeat 2mo agoI remember doing this in 2006. FTP. Good times.
- barnacs 2mo agoI remember making a Qt app for a friend that would upload dropped files via ftp and copy the link to the clipboard. Good old days!
- sleepynoodle 2mo agoThis is so cool.
- S0y 2mo agoCloudflare has the astonishing ability to make me hate them more as a company every new feature they launch.
- vevoe 2mo agowhy?
- S0y 2mo agoEvery new feature they've launched recently can be used to make the web more dangerous for everyone except those who use Cloudflare.
- denismenace 2mo agoHow would this make the web more dangerous? Its just static file hosting. Already wildly available!
- latchkey 2mo agophishing
- TZubiri 2mo agoThe argument would be that they sell the kevlar and the guns Kevlar: https://developers.cloudflare.com/bots/ https://developers.cloudflare.com/bots/ https://www.cloudflare.com/products/turnstile/ https://www.cloudflare.com/products/turnstile/ Guns: https://support.cloudflarewarp.com/ https://support.cloudflarewarp.com/ To be fair, CF mainly develops defensive cybersecurity products, the extent to which their tools might be used maliciously is pretty on par with other regular tools. But, it just has bad optics and potential COI/Racketeering when CF is at both sides of the counter. To be explicit, in case it isn't obvious,Cloudflare emerged as a DDoS protection company, detecting attacks from distributed sources is part of the raison d'etre, and domains and IP addresses are a key part of that infrastructure. By subletting their own IP addresses for navigation with warp, and their own domains for hosting of webcontent with subdomain hosting, they are providing pooled anonimity for their customers, which is precisely what makes it very hard for defenders on the other side to implement foundational security measures like IP bans, or IP block bans, or domain bans, or Whois/RDAP domain analysis.
- toomuchtodo 2mo agoCloudflare folks: Please consider supporting WARC archives for deployment.
- hoppp 2mo agoIs that something you use often?
- toomuchtodo 2mo agoWhen I want to serve an archived website in read only mode, yes. https://news.ycombinator.com/item?id=48808481 https://news.ycombinator.com/item?id=48808481 https://github.com/SpeedcubeDE/speedcube.de-forum-archive https://github.com/SpeedcubeDE/speedcube.de-forum-archive is an example use case. Sort of, but not quite, like cherry-picking files out of an archive blob in S3. (I’ll see if Claude and I can come up with a WARC archive->zip file converter too)
- jonluca 2mo agoWow the people in this thread are a huge bummer. This is much cooler and I doubt this is a real safety issue. You can already sign up for a free cloudflare account and deploy it for free, on your own, on a free workers.dev domain. The friction removal here isn't going to meaningfully change the security / amount of malicious content.
- swingandamiss 2mo ago[flagged]
- goshx 2mo agoYou must be new here :)
- swingandamiss 2mo agoNo, I just created a new alt account. I have a year 1 account as my main.
- j-bos 2mo agothat's new :)
- r3trohack3r 2mo agoI think maybe GP means they have an account that was created in the first year of the site, not a 1 year old account
- godelski 2mo agoEven you're relatively new. There definitely was a shift as AI took off Also, they said "year 1" not "1 year old"
- rob 2mo agoSure ya do buddy, me too.
- djfobbz 2mo agoYet I can't drag and drop a plain old HTML file without putting it in a folder or a ZIP file first.
- spartanatreyu 2mo agoYou can, the file just has to be named "index.html".
- nalekberov 2mo agoThe internet will soon be flooded with even more scam landing pages.
- cute_boi 2mo agoAnd you should be using cloudflare to protect yourself...
- worldthruword 2mo agoIs cloudflare a religion now? Identify/Provide/Tell people that normal life is a problem to be solved and then sell the solution.
- BoppreH 2mo agoDropped a folder with a small HTML project, and after 20 seconds got "Something went wrong. An unexpected error occurred. Please try again or contact support.". Note how the error has zero information. Looking in the network tab, a POST request to /upload returned 403 and an HTML page starting with "Sorry, you have been blocked", and to "email the site owner to let them know you were blocked". I'm very tired of this adversarial approach to software coupled with vague errors. EDIT: it was the file './git/hooks/fsmonitor-watchman.sample' created by default on git init. Maybe because it's Perl. Worse-than-useless "please try again" and "you've been blocked" for committing the sin of uploading a folder that's a git repository. Sigh...
- deleted 2mo ago[deleted]
- alberth 2mo agoReminds me of web development in the 1990s. I honestly miss those days of deployment simplicity.
- gesis 2mo agoFTPing files to `~/public_html` was the best... Miss those days.
- hoppp 2mo agoIt still works...
- 3form 2mo agoIt's not the ability that's missing; it's those days.
- bigbuppo 2mo agoYeah, these days if you aren't treating even the smallest of small projects that do something like "query database spit out report" as if they are major IT infrstructure projects, complete with designers, UX specialists, and accessbility experts that never talked to a disabled person to find out what they actually need, spin up 375 ec2 instances, use 19 different database systems, and send the logs to a third party, then you're literally the worst person possible, or so I've been told. It's like, my dude last week this was an excel spreadsheet.
- anonymousiam 2mo agoOdds are that this new feature will not suffer the same outcome as Megaupload, because of Cloudflare's close relationship with the USG.
- bossyTeacher 2mo agoIt could be fun to use a temporary Mediafire/Rapidshare/Megaupload service. Especially if you need to transfer something between an Android and an iPhone.
- fragmede 2mo agoKDEconnect will do that locally.
- nickgray 2mo agoThis is cool and I like it.
- ed_mercer 2mo agoCool, just 20 years too late.
- hoppp 2mo agoI can see this interface is for vibe coders haha I have been hosting static websites with cloudflare for years and finding how to do it on the UI is getting harder as they add more things and reoranize.
- jjcm 2mo agoCloudflare is obviously more trustworthy/robust here, but if name of the url matters to you, my site non.io [1] allows for named uploads, ie https://html.non.io/solara https://html.non.io/solara [2] Somewhat useful if you want a url that isn't a hash / is more self descriptive. [1] Launch discussion: https://news.ycombinator.com/item?id=36296695 https://news.ycombinator.com/item?id=36296695 [2] This was a demo of the output of a design tool I'm working on, only the home/accommodations/about pages work.
- steve_adams_86 2mo agoCool, it worked! https://drop-1e1a536f-10d.honeysuckle-gull.workers.dev/ https://drop-1e1a536f-10d.honeysuckle-gull.workers.dev/ It's minesweeper, but the logic uses xstate/store. The link in the bottom is broken; it's supposed to go to `building-minesweeper-with-xstate-store.html` I have no need for this but I love that my friends could vibe out a website, drop it here, claim it, and host it for pennies. This is great. "Your site is reachable within ~32ms of 95% of the world’s Internet-connected population" isn't new but it's cool to see that achieved so trivially.
- deleted 2mo ago[deleted]
- arm32 2mo agoThis definitely won't get used to host unlimited phishing sites. /s
- dmd 2mo agoAll I ever get is "Something went wrong An unexpected error occurred. Please try again or contact support."
- jeffgreco 2mo agoWhat is this for?
- neom 2mo agoI have hosted my personal site on Netlify for many many years because it's just basic js/html/css, I picked Netlify because I can just updated the index.html in the "website" folder on my desktop and literally drag it to Netlify to update it, saves a lot of time/thinking if you need something simple online quickly to show someone etc. I presume this is a similar idea.
- AlienRobot 2mo agoServerlessless web apps.
- xyst 2mo agogeocities/angelfire but for Gen Z and A
- deeprack4sure 2mo agoLook. Guys (?) If cloudflare wants to be the next "Megaupload" what business is it of yours? There is a guy named kim DOT com. That is actually fucking cool. Whether or not he himself is actually cool. Or in prison.
- altbdoor 2mo agoThey had a short blog post about this: https://developers.cloudflare.com/changelog/post/2026-07-08-cloudflare-drag-and-drop/ https://developers.cloudflare.com/changelog/post/2026-07-08-...
- anshumankmr 2mo agoJAMstack for the rest of us I suppose.
- PaybackTony 2mo agoThere is a reason I had to lock my better version of this (https://quickish.site https://quickish.site) behind Google OAuth to start. Like it or not, this type of stuff is going to be more popular than it was when Netlify / Heroku was doing it a decade ago.
- rjnz199 2mo ago[flagged]
- amaldavid 2mo agoI had built something similar over cloudflare and primarily agent first you can check it out here: https://github.com/Amal-David/pagecast https://github.com/Amal-David/pagecast
- luciana1u 2mo ago[flagged]
- asasidh 2mo agoI think this is great. As usual the reaction from HN folks is on brand.
- bart3r 2mo agoSo, if I need a company website, can i do the following: - drop my html into Cloudflare drop - setup a CNAME DNS for my domain to point at cloudflare URL - profit ?
- teddyh 2mo agoNo, a CNAME can only point to a host name, not a URL. So Cloudflare’s servers would need to know about, and be configured to serve the correct web page for, the “real” name from your side.
- mybbor 2mo agoI co-founded a page builder for WordPress. Myself and my co-founders would joke about the "friends and family" problem. When friends or family asked us to help build their website, we usually pointed them away from our tool+WordPress for something simpler. It's nice to see more options out there that reduce the friction from someone with an idea to something published and sharable. Several weeks ago, I got frustrated hitting the free tier limits on Netlify, and was looking for a self-hosted solution for this problem. I built it using a DO VPS and Caddy in the backend. It's free on Github. I was able to get the whole thing set up in an hour or two with the help of an agent. Feel free to give it a spin. https://github.com/RobbyMcCullough/honeydrop https://github.com/RobbyMcCullough/honeydrop
- jatins 2mo agooh wow, a blast from the past. I remember a site called staticdrop or statichost like a decade ago, before vercel and everything that did the same thing Good to see great ideas making a comeback
- dowonseo 2mo agoI thought cf dns was down again
- jaideepjagyasi 2mo agoshitty app, doesnt even exclude hidden folders
- jsabess24 2mo agoInteresting
- deleted 2mo ago[deleted]
- karlkloss 2mo agoDoes nobody read the fineprint? By submitting, posting, or publishing your content, suggestions, enhancement requests, recommendations, feedback, information, data, or comments (“Content”) to any Website or Online Service, you are granting Cloudflare a perpetual, irrevocable, worldwide, non-exclusive, royalty-free right and license (with the right to sublicense) to use, incorporate, exploit, display, perform, reproduce, distribute, and prepare derivative works of your Content. If you're ok with that, fine. But I'm not.
- sevenzero 2mo agoPeople are losing the ability to read. Lots of high schoolers are incapable of reading properly already. Attention spans shrink. We got some fun times ahead of us. We need these legal texts as short form TikTok content I am afraid.
- gmac 2mo agoI have plenty of ability to read, but I never read these T&Cs because they’re usually dozens of pages long and life’s too short (or, if you prefer, the cost/benefit doesn’t support it). For consumers in Europe, at least, it’s usually safe to assume that anything too shitty is unenforceable, which helps.
- bigfudge 2mo agoBeing “unenforceable” doesn’t stop them making your life a misery in the process, ruining your credit rating etc.
- hyperman1 2mo agoAs an EUian,I've never given one care about my credit rating. I don't even know if I have one. They can cause a long drawn out court battle, and abuse your data. Noyb is the real-world example here. Most companies depend on not being sued, and will fold if a regulater sends them notice.
- 2mo ago
- mohsen1 2mo agoThis is perfect for my Chrome Extension for recording sessions and capturing screenshots, audio narration and videos. The output is a zip file with everything so if user wants to share they can use this https://github.com/mohsen1/session-recorder-chrome-extension https://github.com/mohsen1/session-recorder-chrome-extension I built above chrome extension because anything in this area has been trying to monetize the solution. I wanted a free and open source version of this to exist.
- AndrianV 2mo ago[dead]
- monooso 2mo agoReally excited about the upcoming Cloudflare FTP.
- dirkc 2mo agoCloudflare seems to be an example of a company massively upping their output in the last year or so. And a lot of it seems AI driven. I'm definitely keeping an eye on them to see if it works out for them. And if I will need to start routing around them to sleep easily at night.
- deleted 2mo ago[deleted]
- iLoveOncall 2mo agoSome new slopware from CloudFlare. They've really lost the plot since they've gone all-in on AI development.
- deleted 2mo ago[deleted]
- rldjbpin 2mo agogood tool for adding as a skill for someone making their own lovable clone!
- VimEscapeArtist 2mo agoCloudflare gives me mixed feelings. The services are good and well priced. What bothers me is that they've become infrastructure nobody opted into - you don't have an account, you just pass through their network on the way to a large share of what you visit. They terminate TLS, so it's plaintext on their side.
- layer8 2mo agoIt’s funny the EU hasn’t designated Cloudflare as a Gatekeeper yet.
- mrngld 2mo agoThe people who own the content you decide to visit opted into it though, and they're the ones paying for it, right? No one accidentally sets up a CDN. I'm struggling to imagine workable economics where we have the rich services that we have today on the web but individual users get to dictate to sites they visit what their tech stack needs to be in real time. Imagine visiting your banks website and they're using Cloudflare, and you decide nope, I want the data delivered by CloudFront. Then the next person 20ms after you decides they don't like either of those, they really want the world to burn so they demand Azure. That at least would bring back local bank branches at least. And movie rentals by mail.
- socketcluster 2mo agoThis is neat. I've been dreaming of something like this to host frontends connected to my backend platform https://saasufy.com https://saasufy.com - I can get Claude Code to create a data-driven app entirely inside an index.html file on my computer's file system, then, because it's built with WebSockets, it doesn't have CORS limitations so I can open it directly from the file system by double-clicking it (served via file:// protocol) then, when I'm happy, I can drag that file and drop it on Cloudflare Drop and then it's deployed online. No text editor/IDE, no server needed in the entire process.
- amelius 2mo agoI don't want to "drop". I want to push. And then edit. Commit. And push again.
- adamddev1 2mo agoI found https://surge.sh https://surge.sh to be a nice version of this kind of thing. Just go into a folder and type `surge` and there you go.
- stanleychink 2mo ago[dead]
- Jerrylee_maker 2mo ago[flagged]
- szczepano 2mo agoWorks only if there is index.html file present in zip https://drop-e25b96d5-5ed.elite-seed.workers.dev https://drop-e25b96d5-5ed.elite-seed.workers.dev
- dorongrinstein 2mo agoLooks like Cloudflare copied https://boomurl.com https://boomurl.com which I published a few weeks ago. It is possible they were working on it independently, but the timing is funny. Anyway. https://boomurl.com https://boomurl.com does a lot more and gives you a permanent URL for free.