Hacker News

New stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. lm-detector: Model fingerprint detection on Web and CLI(github.com/ikaleio)
    discuss
  2. SnakeCharmer: Fuzzing Harness Generation for Pure and Hybrid Python Libraries [pdf](utah.edu)
    discuss
  3. Making my vibe-coded app best as possible (I am perfectionist), umm for 0 users
    discuss
  4. JEV Engineering for Coding Agents(drive.google.com)
    discuss
  5. Show HN: An open-source manufacturing ERP/MES/QMS(carbon.ms)
    discuss
  6. Hard Startups (2020)(samaltman.com)
    discuss
  7. OnPanda – Open-source token inspection&data annotation tool from Step 5 Preview(twitter.com/stepfun_ai)
    discuss
  8. Feds Target AI Critics as "Foreign Agents"(kenklippenstein.com)
    discuss
  9. Arumayi(arumayi.com)
    discuss
  10. Calculating atmospheric drag on satellites for a Cubesat [pdf](osti.gov)
    discuss
  11. ChatGPT DIL (Declarative Interface Language)(twitter.com/oranlooney)
    discuss
  12. OpenAI model breaches Australian government websites(politico.com)
    discuss
  13. Show HN: An on-device OSS alternative to Wispr Flow(frigade.com)
    discuss
  14. Drawing a portrait with the traveling salesman problem by Opus 5.5(echohive.ai)
    discuss
  15. Holistic design systems for the AI coding era(numeric.substack.com)
    discuss
  16. RatHat Malware Can Hijack Your Android by Disguising Itself as a Legitimate App(cnet.com)
    discuss
  17. AI-CAD: An OSS Multi-Agent Harness for Mech. Eng. CAD(github.com/ai-cad-labs)
    discuss
  18. The iPhone 4 'Antennagate' Press Conference Q&A – Finally(daringfireball.net)
    1comments
  19. Sol 6 and Opus 5.5 compared on an agentic CAD harness(partforge.ai)
    discuss
  20. From biologists, math could learn to live with AI(terrytao.wordpress.com)
    discuss
  21. Do Social Norms Substitute for Enforcement? [pdf](nber.org)
    discuss
  22. Trying to Observe Convection Plumes (and other chaos things)(chillphysicsenjoyer.substack.com)
    discuss
  23. Human Glitch – twenty small web experiences, each one starts free(humanglitch.ai)
    discuss
  24. iPhone 18 Pro Max SSD drops lower than hard drive at 1.1 MBs during heavy writes(tomshardware.com)
    discuss
  25. Google says its AI model gained unauthorized access to three outside systems(nbcnews.com)
    discuss
  26. Shipping local speech-to-text inside a Tauri app(writewithset.com)
    discuss
  27. Libnix: Nix as a Backend to Cargo(github.com/nixcloud)
    discuss
  28. The one-person unicorn: building a company alone in two days with Claude(leaveyouragent.com)
    discuss
  29. Gemini 3.8 TTS Playground(simonwillison.net)
    discuss
  30. Jev deserves hype but not the type its getting(github.com/yididev)
    1comments

We just shipped support for the ugliest part of HTTP: Vary

54 pointsby 2h agoblog.cloudflare.com
7 comments
1h agoHN ↗

I've been wanting this from Cloudflare for years.

The classic problem here is if you do that thing where user agents that send "accept: text/html" get HTML, while user agents that don't get JSON or some other format.

This used to be impossible to deploy behind Cloudflare caching, because they ignored the Vary header on anything other than images - so you risked caching the JSON version and then serving it up to someone who was expecting HTML.

(Independent of the Cloudflare feature I ended up deciding never to use that pattern, because I prefer having URL that predictably returns HTML or JSON - I add a .json suffix to my apps to serve JSON instead.)

1h agoHN ↗

Nice to see. I’ve used vary to quite a bit of success on CloudFront back in the day.

I actually assumed when I started using Cloudflare that it did have vary support and it led to a serious bug in my sass app at the time.

1h agoHN ↗

I honestly thought they would never ship this. Holy hell this has been a long time coming.

Actual real content negotiation in 2026. Never thought I'd live to see the day.

1h agoHN ↗

"If the origin response does not include a Vary header, Cloudflare caches the response normally"[1]

"If one response omits it, Cloudflare could cache that response without the variance needed to keep it isolated."[2]

Will that non-Vary cache object front-run any Vary-segmented cache objects?

If so, probably worth adding a snippet rule to ensure every response has a Vary header?

1: https://developers.cloudflare.com/cache/concepts/vary/#how-v...

2: https://blog.cloudflare.com/vary-support/#how-a-response-mov...

28m agoHN ↗

finally. now maybe they'll have time to implement a working unsubscribe on their marketing emails.

25m agoHN ↗

Turns out their marketing can get to you through HN posts…

10m agoHN ↗

I had not actually realized what a mess Vary is.

Wow, sometimes I think it's amazing the web works at all!