News for hackers. Stuff that matters.

A comment on Deno Is Joining Cloudflare. Parent comment

Re:Deno Is Joining Cloudflare by jamesrr39 on Friday October 09, 2026 @11:32AM (#50021997)
For me Deno has a really nice security posture, the permissions model is just something I haven't seen in from other runtimes (JS or otherwise). There were other nice features (native typescript support, compilation to a standalone binary), but the permissions model was just unique.

https://docs.deno.com/runtime/fundamentals/security/

[ Parent | on HN ]
Re:Deno Is Joining Cloudflare by flanbiscuit on Friday October 09, 2026 @12:07PM (#50022568)
Which Node now has:

https://nodejs.org/api/permissions.html - since v20 - Apr 17, 2023

https://nodejs.org/learn/typescript/run-natively - stable and without a flag since v22.18.0 - which sometime after Apr 24, 2024 which was the v22.0.0 release

https://nodejs.org/api/single-executable-applications.html - Added in: v19.7.0, v18.16.0 but still in Active Development (not stable yet) - 2022

For reference, Deno was released in 2020 with all of these features from the start.

Feels like it always take some healthy competition for Node to make big strides like this. Like the whole io.js fork thing a long while ago.

[ Parent | on HN ]
Re:Deno Is Joining Cloudflare by 8n4vidtmkvmk on Friday October 09, 2026 @12:21PM (#50022793)
I didn't know node got that too but it says right at the start that malicious programs can bypass it. What's the point then?
[ Parent | on HN ]
Re:Deno Is Joining Cloudflare by genxy on Friday October 09, 2026 @01:25PM (#50023822)
The Docker of JS runtimes. Deno will get picked up by the community. But CF should sponsor it for at least 250k a year.
[ Parent | on HN ]
Re:Deno Is Joining Cloudflare by oofdere on Friday October 09, 2026 @01:28PM (#50023880)
You can give permissions to Web Workers when starting them in Deno, which afaict Node cannot do.
[ Parent | on HN ]
Re:Deno Is Joining Cloudflare by LunaSea on Friday October 09, 2026 @12:10PM (#50022614)
The security model has always been a half-baked afterthought. The initial versions were riddled with vulnerabilities .
[ Parent | on HN ]