Hacker News: Rauchg

New comment by Rauchg in "The React2Shell Story"

Rauchg — Sat, 09 May 2026 01:32:40 +0000

R2S was a painful one, but Lachlan was a dream of a security researcher to partner with. Not just from a responsible disclosure POV, but things like hopping on multiple calls with Meta and our team to help us validate remediations. Thank you Lachlan for helping make the internet safer (and great job on figuring out this 'labyrinth' of a vulnerability)

New comment by Rauchg in "Linux from Scratch"

Rauchg — Wed, 21 Jan 2026 19:58:57 +0000

This was a pivotal project for me as a young lad learning Linux and software engineering back in the day. Can't recommend it enough. So many little frustrations and painpoints to overcome, wasn't easy , and shows you the ropes of what's to come.

New comment by Rauchg in "RCE Vulnerability in React and Next.js"

Rauchg — Wed, 03 Dec 2025 18:07:12 +0000

We collaborated with many industry partners to proactively deploy mitigations due to the severity of the issue.

We still strongly recommend everyone to upgrade their Next, React, and other React meta-frameworks (peer)dependencies immediately.

New comment by Rauchg in "Next.js is infuriating"

Rauchg — Tue, 02 Sep 2025 08:31:50 +0000

Heard and appreciate the feedback. We’re well aware of the DX papercuts in Middleware. With 15.5 we made a big step in supporting Node runtime[1] which addresses a slew of issues people have reported over time.

If I went back in time, I would have called it Routing Middleware or Routing Handler. A specific hook to intercept during the routing phase, which can be delivered to the CDN edge for specialized providers. It’s also a somewhat advanced escape hatch.

Since OP mentions logging, it’s worth noting that for instrumentation and observability we’ve embraced OpenTelemetry and have an instrumentation.ts convention[2]

[1] https://nextjs.org/blog/next-15-5#nodejs-middleware-stable

[2] https://nextjs.org/docs/app/api-reference/file-conventions/i...

We Built Serverless Servers

Rauchg — Mon, 28 Jul 2025 23:32:36 +0000

Article URL: https://vercel.com/blog/fluid-how-we-built-serverless-servers

Comments URL: https://news.ycombinator.com/item?id=44717103

Points: 6

# Comments: 0

Silk: Native-like swipeable sheets for the Web

Rauchg — Tue, 25 Mar 2025 15:59:58 +0000

Article URL: https://silkhq.co/

Comments URL: https://news.ycombinator.com/item?id=43472846

Points: 6

# Comments: 0

New comment by Rauchg in "Ask HN: Why buy domains and 301 redirect them to me?"

Rauchg — Fri, 24 Jan 2025 13:42:26 +0000

It’s possible `/` redirects but other hidden routes phish. If someone gets e.g.: a fake password reset email, it might help the attacker bypass sanity checks users make.

NextMaster: McMaster-Carr in Next.js

Rauchg — Mon, 21 Oct 2024 20:12:44 +0000

Article URL: https://next-master.vercel.app/

Comments URL: https://news.ycombinator.com/item?id=41908039

Points: 25

# Comments: 13

New comment by Rauchg in "Falsehoods programmers believe about TCP"

Rauchg — Sat, 14 Sep 2024 22:10:02 +0000

Falsehoods programmers believe: the OSI model

Pipedream Connect

Rauchg — Thu, 22 Aug 2024 20:12:04 +0000

Article URL: https://pipedream.com/docs/connect

Comments URL: https://news.ycombinator.com/item?id=41323981

Points: 4

# Comments: 1

New comment by Rauchg in "Show HN: A fast OSS voice assistant"

Rauchg — Mon, 08 Jul 2024 18:25:24 +0000

I've been acting mostly as the 'ideas guy' and helping with the architecture / QA. It's a great way for me to dogfood Vercel and build empathy as a user in an external org, using external services.

Show HN: A fast OSS voice assistant

Rauchg — Mon, 08 Jul 2024 14:21:05 +0000

Article URL: https://swift-ai.vercel.app/

Comments URL: https://news.ycombinator.com/item?id=40905686

Points: 82

# Comments: 29

New comment by Rauchg in "Chrome is adding `window.ai` – a Gemini Nano AI model right inside the browser"

Rauchg — Sun, 30 Jun 2024 03:53:06 +0000

Someone in our community created a provider and I wanted to showcase it.

It’s nice insofar with very little abstraction, runtime, and bundle size overhead, you can easily switch between models without having to learn a new API.

New comment by Rauchg in "Why I hate your Single Page App (2016)"

Rauchg — Mon, 22 Apr 2024 00:34:25 +0000

JS is used for fast page transitions and stuff like that, but funny enough I'm pretty sure I end up shipping less JS overall by running server-side JS.

Last I checked, a Tweet embed alone was several mbs of JS, and it causes a bunch of layout shift and loads third party resources. On my blog they're pre-rerendered and shipped statically[1]

Probably the strongest reason though is to not set a 'power cap' on your project unnecessarily. It'd suck to have to rewrite a project because you got trapped in a local maxima, which is why i always share you can have your 100 lighthouse cake & eat it too.

[1] https://rauchg.com/2021/making-the-web-faster#next-momentum

New comment by Rauchg in "Why I hate your Single Page App (2016)"

Rauchg — Mon, 22 Apr 2024 00:05:17 +0000

some that i've built recently with app router that are intentionally minimalistic

- https://rauchg.com

- https://next-ai-news.vercel.app/

- https://emoji-todo.vercel.app/

Next.js scales up and down in complexity / ambition. On perf:

- https://twitter.com/rauchg/status/1652093980958683137

- https://twitter.com/rauchg/status/1744183168541007878

Magic Spell: AI prompting for </h1> <p>Rauchg — Mon, 01 Apr 2024 16:13:30 +0000</p> <p>Article URL: <a href="https://magic-spell.vercel.app/">https://magic-spell.vercel.app/</a></p> <p>Comments URL: <a href="https://news.ycombinator.com/item?id=39895765">https://news.ycombinator.com/item?id=39895765</a></p> <p>Points: 3</p> <p># Comments: 1</p> </article> <article> <h1>Hume – voice AI with emotional intelligence</h1> <p>Rauchg — Wed, 27 Mar 2024 18:48:53 +0000</p> <p>Article URL: <a href="https://demo.hume.ai/">https://demo.hume.ai/</a></p> <p>Comments URL: <a href="https://news.ycombinator.com/item?id=39843092">https://news.ycombinator.com/item?id=39843092</a></p> <p>Points: 16</p> <p># Comments: 3</p> </article> <article> <h1>New comment by Rauchg in "LlamaCloud and LlamaParse"</h1> <p>Rauchg — Wed, 21 Feb 2024 09:29:25 +0000</p> <p>If you have any concrete feedback on what we should improve, I’m all ears. We heard feedback from the community that they wanted better documentation and guidance on self-hosting and we shipped it last month[1]. Curious what you’d like to see improved.<p>[1] <a href="https://nextjs.org/blog/next-14-1#improved-self-hosting" rel="nofollow">https://nextjs.org/blog/next-14-1#improved-self-hosting</a></p> </article> <article> <h1>New comment by Rauchg in "LlamaCloud and LlamaParse"</h1> <p>Rauchg — Wed, 21 Feb 2024 09:25:02 +0000</p> <p>Middleware does work with self-hosting[1]. It’s a more limited runtime that’s based on web standard APIs, which creates optionality for running it in high performance / resource constrained scenarios.<p>[1] <a href="https://nextjs.org/docs/app/building-your-application/deploying#middleware" rel="nofollow">https://nextjs.org/docs/app/building-your-application/deploy...</a></p> </article> <article> <h1>New comment by Rauchg in "Show HN: I Built a Hacker News Simulator Powered by GPTs"</h1> <p>Rauchg — Sat, 20 Jan 2024 16:45:59 +0000</p> <p>We're working on improving this and it's shipping soon!</p> </article> </main></body></html>