Viewing profile — block_hacks

A VPN changes your IP address, but websites can still observe signals such as your timezone, language, screen resolution, user agent, canvas output, hardware details, and other bro…

[dead]

tanstack is worse

ok m8

I’ve been using Next.js for a long time. Long enough to have shipped real products with it, migrated between major versions, rewritten parts that were “best practice” just a year e…

damn

Hi HN, I kept running into the same problem: I only needed to send a clean invoice PDF once in a while, but every tool wanted an account, onboarding, subscriptions, dashboards, and…

That’s a fair question. Blockchain security work is rarely just cryptography in isolation. Web3 applications are still web applications. Wallets, dashboards, admin panels, and APIs…

Just to address the “AI-generated” point directly: This isn’t something you can realistically get out of an LLM by prompting it.... If you ask an AI to write about Next.js RCE, it …

To be clear, I’m not claiming this is some universal or inevitable failure mode, or that everyone running Next.js is compromised. Every system has strengths and weaknesses. This is…

what's up?

Modern Next.js apps execute attacker-controlled input earlier than most teams realize — during framework deserialization, hydration, and Server Action resolution, often before appl…

good?

peace

[dead]

[dead]