Live data from Hacker News

Critical RCE Vulnerabilities in React and Next.js

wiz.io

71–80 of 92 posts

Re: Critical RCE Vulnerabilities in React and Next.js

#71

Earlier quoted context omitted.

> in case you aren't aware as to where to find them The guidelines are linked at the bottom of every page, and directly underneath the comment box on new accounts. I also, perhaps surprisingly, know how to google "hn guidelines". Or ask chatgpt. Or reply "where's that piece of information from?". > I think that's a doubly reasonable thing to do, given that your account is new, too. People link the guidelines and, lik…

> If you're talking to someone in real life, or professional emails, or whatever and you provide citations for commonly known things/definitions/etc.... you're being condescending. If you're commenting on a public forum and you provide citations for commonly known things/definitions/etc., you're supplying the source of your claims for people who may be unaware. You are not the only reader of their comment (nor this o…

[flagged]

Re: Critical RCE Vulnerabilities in React and Next.js

#72
post #69

Earlier quoted context omitted.

When Reuters has an article that says "Reuters Business - Interest rates going up", do you think Reuters made the interest rates go up themselves or that they are reporting on the interest rates?

Reuters isn’t a bank. Wiz is a security company so they have a greater responsibility to distinguish between their own original work and discoveries made by other researchers.

They do that by saying "we discovered this" when they discover it.

Re: Critical RCE Vulnerabilities in React and Next.js

#73

Earlier quoted context omitted.

[flagged]

Dear jfindper, I hope this professional email finds you well. Would you mind reading about HN's approach to comments and site guidelines? https://news.ycombinator.com/newswelcome.html Please don't fulminate. Please don't sneer, including at the rest of the community. Kind regards, A. Webshitter

[deleted]

Re: Critical RCE Vulnerabilities in React and Next.js

#74
post #73

Earlier quoted context omitted.

Dear jfindper, I hope this professional email finds you well. Would you mind reading about HN's approach to comments and site guidelines? https://news.ycombinator.com/newswelcome.html Please don't fulminate. Please don't sneer, including at the rest of the community. Kind regards, A. Webshitter

[deleted]

[deleted]

Re: Critical RCE Vulnerabilities in React and Next.js

#80

Earlier quoted context omitted.

> If you're talking to someone in real life, or professional emails, or whatever and you provide citations for commonly known things/definitions/etc.... you're being condescending. If you're commenting on a public forum and you provide citations for commonly known things/definitions/etc., you're supplying the source of your claims for people who may be unaware. You are not the only reader of their comment (nor this o…

[flagged]

You're missing the point. You shouldn't take it personally.

> Assuming everyone is an idiot who a) doesn't know something common and b) isn't able to figure out how to google it and c) isn't able to figure out how to say "where's that from?" in a reply

These things were neither assumed nor implied.

Post reply on HN