Guillermo Rauch Profile picture
@vercel CEO
Oct 10 6 tweets 3 min read
A quick analysis of the WP login checkbox making the rounds (https:/⁠/login⁠⁠.⁠⁠) which now states "I am not affiliated with WP Engine in any way, financially or otherwise." 🧵 wordpress.orgImage The `

` paragraph element has an interestingly-named CSS class `login-lawsuit`.

At first I thought it would be used for the purpose of styling, but it's basically acting as a record in the code that this is in response to the lawsuit.

We can verify this by toggling the value and seeing it doesn't impact rendering.

Sep 22 12 tweets 5 min read
This @openai researcher got hacked. The classic "a coin just dropped" thing with comments turned off and a fake website. An analysis on how the attack works and its tech stack 🧵 Image First thing to note: it looks good. It looks like the legit

Most phishing sites have a common downfall: the website looks crappy / outdated. This was the case in 2 recent attacks targeting me, but not here

openai.com


Image
May 12 9 tweets 4 min read
A new kind of phishing attack showed up in my DMs.

A hacked government account DMs you that your account is in violation of X policies.

Here's an analysis of the attack 🧵 A Twitter profile page showing the profile picture and details of Amélie Oudéa-Castéra, the Minister of Sports and the Olympic and Paralympic Games.  Amélie Oudéa-Castéra @AOC1978 Ministre des Sports et des Jeux Olympiques et Paralympiques Joined July 2012 · 52.7K Followers Not followed by anyone you're following  X | Security Notification Dear X User,  This notification is to inform you that your account does not comply with our current policies. Activities or content that do not align with our company's policies may result in an inconsistent user experience with our services.  The reason ... Notably, if you check out the account, it's not just verified, it's government verified. A fireworks display over a harbor with a large sailing ship.  This account is verified because it is a government or multilateral organization account. Verified since May 2022.
Mar 7 7 tweets 3 min read
My favorite @nextjs apps I’ve written to learn the framework.

1️⃣ Next AI News:

My acid test here was: “are we delivering on ‘dynamic at the speed of static’”? next-ai-news.vercel.app
Its search, which is always SSR’d on a per-keystroke basis thanks to RSC, is a good demonstration.
Feb 11 6 tweets 2 min read
Next.js and React have never been easier, and they've also never been harder 🧵

Here's the universal 'minimum viable app', a TODO list, implemented with the latest features in 45LOC A TODO list implemented with RSC and Server Actions Below is the live deployment. The most striking thing is that, as it's been discussed, React is now server-first.

Fetching and mutating data, compared to the old React, is now completely straightforward (as in PHP).
emoji-todo.vercel.app
Dec 27, 2023 8 tweets 4 min read
Fascinating talk, highly recommended.

The attackers used the hash of a WebGL rendered triangle for device fingerprinting 😲
Device fingerprinting with JS and WebGL TrueType is "surprisingly turing-complete"[1] per @gwern who also pointed out the security implications[2]

[1]
[2] gwern.net/turing-complet…
gwern.net/turing-complet…
TrueType VM
Nov 12, 2023 8 tweets 3 min read
I upgraded to use partial-prerendering.

The speed is absolutely nuts. I see as low as 15ms TTFB from my home Wi-Fi in SF. The final result streams from us-east, where the core pokemon database is.

Speed *and* code simplification. Let's dive in 🧵 how-is-this-not-illegal.vercel.app
This demo is named "how is this not illegal" after Dan Abramov's reaction to Server Components bringing a PHP-like simplicity to React.

I turned on the `ppr` flag and I was able to simplify things further:
◆ No more `runtime` junk
◆ No more `dynamic`

github.com/rauchg/how-is-…
Image
Apr 28, 2023 16 tweets 8 min read
I re-designed rauchg.com with App Router
Migration highlights 🧵
◆ 100 PSI perf *out of the box*
◆ Using AI to migrate
◆ React Server Components are unreal (ft. <Tweet>)
◆ Generating Dynamic OG
◆ Reaching Dark Mode nirvana
◆ Integrating Rust-powered MDX (+ RSC) My new blog, redesigned and... 1️⃣ To start: is it really a framework if it's not blazing fast?
(or "why not an MPA?")
◆ 100 PSI (mobile!) with no work
◆ Yet page got *more complex* (realtime views)
◆ Yet I get:
◇ blazing page transitions
◇ state (e.g.: mutated view count)
◇ persistent layout (nav) 100 performance score, out ...
Dec 1, 2022 24 tweets 14 min read
At @AWSreInvent I had the privilege of joining the keynote with VP of Serverless Holly Mesrobian

We shared how @vercel has integrated the serverless model into our frameworks and infrastructure

Watch it 🎥 or read on for some metrics & customer stories 🧵 Vercel and AWS come together at the Serverless keynote. Vercel is the platform for frontend developers. Our ecosystem starts with Open Source.

We're best known for creating @nextjs, but contribute broadly, by investing in and support projects like @sveltejs, @swc_rs, turbo.build, and more. The ecosystem of open-source software Vercel supports: Next.
Nov 25, 2022 15 tweets 7 min read
It's been amazing to see the growth in AI & ML companies building on @vercel – here are some of my favorites.

lexica.art is building an instant search engines for AI-generated art, making the UX snappy Jasper is augmenting your ability to write effective content

jasper.ai
Jul 6, 2020 8 tweets 3 min read
It's been amazing to see SWR flourish so fast. I'll share some insight on why we created it, which might help ellucidate why you need it too 🧵 📰 Next.js started out as a SSR framework

⚛️ Today, it's hybrid: it auto-exports individual pages as pure HTML (when getInitialProps is not used). It also has powerful primitives for static generation

💡 When we first built the Vercel dashboard, we naturally used SSR! However…
Jun 3, 2020 6 tweets 4 min read
I'm donating 15 iPad Pro (with Magic Keyboards and Apple Pencils) to @hackclub 🧵

We are distributing all of them to Black teens, who
need our support and motivation the most right now Image The cover art above is the one we are shipping these with, by the hyper-talented Black artist @gdbeeart

I’m joined by gracious donors:

@vercel: Pro accounts, to host their websites and beyond
@BlinkShell: free licenses, to SSH
@digitalocean: VPS credits, to hack on
Apr 5, 2020 4 tweets 2 min read
What goes into providing free automatic SSL at scale? 🧵
◆ Let's Encrypt integration
◆ Auto challenge resolution based on DNS or HTTP
◆ Auto DNS record provisioning when using ZEIT DNS
◆ Monitoring LE API status and ACME protocol evolution
◆ Modern TLS support (1.3 +) ◆ Scaling LE rate-limits and accounts with issuance growth
◆ Automated renewal process w/ liveness monitoring
◆ Emailing customers when their manual DNS changes interfere with LE challenge resolution
◆ Watchdog monitoring of the CDN edges for safety
◆ Secure key storage