News for hackers. Stuff that matters.
Re:Critical RCE Vulnerabilities in React and Next.js by mmsc on Wednesday December 03, 2025 @12:08PM (#46137013)
Hackernews' submission guidelines clearly state: "Please submit the original source. If a post reports on something found on another site, submit the latter." [0]

The Wiz post has significantly changed since it was first published (and how it looked when first posted to HN), FYI -- see [1]. When it was published, it was a summary of the React announcement, and was somehow longer than the original and yet provided less useful information than the original.

In any case, the "tell" is the syntactic structure (as Chomsky would say) and certain phrases used in the post.

[0]: https://news.ycombinator.com/newsguidelines.html

[1]: https://web.archive.org/web/20251203162416/https://www.wiz.i...

Re:Critical RCE Vulnerabilities in React and Next.js by jfindper on Wednesday December 03, 2025 @12:13PM (#46137086)
>In any case, the "tell" is the syntactic structure (as Chomsky would say) and certain phrases used in the post.

What certain phrases?

(p.s. You don't need to link me to the HN guidelines, by the way. It just comes off as condescending. I'm on the site, I know where to find the guidelines, and you quoted the guideline in question verbatim. I don't understand why people do this.)

Re:Critical RCE Vulnerabilities in React and Next.js by deathanatos on Wednesday December 03, 2025 @12:25PM (#46137267)
> It just comes off as condescending.

Or, … they're just citing the source for the information, so that, in case you aren't aware as to where to find them, now you are.

I think that's a doubly reasonable thing to do, given that your account is new, too.

Re:Critical RCE Vulnerabilities in React and Next.js by jfindper on Wednesday December 03, 2025 @12:32PM (#46137361)
>in case you aren't aware as to where to find them

The guidelines are linked at the bottom of every page, and directly underneath the comment box on new accounts. I also, perhaps surprisingly, know how to google "hn guidelines". Or ask chatgpt. Or reply "where's that piece of information from?".

>I think that's a doubly reasonable thing to do, given that your account is new, too.

People link the guidelines and, like, wikipedia to accounts that are 10 years old with 30,000 karma. It's a weird quirk of HN.

If you're talking to someone in real life, or professional emails, or whatever and you provide citations for commonly known things/definitions/etc.... you're being condescending.

Re:Critical RCE Vulnerabilities in React and Next.js by lcnPylGDnU4H9OF on Wednesday December 03, 2025 @02:20PM (#46138731)
> If you're talking to someone in real life, or professional emails, or whatever and you provide citations for commonly known things/definitions/etc.... you're being condescending.

If you're commenting on a public forum and you provide citations for commonly known things/definitions/etc., you're supplying the source of your claims for people who may be unaware. You are not the only reader of their comment (nor this one), even if it is in direct reply to yours.

Re:Critical RCE Vulnerabilities in React and Next.js by jfindper on Wednesday December 03, 2025 @03:15PM (#46139480)
No [1], you [2] are [3] being [4] condescending [5].

[1] https://www.dictionary.com/browse/no [2] https://www.dictionary.com/browse/you [3] https://www.dictionary.com/browse/are [4] https://www.dictionary.com/browse/being [5] https://www.dictionary.com/browse/condescending

Assuming everyone is an idiot who a) doesn't know something common and b) isn't able to figure out how to google it and c) isn't able to figure out how to say "where's that from?" in a reply is condescending [6].

[6] https://en.wikipedia.org/wiki/Condescension

Re:Critical RCE Vulnerabilities in React and Next.js by lcnPylGDnU4H9OF on Wednesday December 03, 2025 @05:02PM (#46140818)
You're missing the point. You shouldn't take it personally.

> Assuming everyone is an idiot who a) doesn't know something common and b) isn't able to figure out how to google it and c) isn't able to figure out how to say "where's that from?" in a reply

These things were neither assumed nor implied.

Re:Critical RCE Vulnerabilities in React and Next.js by jfindper on Wednesday December 03, 2025 @05:17PM (#46140994)
They are implied when someone feels like they need to cite commonly known, easily found, and easily asked about stuff. That’s like the whole reason why it’s condescending
Re:Critical RCE Vulnerabilities in React and Next.js by lcnPylGDnU4H9OF on Wednesday December 03, 2025 @05:24PM (#46141092)
I'm aware that this is your perspective but you should be aware that it is your subjective opinion. Their intention does not appear to be condescending. They did not assume or imply any of those things. Your anger is misplaced with that individual; they didn't hurt you.
Re:Critical RCE Vulnerabilities in React and Next.js by cvsswebshit on Wednesday December 03, 2025 @02:32PM (#46138885)

    Dear jfindper,

    I hope this professional email finds you well.
    
    Would you mind reading about HN's approach to comments and site guidelines?
    
    https://news.ycombinator.com/newswelcome.html
    
    Please don't fulminate. Please don't sneer, including at the rest of the community.
    
    Kind regards,
    
    A. Webshitter
Re:Critical RCE Vulnerabilities in React and Next.js by jfindper on Wednesday December 03, 2025 @03:13PM (#46139462)
Posting the same joke twice does not equal twice as funny.