Vercel Says Internal Systems Hit in Breach

(decipher.sc)

160 points | by whiteyford 2 hours ago

4 comments

  • zuzululu 19 minutes ago
    What is the rationale for using vercel ? I'm getting a lot of value out of cloudflare with the $5/month plan lately but my bare metal box with triple digit ram has seen zero downtime since 2015.
    • zoul 2 minutes ago
      Very nice developer experience. A lot of batteries included, like CDN, incremental page regeneration, image pipeline or observability. Not having to maintain a server.

      I’m still planning to move elsewhere though, the vendor lock-in is not worth it and I’d like to keep our infra in the EU.

    • senko 8 minutes ago
      You use a free template that's done in Next.js and uses its Image component, so you need a server.

      Everything runs fine locally until you try to deploy it, and bam you need 4g ram machine to run the thing.

      So you host it on Vercel for free cause it's easy!

      Then you want to check for more than 30 seconds of analytics, and it's pay time.

    • dev360 6 minutes ago
      For a lot of folks, I think its ease of deployment when using Next.js. I switched to astro, also doing a lot of cloudflare at the moment. Before that, I was doing OpenNext with sst.dev on AWS but it started feeling annoying.
    • kingleopold 11 minutes ago
      it's free for newbies and everyone, ofc it's a trap but freemium model gets people. aws can cost easily few thousands with 2-3 mistakes and clicks. vercel makes you start free then if you grow they bill you 10x-100x aws
    • Bridged7756 13 minutes ago
      I suppose their market is one click deployments. Maybe for non technical people or people not willing to deal with infra.
    • arkits 3 minutes ago
      Develop experience. Ephemeral deploys. Decent observability. Decent CI options. Generous free tier.
    • gjsman-1000 15 minutes ago
      0.82% of homes are burglarized every year.

      Meaning since 2015, you’ve got an 8.2% chance of having someone walk out with that box. Hopefully there’s nothing precious on it.

      • jimberlage 9 minutes ago
        Assuming that all homes are at equal risk of being burglarized. In practice the neighborhoods I’ve seen are either at much higher risk or much lower risk.
      • FreePalestine1 11 minutes ago
        They didn't imply the box was at their home and that probability is off
      • burnte 13 minutes ago
        If they have good backuos, no worries. Mine is in a locked colo cage in a datacenter, so I'm not worried either.
  • sdoering 1 hour ago
    Dupe. Other thread with comments:

    https://news.ycombinator.com/item?id=47824463

  • jheitzeb 3 minutes ago
    Missing from Glasswing
  • adithyasrin 1 hour ago
    The original link posted in the post has almost same content: https://vercel.com/kb/bulletin/vercel-april-2026-security-in...