the reason we talk about RSC or Next complexity is because it isn’t broadly understood in specialist circles (people who care don’t know how it works) and because it isn’t solid yet (so the abstraction sticks out too much, tooling is flaky and slow, bugs still show up etc). this will get polished
i agree with tom that accepted complexity budget shifts over time, especially as lower layers get more commoditized and polished
eg one could argue that having a bundler at all (with code splitting and tree shaking) is unacceptable complexity. or minifier. that’s complex! so what, it works
at least that’s what i gathered from public explanation, i haven’t seen the exploit
so in that sense it’s similar to any system that lets you declare endpoints declaratively
[Endpoint]
void fooBar() {}
and then they’re gathered in some dictionary behind the scenes. the flaw is in the dictionary check
the vulnerability is in an RPC layer that lets you write
await serverFn()
on the client for exported functions. it’s supposed to check the dictionary for which functions are exposed but it seems like maybe there’s some JS built-ins hanging off of that dictionary that allow something to escape
for vercel in particular there’s actually a lot of alignment. you want hobbyists to make projects and get into web dev right. atproto gives them a social layer that survives throwaway experiments. every app can enrich every other app. just make it easy to consume the firehose and build indexes!
both @vercel.com@bsky.brid.gy and @cloudflare.social@bsky.brid.gy love to talk about pushing the web forward. atproto is, in my opinion, one of the most transformative web technologies since the invention of the web itself.
incentives are aligned against it but so was with open source. you can be a multiplier if you want to
*firehose
i think that’s the biggest barrier. i hosted on railway.app so it wasn’t an issue for me, and claude whipped up ingestion in a few minutes from @samuel.fm@bsky.brid.gy’s statusphere example. but i couldn’t deploy this on vercel or cloudflare