T O P

  • By -

DoctorNootNoot

AFAIK, there’s a http header that’s set by next.js that says something like ‘Powered by Next.js’ on all http requests. It can be turned off in the next.config file


ProperExplanation870

This. https://nextjs.org/docs/app/api-reference/next-config-js/poweredByHeader


wildmonkeymind

Even if that’s turned off the patterns of bundle file paths requested are distinct enough to identify next.


woah_m8

huh im gonna check


EasyMode556

Is there any benefit or reason to leave it enabled?


Standard_Tune_2798

It staves off all the "NextJS is dead, use XXX" doomposting on social media and hackernews. A mild annoyance, but I think I can spare some bytes from every request for that.


little_hoarse

Turning this off on my next next site for sure


lrobinson2011

Hey! I work at Vercel. We look at public data for sites using Next.js (through the HTTP Archive) and then you can see the \`x-vercel-id\` header on those sites if they are using Vercel. Another tool you can use to see what a site is built with it [Wappalyzer](https://www.wappalyzer.com/) (chrome extension).


AltruisticFix627

So you telling me you crawl the whole internet in search of sites using nextjs


HeadlessHeader

Holy moly


OnTheRoadToInYourAss

Who doesn't? Its my favorite past time.


Emt2softwaredev

Very secure dweebs


Right-Ad2418

To be fair, after a while you kinda know which sites are built with Next and which aren't just by browsing through it rather than using an external tool


OpportunityIsHere

Just an fyi. I am from Denmark, and unsolicited emails like what OP describes can result in pretty hefty fines by the ombudsman.


Galaxianz

Yeah, I was just thinking that the comment by Vercel staff seems a bit blasé to the fact they’re sending unsolicited/spam emails. Someone else responded with “cringe” and was downvoted, but it really is kind of cringey.


gnassar

They’re probably just trying to gather data to figure out how to improve their Vercel hosting services, what’s the harm in the “unsolicited” nature of that? It’s not like mans was asking for op’s SIN, nor is op obligated to respond


Galaxianz

Spam is spam. There are better ways to market or do market research than sending unsolicited emails. Unless someone has opted in, then it shouldn’t be done. That’s why there are laws around this in some countries.


RedGlow82

Even for businesses with contact forms / public email addresses? :-?


OpportunityIsHere

I’m not exactly sure where the line is drawn. I guess a contact form is an invitation to get contacted, so that would not apply, but in many other instances it’s not legal to do what Vercel did here


gnassar

What exactly is illegal about this?


richiehill

Depends on the country but in the UK and other countries abiding by GDPR it’s illegal. https://www.gov.uk/marketing-advertising-law/direct-marketing


Ronosho

This relates mostly to individuals not organizations


OnTheRoadToInYourAss

I'm not your ombudsman, pal.


OpportunityIsHere

I’m not your pal, dude


Evil_Bengt

Oh, doesn't seem to be a thing in Sweden, would be nice though 🤔


Rickywalls137

The method of finding out is alright but the fact that Vercel asks the non-customers seem pretty dodgy. It just doesn’t sit right.


A7med3bdulBaset

Are you confirming that you at Vercel spam people?


joonas_davids

Cringe


[deleted]

[удалено]


thedigitalanna

Yes, this is how you can get rid of it [https://nextjs.org/docs/app/api-reference/next-config-js/poweredByHeader](https://nextjs.org/docs/app/api-reference/next-config-js/poweredByHeader)


Ok-Key-6049

Cool and all but why?


damyco

My guess would be to to make more money. They want to find which sites/apps are not hosted on vercel and try to convince the owner to host it on vercel instead?


_He1senberg

at the they are not a charity, they make nextJS to sell vercel not to give back to the comunity, using nextJS and not hosting on vercel in like using nextJS for free


Ok-Key-6049

Honestly, that’s not the community’s problem. They can find other means ro make money other than ripping off their customers for the kind of service they provide. $20 month to act as hostgator? Gtfo vercel


Low_Shake_2945

Ok that makes sense. Thanks for hopping in. How do you determine that a site is “using Next.js”?


ResponsibleEnd451

If you view the source you can see things like “_next/blablabla..” (where nextjs stores the chunked js files), this is a clear indicator that the website is using nextjs. Also there’s sometimes a Powered-By: Next.js header.


lrobinson2011

If you look at the HTML output, you can see `__next` for Pages Router apps, and `self.__next_f` for App Router apps (this is the RSC payload integrated into Next.js).


Advanced-Wallaby9808

This kind of analysis is really common, it's the entire point/business model of [https://www.builtwith.com](https://www.builtwith.com)


Low_Shake_2945

Ok great. Thanks for the info folks! I just needed to verify.


breadist

Isn't the comment you're replying to explaining exactly how they do it? There's a header that says it uses next...


freehugzforeveryone

Is it possible to deploy backend nodejs on vercel ? For the context, i am building mobile and web applications with separate backend microservices


lrobinson2011

Yeah! [https://www.youtube.com/watch?v=wmYDRPH\_kCo](https://www.youtube.com/watch?v=wmYDRPH_kCo)


MMORPGnews

Express js work fine 


CallumK7

Yikes


boilingsoupdev

Pretty easy to scan and figure out. But also very spammy/creepy/desperate imo


RedGlow82

I guess nextjs developers can easily check if a site has JS bundles and/or html produced by nextjs, and they can check if a domain is managed under a vercel ip or not.


Low_Shake_2945

This would imply they check all websites every day. The more likely scenario is that `create-next-app` has code in it that reports back to Vercel. Which feels like a violation of expectations.


RedGlow82

I can't exclude they have something like that, but it seems unlikely. It's more likely they have some spider crawling websites under some criteria.


tunafan6

There are services offering that data on scale who so crawl like builtwith etc. Then probably they compare the domains that are not using their service and voilaa.


breadist

I don't think so. You could also tell easily if it was doing that by checking the traffic...


Sad_Health_1891

Weppalyzer chrome extension can tell you that


IntelligentDrawing18

They say they use telemetry data when you are buuilding the app .you can turn it off in next config.I doubt they only look at our tech stack.


jawabdey

Yep, they (or someone else) may crawl the web, but the telemetry is probably low hanging fruit.


zeloxolez

out of curiosity, why would you think someone couldnt get that information? if you look at all the javascript that gets loaded into the browser for a particular site, you would figure that next.js is referenced all over the place (not just headers)


levarburger

Just reply with, ligma.


SadCoder24

Man Vercel the creepiest tech inflated shit I have seen in a while. Like their whole business model is a cash grab and watching devs fall for it is like watching a train crash in slow motion since in a few years it’s not going to end well.


f36driver

I’d say they’re stepping on the gas. Big price increases are here.


aedom-san

huge datadog and solarwinds energy


andyrubinsux

Noo bro just use NextJS bro, just use App Router bro, just use unstable_noStore bro this is the future of frontend development man I swearrrrr


joeswindell

Isn’t vercel owned or created by nextjs?


No-Vast-1919

There is a request header of nextjs, or if youre using less than next.js v13, theres global __NEXT_DATA__ that is exposed.


medianopepeter

Wappalizer will whisper all that info.


kidzen

Just reply and tell them you'd rather not pay the mob


pushkarsingh32

It might be due to telemetry data [https://nextjs.org/docs/app/api-reference/next-cli#telemetry](https://nextjs.org/docs/app/api-reference/next-cli#telemetry)


cooluser_

Outrageous


SwaeTech

BuiltWith site shows all your info. I obsessively use it and can pretty much tell with whether something was built with Wordpress, Squarespace, or NextJS at this point.


SwaeTech

But yeah, it’s a header somewhere


kaizen8080

Wappalizer