Hacker News Reader

I know... Is there a server? Are there user accounts? Is there something generating the static pages? Then there's something to hack.

View on HN

The only server involved is the one that runs the compile process. Once the site is built, we push it to S3, and your site is up… Nothing else is needed to view it.

That still leaves a server that can be attacked, and a way to inject code into people's pages through the compiler.

I'm not suggesting it would be in any way easy, it may be nearly impossible, but not having a database isn't the same as being "unhackable."

You generate the pages on your local machine, or on our cloud service that is coming soon.

Reply on news.ycombinator.com