4 ms·
I think that this article failes to see the main problem, which is the failiure to protect your data from your CMS. Sure, I run wordpress on my VPS, but my VPS
by timthelion 11y ago
I think that this article failes to see the main problem, which is the failiure to protect your data from your CMS. Sure, I run wordpress on my VPS, but my VPS has NO access to my data. My VPS is UNTRUSTED!
-----
One thing that is problematic with the untrusted model, is that I also run my mail server on my VPS. Email is insecure, it is unencrypted as it travels through the internet. Unfortunately, I cannot do much about that fact. I should however, be worying more about separating my email server from my wordpress installation than about making sure that my wordpress has no security flaws. OF COURSE the wordpress could be hacked, even though I always install updates on time!
- spacecowboy_lon 11y agoExactly your WordPress external facing sites should be hosted on a physically separate net work and system to your internal systems.
- pjc50 11y agofailiure to protect your data from your CMS How can you do that if the CMS is the place where the data is stored? That's why people use a CMS after all, to manage content.
- mtbcoder 11y agoI'm assuming OP means data not related to the blog. In other words, if one chooses to run Wordpress, isolate it and its database on to a separate container, away from anything mission critical.
- timthelion 11y agoOK, your CMS, AKA your blog, should not have the data of tens of thousands of customers in it...
- pilsetnieks 11y agoIt's not in this article but in the one about Drupal (http://drupal.ovh/drupal-panama-papers-leaks-mossack-fonseca http://drupal.ovh/drupal-panama-papers-leaks-mossack-fonseca) it says that they were running a customer portal for the purpose of giving customers access to those very same documents. So yes, they probably should have ran their Wordpress site and Drupal portal separately but it wouldn't have changed anything anyway.
- deleted 11y ago[deleted]