3 ms·
> 1. Don't use wordpress, you'll catch a virus. For security I would much rather use WordPress than any other open-source CMS. There are hundreds of people aro
by claudiulodro 9y ago
> 1. Don't use wordpress, you'll catch a virus.
For security I would much rather use WordPress than any other open-source CMS. There are hundreds of people around the world trying to find security holes in the core CMS every single day and any ones that are found are quickly patched. There is a reason it's used by many enterprise users.
From https://wordpress.org/about/security/ https://wordpress.org/about/security/ :
> The WordPress Security Team is made up of approximately 50 experts including lead developers and security researchers — about half are employees of Automattic (makers of WordPress.com, the earliest and largest WordPress hosting platform on the web), and a number work in the web security field. The team consults with well-known and trusted security researchers and hosting companies.
(Disclaimer: I work for Automattic on WooCommerce)
- kelnos 9y agoI think the fallacy here is that if you want a blog, you need a full-blown CMS like Wordpress (or Drupal, or whatever). If you have some baseline technical skills, you're probably better off using a static site generator like Jekyll and hosting it on GitHub Pages or something like that. Then you just don't have any security worries at all. If you really want commenting, you can embed Disqus or FB or something. I certainly wouldn't recommend this for your average non-technical person who just wants to write a blog (hosted WP is a fine solution there), but for most of the people who post on HN, it seems silly to go for a CMS. (Yes, I know that a static site generator will not give you a lot of the dynamic features and whatnot that a CMS will give you, but I'd expect that a very small percentage of the "I want to write articles and publish them" set of people really needs any of them.)