> and yet, here I am, absolutely incapable of reliably securing a god-damn Wordpress site. With all due respect, I would claim to be able to secure a god-damn

> and yet, here I am, absolutely incapable of reliably securing a god-damn Wordpress site. With all due respect, I would claim to be able to secure a god-damn Wordpress site. Versatile knowledge about Wordpress, about PHP, about (F)CGI/mod_php/etc., about Apache, nginx and friends, about accelerators and caches, about the Linux network stack, the userspace tooling, the kernels, the hardware, the network structure -- this is what we dealt with all our life, isn't it? Some of us learnt it systematically at a university, others as autodidacts. As semi-professionals, we don't earn our money with security and most of us don't do security with such a passion (I'm rather annoyed by SELinux and AppAmor and run "curl | bash" with the neccessary doubts). Most of all, most of us don't apply for jobs at three-letter agencies, and I assume a good portion of us don't do that because they don't like three-letter agencies. (Sorry for extrapolating from myself)