5 ms·
Does it make anyone else nervous that 40% of the web is run on software with such a poor track record when it comes to security?
by ramphastidae 5y ago
Does it make anyone else nervous that 40% of the web is run on software with such a poor track record when it comes to security?
- Andrex 5y agoAnything highly-used will be a larger target by default I'd guess.
- mrweasel 5y agoIsn’t just the “Windows” of the internet? It’s heavily used, directly exposed to the internet, so it’s a bigger target, hence more bugs a found (and exploited).
- mekster 5y agoIf you'd have ever looked at the WordPress source code, you know why it's been having a crappy track record. It's one of the easiest example of "don't code like this".
- ipaddr 5y agoThose issues went away with the automatic updates feature.
- photomatt 5y agoRCEs are rare enough now that the price has grown to 300k for a zero day: https://wptavern.com/zerodium-temporarily-triples-payout-to-300k-for-wordpress-exploits https://wptavern.com/zerodium-temporarily-triples-payout-to-...
- neurostimulant 5y agoNot if you choose your plugins and theme carefully.
- rchaud 5y agoThe 'poor track record' reputation comes from the giant number of mom-and-pop sites that got compromised. I imagine 40% of the web is really just a handful of massive commercial websites that have developers on hand to take care of security, backups, devops etc.