3 ms·
I really wonder what that mean contributing to WordPress... from the cybersecurity point of view in 2024, there is/were no contributions: it is common to be hac
by wslh 2y ago
I really wonder what that mean contributing to WordPress... from the cybersecurity point of view in 2024, there is/were no contributions: it is common to be hacked when you use Wordpress (e.g. [1]).
[1] https://www.reddit.com/r/ProWordPress/comments/1cv15mt/would_malware_even_be_an_issue_on_a_wordpress_site/ https://www.reddit.com/r/ProWordPress/comments/1cv15mt/would...
- dns_snek 2y agoThat discussion is largely about themes and plugins. Severe vulnerabilities in WP Core are quite rare.
- wslh 2y agoI believe WP Core and plugins should not be viewed separately in terms of security. Plugins are omnipresent. Integrating security measures across both could create a more robust system overall.
- yencabulator 2y agoThemes and plugins are the severe vulnerability of WP Core.
- claudiulodro 2y agoWordPress is secure enough that whitehouse.gov runs on it and zero-day vendors pay $100,000+ if you have an exploit for the core WordPress software. It's not "magically secure" though -- you wouldn't say that AWS is insecure because some people set it up wrong or use bad integrations.
- wslh 2y agoI'm curious, do you have any information on how much whitehouse.gov spends on cybersecurity testing and customization? I imagine it's considerably more than the $100,000 you mentioned for a WordPress exploit. I work in this space and have experience with offensive security tests, including on Amazon itself.
- tempaccount420 2y agoTime for a Rust rewrite?
- wslh 2y agoI don't think the first problem is about Rust or not but about having a security mindset to develop software. Even if it is PHP.