4 ms·

Wordpress in 2025 has a very dangerous pair of traits: * It and all its plugins must be kept up to date or else you will be compromised. * The BDFL is a mania

Wordpress in 2025 has a very dangerous pair of traits: * It and all its plugins must be kept up to date or else you will be compromised. * The BDFL is a maniac who is happy to block access to deliver or receive security updates for petty personal reasons. With a static site there are no security vulnerabilities to patch, so it doesn't matter if the SSG project totally implodes because the maintainer goes crazy. With WordPress it matters a lot.

Tallain 1y ago
Had to look up what "BDFL" meant. Even if the dude tries to paint the internet with Wordpress's brains, I'm confident I will have time (and the impetus, finally) to find an acceptable alternative for my workflow. I'm open to suggestions. Also, as I mentioned to a sibling response, the upkeep really is not that much work. It's a personal blog and takes a grand total of three (maybe four) clicks to update every once in a while.
egypturnash 1y ago
It keeps itself up to date.
- lolinder 1y ago
  Only as long as Matt deigns to allow your server to access his servers and deigns to allow the plugin authors who you depend on to log in to his servers. WordPress has no governance, it just has Matt, and wo betide anyone who ticks him off (or who relies on any developers who tick him off).
  - sroussey 1y ago
    Wordpress.com works fine for ordinary people. No updates to worry about. Not my cup of tea, but dead simple.
    - deleted 1y ago
      [deleted]
    - mattl 1y ago
      WordPress.com doesn't support many of the plugins out there (or at least not on the price tiers I can see) -- but I happily used it for https://librefm.wordpress.com https://librefm.wordpress.com for a number of years. Of course, WordPress.com is updated differently to a blog running the wordpress.org code.
nedt 1y ago
Use wordpress headless and protected the backend so it can't be accessed publicly. Then you don't have to care so much about keeping it up to date.
RainyDayTmrw 1y ago
Maybe not so benevolent after all.

Tallain 1y ago

Had to look up what "BDFL" meant. Even if the dude tries to paint the internet with Wordpress's brains, I'm confident I will have time (and the impetus, finally) to find an acceptable alternative for my workflow. I'm open to suggestions. Also, as I mentioned to a sibling response, the upkeep really is not that much work. It's a personal blog and takes a grand total of three (maybe four) clicks to update every once in a while.

egypturnash 1y ago

It keeps itself up to date.

lolinder 1y ago
Only as long as Matt deigns to allow your server to access his servers and deigns to allow the plugin authors who you depend on to log in to his servers. WordPress has no governance, it just has Matt, and wo betide anyone who ticks him off (or who relies on any developers who tick him off).
- sroussey 1y ago
  Wordpress.com works fine for ordinary people. No updates to worry about. Not my cup of tea, but dead simple.
  - deleted 1y ago
    [deleted]
  - mattl 1y ago
    WordPress.com doesn't support many of the plugins out there (or at least not on the price tiers I can see) -- but I happily used it for https://librefm.wordpress.com https://librefm.wordpress.com for a number of years. Of course, WordPress.com is updated differently to a blog running the wordpress.org code.

nedt 1y ago

Use wordpress headless and protected the backend so it can't be accessed publicly. Then you don't have to care so much about keeping it up to date.

RainyDayTmrw 1y ago

Maybe not so benevolent after all.