4 ms·
Except that Wordpress is written in PHP and designed without security as a goal. True, security is all about probability, but Wordpress' odds are not that good
by tsally 17y ago
Except that Wordpress is written in PHP and designed without security as a goal. True, security is all about probability, but Wordpress' odds are not that good.
- reedlaw 17y agoWindows was originally built without security as a major focus, but has been improved vastly. So has WordPress. Except for a few rare cases where security was a primary goal, such as OpenBSD, most software will be discovered to have vulnerabilities at some point in time.
- iuguy 17y agoOpenBSD has had plenty of vulnerabilities, including a couple of remote ones.
- reedlaw 17y agoSo it's a good example of software built with security as a primary focus that still has vulnerabilities. I can think of few examples of software that has never had vulnerabilities discovered. OpenSSH maybe?
- rincewind 17y agoWindows was originally built without security as a major focus. This is misleading. Windows NT was built with security in mind. Windows Xp, Vista and 7 are descended from NT.
- reedlaw 17y agoI meant Windows 95 and 98. NT is one of the vast improvements I had in mind.
- nir 17y agoThe fact it's been written in PHP is meaningless. As for "designed without security as a goal", I think you'll find that's true for most web apps.