3 ms·

Yawn. More excuses for using a big old pile of spaghetti code with no testing or dependency management. Auto-updates? big deal, any decent framework can roll ou

Yawn. More excuses for using a big old pile of spaghetti code with no testing or dependency management. Auto-updates? big deal, any decent framework can roll out updates on composer.

Mojah 11y ago
Yet here we are; - Drupal 7: manual updates, or funky drush commands - Magento: requires running shell scripts (!!) to patch at the CLI - Joomla: no auto updates - Typo 3: no auto updates - ... Composer helps, but it helps developers. It does not help the average user that has no clue on how to apply those patches. People download a CMS from the internet, throw it on a cheap host and expect it to work. Updates? What are those?
- marcosdumay 11y ago
  Drupal 7 can auto-update by cron.
- stephentmcm 11y ago
  And that's the problem they shouldn't be doing that. Hosting a website is not a fun weekend project you get from Target/Walmart as a DIY kit. People wouldn't be happy if I started building my own car to just drive around where ever I felt like, making it 'easy' and 'safe' to just throw up a website anywhere is an excellent way to get hacked.
  - coldtea 11y ago
    >Hosting a website is not a fun weekend project you get from Target/Walmart as a DIY kit. Why? It's not like most websites are mission critical. Heck, even if a major business website went down for a couple of days, it wouldn't be that much damage anyway compared to other things that can and regularly do happen to the supply chain or market... >making it 'easy' and 'safe' to just throw up a website anywhere is an excellent way to get hacked Yeah, and so? Getting hacked is the end of the world?
    - stephentmcm 11y ago
      For Mummy-blogger's site about how awesome her kid is? Probably not the end of the world, expect that now her site is sending spam and hosting malware. You'd be pissed if your neighbour left their house unlocked while they went on holiday and it turned into a crack-den.
- tsewlliw 11y ago
  I'm with you on this. WordPress is acknowledging the actual behavior of the people who use it and aiming to be secure inside that reality instead of telling people they are doing it wrong and to learn how to internet. That is absolutely laudable and in practice prevents a lot of real problems and lifts people up instead of puts them down.

Yawn. More excuses for using a big old pile of spaghetti code with no testing or dependency management. Auto-updates? big deal, any decent framework can roll out updates on composer.

Mojah 11y ago

Yet here we are; - Drupal 7: manual updates, or funky drush commands - Magento: requires running shell scripts (!!) to patch at the CLI - Joomla: no auto updates - Typo 3: no auto updates - ... Composer helps, but it helps developers. It does not help the average user that has no clue on how to apply those patches. People download a CMS from the internet, throw it on a cheap host and expect it to work. Updates? What are those?

marcosdumay 11y ago
Drupal 7 can auto-update by cron.
stephentmcm 11y ago
And that's the problem they shouldn't be doing that. Hosting a website is not a fun weekend project you get from Target/Walmart as a DIY kit. People wouldn't be happy if I started building my own car to just drive around where ever I felt like, making it 'easy' and 'safe' to just throw up a website anywhere is an excellent way to get hacked.
- coldtea 11y ago
  >Hosting a website is not a fun weekend project you get from Target/Walmart as a DIY kit. Why? It's not like most websites are mission critical. Heck, even if a major business website went down for a couple of days, it wouldn't be that much damage anyway compared to other things that can and regularly do happen to the supply chain or market... >making it 'easy' and 'safe' to just throw up a website anywhere is an excellent way to get hacked Yeah, and so? Getting hacked is the end of the world?
  - stephentmcm 11y ago
    For Mummy-blogger's site about how awesome her kid is? Probably not the end of the world, expect that now her site is sending spam and hosting malware. You'd be pissed if your neighbour left their house unlocked while they went on holiday and it turned into a crack-den.
tsewlliw 11y ago
I'm with you on this. WordPress is acknowledging the actual behavior of the people who use it and aiming to be secure inside that reality instead of telling people they are doing it wrong and to learn how to internet. That is absolutely laudable and in practice prevents a lot of real problems and lifts people up instead of puts them down.