News for hackers. Stuff that matters.

A comment on Why Wordpress?. Parent comment

Re:Why Wordpress? by XparXnoiAx on Sunday January 01, 2017 @05:59PM (#13297906)
Yeah, I wish I could recommend WordPress to people because it's really nice at what it does, but the security flaws are too serious.The fact that it takes months for them to fix serious vulns reported to them only makes it worse.

Seriously, there are youtube tutorials about 'How to Hack Wordpress.' It can't get much worse than that:

https://www.youtube.com/results?q=wordpress+hack

[ Parent | on HN ]
Re:Why Wordpress? by WhiteSource1 on Monday January 02, 2017 @02:12AM (#13299569)
How about putting a tool like Incapsula on top (free option offers 2 factor authentication) which makes hacking just a bit harder.
[ Parent | on HN ]
Re:Why Wordpress? by XparXnoiAx on Tuesday January 03, 2017 @12:31PM (#13310910)
2 factor authentication is great, but it won't stop an attacker from using an XSS attack to get the authentication cookie.

In general, security isn't something that can be tacked on as an afterthought, it has to be built in from the beginning.

[ Parent | on HN ]