Re:In praise of continuous deployment: The WordPress.com story
by jerf on Wednesday May 19, 2010 @04:42PM
(#1362276)
"First of all, you are lumping WordPress the open source software and WordPress.com the hosted service together."
Yes I am, and I apologize. I did not realize there was much of a distinction. I would edit away much of my message now if I could.
But...
"Also, our fast deployment model helps to very quickly fix whatever problems there may."
Security problems do not work that way. Rapid deployment does not recover your user database that the hacker got, just as one example. Rapid deployment may close XSS holes, but doesn't undo the damage they did while open. And you don't need rapid deployment to close XSS anyhow, historically lots of people have managed that without rapid deployment. I still see it as potentially beneficial on some fronts but an enormous risk on other fronts I care about a lot.
Yes I am, and I apologize. I did not realize there was much of a distinction. I would edit away much of my message now if I could.
But...
"Also, our fast deployment model helps to very quickly fix whatever problems there may."
Security problems do not work that way. Rapid deployment does not recover your user database that the hacker got, just as one example. Rapid deployment may close XSS holes, but doesn't undo the damage they did while open. And you don't need rapid deployment to close XSS anyhow, historically lots of people have managed that without rapid deployment. I still see it as potentially beneficial on some fronts but an enormous risk on other fronts I care about a lot.