“Drupalgeddon2” touches off arms race to mass-exploit powerful web servers

Re:“Drupalgeddon2” touches off arms race to mass-exploit pow... by Roritharr on Sunday April 22, 2018 @04:06AM (#16895213)

Once is enough though. Most entities aren't equipped for 8 hour turnaround times to update something that can be 24/7/356.

Think about all the schools that paid someone once for this. The Solution is easy but the structure of responsibility is not there.

[ Parent | on HN ]

Re:“Drupalgeddon2” touches off arms race to mass-exploit pow... by TekMol on Sunday April 22, 2018 @04:12AM (#16895228)

Schools? Hmm...

    it's a bad idea to host and maintain
    a presence with a CMS yourself

I would have thought saying so on Hacker News addresses the readership of Hacker News. Aka myself. So I objected.

Talking about schools. I would say it depends. If the kids run the CMS I would say the learning outweights the downsides of having some VM hacked that only holds public information. So for a CMS with public information I would say: Let the kids have fun with it!

There might also be use cases where that's not a good idea. Really depends on what the CMS is used for.

[ Parent | on HN ]

Re:“Drupalgeddon2” touches off arms race to mass-exploit pow... by Roritharr on Sunday April 22, 2018 @04:33AM (#16895282)

Well I'd guess many readers such as I have worked for schools, churches and other institutions that needed a website, it's a very common type of customer. The hard problem is, you can't usually really help them with this level of problem with their level of budget for it when choosing the common CMS Solutions.

[ Parent | on HN ]