“Drupalgeddon2” touches off arms race to mass-exploit powerful web servers

Re:“Drupalgeddon2” touches off arms race to mass-exploit pow... by tootie on Sunday April 22, 2018 @10:44AM (#16896370)

Some players are moving into this space. Headless CMS providers like Contentful or Prismic let you build a very nice content entry UI and asset manager. Then you can consume content dynamically via the API or set up triggers to build the site statically whenever content is updated.

[ Parent | on HN ]

Re:“Drupalgeddon2” touches off arms race to mass-exploit pow... by dreamfactored on Sunday April 22, 2018 @06:22PM (#16898976)

> set up triggers to build the site statically whenever content is updated

That's not only the same gnarly problem as cache invalidation but with a metric ton of filesystem writes on top of it.

[ Parent | on HN ]

Re:“Drupalgeddon2” touches off arms race to mass-exploit pow... by rainbowmverse on Sunday April 22, 2018 @03:59PM (#16898212)

Both of these appear to be aimed at developers.

[ Parent | on HN ]

Re:“Drupalgeddon2” touches off arms race to mass-exploit pow... by tootie on Sunday April 22, 2018 @06:01PM (#16898865)

They definitely appeal to IT teams which is a very different sales pitch than you would see for most enterprise CMS products, but rest assured the actual product is very user-friendly. The content entry UI is very straightforward and has easy to use hooks to live preview like any other CMS.

I spent a lot of years working in tech consulting and did a lot of CMS integrations. We desperately wanted to push clients to Contentful and away from ornery beasts like AEM, but Adobe can sell AEM by saying it's part of the "marketing cloud" and that it's magic power is in user engagement and analytics and whatever other marketingspeak lies. Contentful was the developer favorite, but it was hard to convince businesses it was in their best interests even though it totally was.

[ Parent | on HN ]