News for hackers. Stuff that matters.

A comment on Makesite.py – Simple, lightweight, and magic-free static site/blog generator. Parent comment

Re:Makesite.py – Simple, lightweight, and magic-free static ... by drunken-serval on Sunday November 24, 2019 @01:12PM (#21622171)
Any software has vulnerabilities. You have to keep the operating system on any server patched and set up basic defenses even for a static site.
[ Parent | on HN ]
Re:Makesite.py – Simple, lightweight, and magic-free static ... by theamk on Sunday November 24, 2019 @06:43PM (#21624334)
Well, there are more and less vulnerable things.

For example, making sure that software cannot modify itself will ensure that even if server is vulnerable, it won’t get permanently compromised. Having a server that does not execute any file with right extension makes sure that sanitization errors do not lead to code execution. Having admin system be separate from main site makes sure XSS cannot cause compromises.

[ Parent | on HN ]