Re:Tipe raises $2.1M seed round to build a customizable CMS ...
by tdeck on Tuesday August 25, 2020 @07:45PM
(#24277582)
> WordPress is okay if you have a site that you don't really care about and isn't worth hacking
Unfortunately all sites are worth hacking to host phish kits (fake login pages for phishing), and hosting one will get your website added to browser warn lists and flagged by search engines. There seem to be automated bots scanning for vulnerable WordPress sites so it's possible to become a target without much attention from the attacker.
Re:Tipe raises $2.1M seed round to build a customizable CMS ...
by john-shaffer on Tuesday August 25, 2020 @07:53PM
(#24277632)
This is true, but I would hope that readers here know enough to at least keep WordPress up-to-date. Most attacks target old exploits. There are millions of small WordPress sites that may never get hacked if they stay updated. If you become big enough, however, you become a much more likely target for zero-days. In that case, you probably don't want to be running WordPress any more than you want to be running Windows.
Gatsby is not a CMS. It would be very nice to have a well-designed and supported CMS that is actually secure and efficient by default.
> How much more complicated can it get then "Here is HTML, CSS and JS put it on a webserver."?
My favorite so far is the combination of WordPress and Gatsby in such a way that you get the worst of both worlds. E.g. building a single page requires creating 10-20 posts in WP, with zero ability to see what changes will look like without actually deploying the site. All this complexity instead of just setting rel="preload".