News for hackers. Stuff that matters.

A comment on WordPress themes, plugins backdoored in supply chain attack. Parent comment

Re:WordPress themes, plugins backdoored in supply chain attack by nkozyra on Sunday January 23, 2022 @08:25AM (#30045972)
To be fair, I referred to it as "similarly disliked." From a technical sense I'm less afraid of malicious plugins destroying my business like I might be with WP.

My stance is if I'm doing X, my preference is to find software or a platform that does X but not X, Y and Z.

[ Parent | on HN ]
Re:WordPress themes, plugins backdoored in supply chain attack by propogandist on Sunday January 23, 2022 @02:53PM (#30049823)
landing on a Wix page is noticeably worse for someone who tries to limit ads and scripting. Everything has to pretty much be off for a Wix page to work, it is very heavy.

I can see how the lack of plugins may make it more secure though. I haven’t tried Wix, but squarespace is pretty good for getting something out the door quickly. It’s quite limited otherwise and the customization of wordpress makes it a very appealing CMS for most.

If WP provides security screens for add-ons and integrates it into their hosting business it would protect their ecosystem moat.

[ Parent | on HN ]