Re:Script kiddies have awesome tools
by martey on Tuesday November 04, 2008 @09:58PM
(#354124)
Most of the blog exploits on the web (including the one in the article) seem to be focused on WordPress. Are there are a large number of people exploiting vulnerabilities in other blogging platforms, like Movable Type?
[ Parent
| on HN ]
First, I assume this is for the same reason that most viruses are for Windows -- WordPress is one of the most common species in the ecosystem.
Also, If I understand the architecture of Movable Type correctly, it renders much of the site into static pages. I would expect that this tends to reduce the number of points where vulnerabilities would be possible, at least as far as points where it might be exploited via causing it to execute with malicious parameters via an HTTP request. i.e. In Wordpress, every page you load is the result of the execution of some PHP scripts, while in a blog that is rendered to a bunch of static files, it's conceivable that the only thing that unauthenticated users can mess with is the comment system.
Yep, much of Movable Type is static. I think there is an option for dynamic pages but by default it's static.
Re:Script kiddies have awesome tools
by niels_olson on Tuesday November 04, 2008 @10:23PM
(#354145)
target platform is presumably based on the dominance of the platform in the market.
http://www.google.com/trends?q=joomla%2C+wordpress%2C+drupal...