News for hackers. Stuff that matters.

A comment on WordPress Is in Trouble. Parent comment

Re:WordPress Is in Trouble by pier25 on Monday January 13, 2025 @04:05PM (#42689303)
Even if it's remotely possible to hack Nginx... what's the motivation to hack a static site?

There's no DB with juicy data and no compute to abuse for mining crypto or running DDOS attacks.

[ Parent | on HN ]
Re:WordPress Is in Trouble by arccy on Monday January 13, 2025 @04:15PM (#42689472)
trick users into clicking malicious links, host ads, seo link farm, host other questionable content, or some people just like to deface websites
[ Parent | on HN ]
Re:WordPress Is in Trouble by mfkp on Monday January 13, 2025 @04:20PM (#42689550)
Usually SEO spam link insertion and generic Viagra spam redirects...
[ Parent | on HN ]
Re:WordPress Is in Trouble by prepend on Monday January 13, 2025 @04:25PM (#42689606)
Similar motivation as hacking a Wordpress site, putting seo spam out there.

There’s less payoff, but people still do it.

[ Parent | on HN ]
Re:WordPress Is in Trouble by pier25 on Monday January 13, 2025 @04:53PM (#42689931)
yeah but the difficulty in hacking Nginx vs Wordpress must be orders of magnitude more difficult though
[ Parent | on HN ]
Re:WordPress Is in Trouble by dowager_dan99 on Monday January 13, 2025 @04:47PM (#42689866)
you can change the payload sent to users, static or not. If you serve javascript you're serving dynamic, runtime dependency injecting code.
[ Parent | on HN ]