News for hackers. Stuff that matters.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by 8organicbits on Wednesday April 01, 2026 @12:51PM (#47603398)
I don't think it's the code that makes WordPress valuable. I've been learning WordPress recently and haven't been too impressed with the internals. WordPress is valuable because of the ecosystem and support. I have no doubt that WordPress will still be a thing in ten years. What's the support plan for EmDash? I see commits are mostly from a single developer.

E: Oh, I think it's an April fools joke, I'm embarrassed.

E2: Apparently not a joke.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by kbdot on Wednesday April 01, 2026 @01:01PM (#47603521)
Cloudflare doesn't do April fools jokes. In fact, 1.1.1.1 was released on April 1st back in 2018 and now it's one of the most used DNS service in the world.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by benatkin on Wednesday April 01, 2026 @01:14PM (#47603701)
It's a legit April Fools'.

On the initial commit:

> Some content is hidden

> Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

This for "a spiritual successor to WordPress".

Re:EmDash: A spiritual successor to WordPress and plugin sec... by a57721 on Wednesday April 01, 2026 @05:33PM (#47606823)
Isn't it normal for the initial commit to be large?
Re:EmDash: A spiritual successor to WordPress and plugin sec... by benatkin on Wednesday April 01, 2026 @08:12PM (#47608382)
A little larger, a lot of the time, though I like a small initial commit better. Though just a little larger. Not so large that it is too large to show on a GitHub page. That means not using version control properly.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by Zanfa on Wednesday April 01, 2026 @09:56PM (#47609137)
> Not so large that it is too large to show on a GitHub page.

Maybe not applicable in this case, but Github has a ridiculously low threshold for when it starts hiding diffs. Probably a limitation of their new React frontend.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by a57721 on Thursday April 02, 2026 @02:55AM (#47610864)
Usually when someone decides to share code with the world, they don't want to publish the actual development history. They publish the first version that is ready to go public as the first commit. With enough functionality etc.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by CodeWriter23 on Wednesday April 01, 2026 @04:19PM (#47606007)
8 years later and now I'm getting the 4 1's joke.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by avarun on Wednesday April 01, 2026 @04:42PM (#47606298)
I still don't get it
Re:EmDash: A spiritual successor to WordPress and plugin sec... by alt219 on Wednesday April 01, 2026 @06:07PM (#47607156)
1.1.1.1 has 4 1’s, as in 4/1, as in April 1 (or so I assume).
Re:EmDash: A spiritual successor to WordPress and plugin sec... by riffraff on Wednesday April 01, 2026 @05:37PM (#47606852)
I interpreted it back then as just following the tradition of 8.8.8.8, 4.4.4.4, 2.2.2.2
Re:EmDash: A spiritual successor to WordPress and plugin sec... by switz on Wednesday April 01, 2026 @05:43PM (#47606915)
4 1's == 4/1

could just be a coincidence

Re:EmDash: A spiritual successor to WordPress and plugin sec... by MikeNotThePope on Thursday April 02, 2026 @05:41AM (#47612122)
I presume if Elon sets up a CDN, the IP will be 20.20.20.20.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by jgrahamc on Wednesday April 01, 2026 @01:40PM (#47604036)
I can assure you this is not an April Fools. Cloudflare does not do that. This is a real project.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by reaperducer on Wednesday April 01, 2026 @02:05PM (#47604346)
I can assure you this is not an April Fools. Cloudflare does not do that.

It should. I miss the days when tech was interesting and fun.

Even Steve Jobs, for all his later-day revisionist hard-assed reputation, enjoyed the occasional Easter egg, inside joke, or April Fool's joke.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by HeWhoLurksLate on Wednesday April 01, 2026 @02:14PM (#47604465)
I appreciate a good April Fools joke, I also appreciate CloudFlare's approach of "we're extra serious today, here's some useful stuff for ya"
Re:EmDash: A spiritual successor to WordPress and plugin sec... by alsetmusic on Wednesday April 01, 2026 @02:13PM (#47604460)
I hated that shit. I'd load Slashdot and there was no real content or it was difficult to find real news amongst all the crap. It's not funny. It's annoying.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by Dylan16807 on Wednesday April 01, 2026 @03:44PM (#47605610)
Some of the april fools things can be annoying, but I have a big shrug for there being less real news for a day. Anything important will get through and most days don't have much interesting news anyway.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by reaperducer on Wednesday April 01, 2026 @02:49PM (#47604910)
I feel bad for you. That's a lot of anger over virtually nothing.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by alsetmusic on Wednesday April 01, 2026 @04:14PM (#47605943)
Would you be annoyed if HN went offline just for the hell of it for a day every year?

But you're right, I was an extremely angry person back then. Many years of therapy and deliberate ongoing work and I'm a radically different man. Thank goodness I got to the other side.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by reaperducer on Wednesday April 01, 2026 @05:47PM (#47606941)
Would you be annoyed if HN went offline just for the hell of it for a day every year?

No. Not even a little. HN is not food. HN is not water. HN is not my family or my job or in any way vital to my life. It's an amusement. A diversion.

I am not a FOMO victim.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by sophacles on Wednesday April 01, 2026 @05:48PM (#47606953)
There were some years in the 90s and early 2ks that had good april fool's jokes, and that was what bubbled up. Not everyone did, so the novelty also made the "meh" ones seem better. By 2008ish everyone was doing one, and most of them weren't very good. By 2012ish marketing got involved and almost all of them were terrible and unfunny.

It was a nice tradition but, like many things, the scene got too big and corporate. It was a zombie tradition for a while then slowly faded away.

In fact when cloudflare started releasing serious things on 4/1, I found it to be a refreshing subversion of the trope.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by Robdel12 on Wednesday April 01, 2026 @01:12PM (#47603665)
Hm, you might want to catch up on the Wordpress “open source” drama with WP.com vs .org, WP engine and Matt.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by reddalo on Wednesday April 01, 2026 @04:02PM (#47605807)
Oh, come on. It must be a joke. They can't be serious with this sloppy thing.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by thisislife2 on Wednesday April 01, 2026 @12:58PM (#47603481)
There's always https://textpattern.com/ which is also as old as Wordpress (older?) and better coded. (See also thttps://textpattern.org/ ).
Re:EmDash: A spiritual successor to WordPress and plugin sec... by zdragnar on Wednesday April 01, 2026 @01:21PM (#47603784)
It stores plugins as strings in the database, then pulls those strings back and evals them as PHP on requests.

"Better coded" is very much a subjective assessment.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by BodyCulture on Thursday April 02, 2026 @01:37AM (#47610358)
Thank you very much for sharing your research results!

I really appreciate your work and even more that you took time and risk exposing your findings, I wish more people did this.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by hatmanstack on Wednesday April 01, 2026 @12:59PM (#47603504)
There might be pie on your face but they stole my line, https://github.com/HatmanStack/kill-wordpress
Re:EmDash: A spiritual successor to WordPress and plugin sec... by 8organicbits on Wednesday April 01, 2026 @01:30PM (#47603912)
I think you need to account for the base rate. There's a lot of WordPress plugin vulnerability disclosures because there's a lot of WordPress plugins and there are enough deployments of the plugins to make searching for those vulnerabilities is worthwhile.

That site warns that WordPress plugins can be abandoned, but that's clearly not a WordPress specific issue. Sure some site could use SSG, but that's a different design.

I certainly don't want to claim WordPress security is good, but I'm not sure that site is measuring anything meaningful.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by hatmanstack on Wednesday April 01, 2026 @01:51PM (#47604175)
Just measured your visit, zing.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by codeulike on Wednesday April 01, 2026 @01:49PM (#47604150)
Its impressive work from CF that lots of people in this thread are unsure whether its a joke or not, like a delicately balanced april fools for the hn crowd
Re:EmDash: A spiritual successor to WordPress and plugin sec... by calvinmorrison on Wednesday April 01, 2026 @01:07PM (#47603600)
wordpress is valuable because it allows very bad developers / marketing people to write very bad code and get away with it, driving extremely low cost solutions for clients who are cost concious.

yes you want a global db handle sure ya lets delete all tables woohoo

Re:EmDash: A spiritual successor to WordPress and plugin sec... by busterarm on Wednesday April 01, 2026 @01:35PM (#47603981)
> wordpress is valuable because it allows very bad developers / marketing people to write very bad code and get away with it, driving extremely low cost solutions for clients who are cost concious.

You've sort of nailed it, but this isn't a bad thing. An alternative for these customers does not exist.

There's another vertical which is organizations that have armies of writers churning out content. Any kind of publisher or advertiser, basically. There is no better CMS for this. Large organizations like NYT, etc chose to write their own.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by sp1nningaway on Wednesday April 01, 2026 @02:29PM (#47604676)
>> wordpress is valuable because it allows very bad developers / marketing people to write very bad code and get away with it, driving extremely low cost solutions for clients who are cost concious.

> You've sort of nailed it, but this isn't a bad thing. An alternative for these customers does not exist.

Yes! I'm locked into WordPress, which I hate, because it's the only platform that will allow a non-developer to maintain it if I get hit by a bus.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by QuantumGood on Wednesday April 01, 2026 @03:53PM (#47605693)
I started building sites for clients in the late '90's, and quickly made "client can edit their phone number on all pages" a key requirement. Wordpress with a WYSIWYG page builder solves that — it's not the only solution, but it works pretty close to right out of the box.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by busterarm on Wednesday April 01, 2026 @02:41PM (#47604810)
Which also allows you to not be on call 24/7.

A decade ago I had to learn and run WordPress for a job. I held my nose up the stink was so bad. But quickly I learned how to manage it and have modern sensible practices around it and I've probably gotten more real value out of it than any other CMS or web framework I've touched. That includes Rails.

Thankfully I don't have to do that anymore, but you can sanely and safely run WordPress today and there's zero shame in it.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by bombcar on Wednesday April 01, 2026 @02:47PM (#47604885)
There are options that can be run by anyone, but they're often very constrained in what they can do and show.

Wordpress is solidly in that middle ground where you can do a large amount of customization if someone'll pay for it, and then they can do the day-to-day care and feeding of it.

Everything else has either been much worse in all possible ways (Joomla!) or has been a collection of developer wish-lists unusable by anyone (Drupal).

Re:EmDash: A spiritual successor to WordPress and plugin sec... by carlosjobim on Wednesday April 01, 2026 @08:37PM (#47608589)
There are better alternatives, for as little as $10 per month. If your clients think such a cost is too much, then you want better clients.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by calvinmorrison on Wednesday April 01, 2026 @02:21PM (#47604570)
yep. we like it because with shopify or other platforms, you run into limitations. with Wordpress I can literally just whip it into whatever shape i want.
Re:EmDash: A spiritual successor to WordPress and plugin sec... by coldtea on Wednesday April 01, 2026 @07:34PM (#47608048)
If it powers 30-50% of the web, including thousands of major websites, it works at some level.

Ivory tower "just don't use a low-cost solution" people aren't going to hand over money to people to use a higher-cost one, are they?

And ignoring why it's used besides the sloppiness means they have a huge blind spot to what people actually want:

"wordpress is valuable because it allows very bad developers / marketing people to write very bad code and get away with it, driving extremely low cost solutions for clients who are cost concious"

Nothing in this quote doesn't describe very real needs.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by gbibas on Wednesday April 01, 2026 @04:28PM (#47606129)
Building plugins across WordPress and Shopify right now — can confirm the ecosystem is the entire moat. The code quality is genuinely terrible, but it doesn't matter because every SaaS tool on earth has a WordPress connector.

The real test for any WordPress replacement: can a non-technical business owner hire someone on Fiverr to customize it in an afternoon? WordPress passes that test. Nothing else does. That's not a technology problem, it's a labor market problem.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by jimnotgym on Wednesday April 01, 2026 @05:02PM (#47606527)
I did that once, employed someone on Fiverr to do a WordPress site. They installed a load of plugins for no reason, made a mess, then gave me my money back. I went back to a static site.

That has been my experience, low barrier to entry, low price, shoddy work. Or hire an agency, pay top dollar for little work.

Re:EmDash: A spiritual successor to WordPress and plugin sec... by gbibas on Wednesday April 01, 2026 @09:47PM (#47609086)
Ha, yeah that's the other side of it — low barrier to entry cuts both ways. The WordPress talent pool is huge but unfiltered. Still, the fact that pool exists at all is what keeps WordPress dominant. Nobody's hiring Fiverr gigs to customize an EmDash site yet.