News for hackers. Stuff that matters.

A comment on Why are clients shocked by the price for web development?. Parent comment

Re:Why are clients shocked by the price for web development? by vinceguidry on Saturday May 11, 2013 @12:42PM (#5691159)
They're not minor problems. Please don't underestimate the epidemic of hacked sites that are a direct result of end-user unwillingness to upgrade and possibly break their site. This is a problem that can't be solved without significant architectural changes. Customers are more willing to risk getting their websites pwned than to risk an upgrade that may take their site down, so upgrades often aren't done for years.

It's not a small problem, its a huge one, and the primary reason why I can no longer recommend Wordpress.

[ Parent | on HN ]
Re:Why are clients shocked by the price for web development? by _mpf on Saturday May 11, 2013 @01:21PM (#5691292)
I agree with "Security is a process, not a product." AFAIK security is important for WordPress team. There is a lot of good documentation on a project site and there are some materials from WordCamps (fe. http://codex.wordpress.org/Hardening_WordPress)

Latest WP "hack" via botnets was because of weak logins and passwords which are set by the users. Can you blame WP devs for that?

Speaking about upgrading; making updates easier it`s also one of the goals of the project. Also it isn`t that hard when you develop WP sites using information from WordPress Codex docs.

I hope it will get better with time, and as i wrote people are working to get things better. Sorry to hear that you are not going to recommend WordPress any longer.

[ Parent | on HN ]