Is everyone shying away from wordpress for security reasons? I like the simplicity of wordpress, but in the back of my mind I am concerned that one day I'll visit my site and it will have viagra ads all over it. It would be less of a concern if I blogged daily, but I go to it rarely enough that it could be hosting malware (and making me look like an idiot) for quite a while before I realized it.
Typically these advertisements find their way onto a site through vulnerable plugins. To minimize this, you can install the Wordfence Plugin and it will email you when to update. Another good plugin is rename-wp-login.php which will move the site.com/wp-login/ to site.com/somethingDifficultToGuess and have Wordfence not cache and robots not index that page.
Ask HN: What are good blogging platforms for programmers?
51–60 of 87 posts
Re: Ask HN: What are good blogging platforms for programmers?
#52Tech.pro is a blogging platform / professional network catered only to the tech world (primarily software development).
Our editor is markdown-based and handles code snippets etc. quite well in addition to having support for embedded frame sites such as jsfiddle/codepen/sqlfiddle/etc.
Although you're writing on the TP platform, you still retain full ownership of your data. You can even download a neatly organized archive of all your blogs (and revisions) in both Markdown and html format at any time.
My Blog: http://tech.pro/leland/blog My Profile: http://tech.pro/leland
Re: Ask HN: What are good blogging platforms for programmers?
#53Is everyone shying away from wordpress for security reasons? I like the simplicity of wordpress, but in the back of my mind I am concerned that one day I'll visit my site and it will have viagra ads all over it. It would be less of a concern if I blogged daily, but I go to it rarely enough that it could be hosting malware (and making me look like an idiot) for quite a while before I realized it.
You should visit it at least often enough to keep the core and plugins updated, in which case you should be fine.
Re: Ask HN: What are good blogging platforms for programmers?
#54Is everyone shying away from wordpress for security reasons? I like the simplicity of wordpress, but in the back of my mind I am concerned that one day I'll visit my site and it will have viagra ads all over it. It would be less of a concern if I blogged daily, but I go to it rarely enough that it could be hosting malware (and making me look like an idiot) for quite a while before I realized it.
I like WordPress for the basic use case, and if you're self hosting it's super easy to get up and running. The downside is that it's popular (thus a target), and left unpatched or unprotected it's easy to mess something up and become part of those Viagra ad rings ;) I've hosted, set up, or fixed dozens of WordPress blogs, and a few have been compromised for one reason or another (you find lots of PHP shells in upload…
Re: Ask HN: What are good blogging platforms for programmers?
#55Re: Ask HN: What are good blogging platforms for programmers?
#56TIL we are all now mature and educated in the perils of the Not Invented Here syndrome so nobody will be telling you to go write your own . (and this makes me sad)
...although I might not've hit submit, since I'm not sure I'd want to participate in the argument that'd be sure to come next.
Re: Ask HN: What are good blogging platforms for programmers?
#57TIL we are all now mature and educated in the perils of the Not Invented Here syndrome so nobody will be telling you to go write your own . (and this makes me sad)
Fair, but I think most of the things being suggested here are open source, so the truly curious can use them as a starting point. Alternatively: it's good to see what's out there so that when you do (inevitably) write your own, you know /what you want/.
Just as a counterpoint, I've realized recently that using other things before making your own changes what you'd make, and not necessarily in a positive way. You find yourself thinking in terms of the constraints and features of what you've used, rather than starting with a blank canvas and coming up with something you haven't seen before.
Re: Ask HN: What are good blogging platforms for programmers?
#58Earlier quoted context omitted.
A variation of this is to push your Jekyll site to S3 and put CloudFront in front of it. It'll cost you a small amount of money each month (my sorely neglected blog costs me about $0.02/month).
Wow, that's crazy cheap. What would a day on HN do I wonder?
Re: Ask HN: What are good blogging platforms for programmers?
#59Some hip ppl might try to use a makerbot or w/e but to get any kind of height on the platform u will need a LOT of plastic.
Re: Ask HN: What are good blogging platforms for programmers?
#60Is everyone shying away from wordpress for security reasons? I like the simplicity of wordpress, but in the back of my mind I am concerned that one day I'll visit my site and it will have viagra ads all over it. It would be less of a concern if I blogged daily, but I go to it rarely enough that it could be hosting malware (and making me look like an idiot) for quite a while before I realized it.
* If you host yourself it is a lot of maintenance to keep wordpress patched, spam cleared, etc.
* It is dynamic, so each page needs to be built based on a query to the mysql database. For a handful of users this is no big deal. If you hit the HN front page your site will be overloaded.
On the other hand, Wordpress is good if you blog on the go and want to use the ipad app or whatever to post/maintain your blog. It might also be good if you have multiple contributors, or update your blog so frequently (minutes) that rebuilding the site to deploy it is an impediment.
Octopress / Jekyll is a good alternative:
* Content is pre-formatted HTML files, no database to get in the way or slow things down.
* Tons of people use it, so it is well known.
* Lots of publishing options -- github, heroku, s3 + cloudfront, etc.
* "Features" like discussion forums can be linked in from disqus or other purpose-built services.
* Publishing is easy via running a script, although that means lugging your laptop around or using an ssh client on your tablet.
* With static HTML the attack surface is substantially less compared to a PHP site with a back-end database, so security should be significantly better and easier to deal with.