Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

EmDash – A spiritual successor to WordPress that solves plugin security

blog.cloudflare.com

Post reply on HN
Print view View original

301–310 of 558 posts

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#301

Post by theLiminator »

0xbadcafebee wrote: post #110

Serious question: Why is everyone still using JavaScript to AI-code projects? You can vibe-code apps with real languages now. There's no reason to use an interpreted, bloated, weird language anymore. The only reason interpreted languages were a thing was so you could edit a file and re-run it immediately without a compile step. Compiling is now cheap, and you don't have to build expertise in a new language anymore. A…

Yeah, my theory is that Rust is going to be a somewhat "local optima" for a while for LLMs.

LLMs have a couple major problem, they hallucinate and make mistakes. So the ideal way to use them is to constrain them as much as possible with formal methods. Rust's type system is a formal proof of some forms of correctness, this will let "vibe-coding" work to a much higher degree than with other languages.

In the very long run, I suspect that all vibe-coding will actually occur in a language with dependent types and we'll push as much as possible into being proven correct at compile-time. Since the cost of generating code is plummeting, and thus the sheer volume of code will be exponentially rising, this is the only way to prevent an unsurmountable mountain of errors.

Formal methods and LLMs are a match made in heaven.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#302

Post by amanzi »

So this is just a "similar" CMS to WordPress in that it has themes and plugins, and you can publish pages, posts, tags, categories, etc. But there are lots of similar CMS out there, and this one isn't "compatible" with WordPress since you obviously can't just take a WordPress theme or plugin and install it in your EmDash site. So I don't even know why the focus on WordPress here - this is just yet another CMS that offers similar features.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#303

Post by omnimus »

abimaelmartell wrote: post #297
earthlingdavey wrote: post #260

This is very interesting. I've worked with WordPress on and off for 10 years, and I'm convinced that this project has got 2 things absolutely spot on. TypeScript and Worker plugins. I've given the security, or lack of, WP a lot of thought recently. In WP malicious plugin has access to the database, enfironment variables, rendering text on screen (think XSS). Luckily, a thoughtfully designed plugin system can mitigate…

I used to work with Wordpress a lot, but last time was a couple years ago. The appeal for the company i was working with was ease of installation on legacy servers (FTP). You would just upload the files, and it worked. No CLI tools, no dependency management, no build tools. But yeah, security was a big issue. Constant hacks.

The constant hacks are side effect of Wordpress popularity. Every discovered security flaw is exploited by bots almost immediately. Unless you keep up with the updates you are very vulnerable. It is not because wordpress is built on "legacy" stack. Other CMSes on that stack (and many are very popular) don't have this problem.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#306

Post by dirkc »

The thing that has always stood out to me about WordPress, is that you can get a site up without any of the usual technical steps I associate with creating a site, but still have access to the innards of the site. Does it often go wrong, sure, but it is a lot more approachable for less technical users.

In contrast, typical web frameworks (even static sites) require a code change, build, deploy, etc to update many aspects of a site.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#307

Post by reaperducer »

alsetmusic wrote: post #244
reaperducer wrote: post #149

Earlier quoted context omitted.

I feel bad for you. That's a lot of anger over virtually nothing.

Would you be annoyed if HN went offline just for the hell of it for a day every year? But you're right, I was an extremely angry person back then. Many years of therapy and deliberate ongoing work and I'm a radically different man. Thank goodness I got to the other side.

Would you be annoyed if HN went offline just for the hell of it for a day every year?

No. Not even a little. HN is not food. HN is not water. HN is not my family or my job or in any way vital to my life. It's an amusement. A diversion.

I am not a FOMO victim.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#308

Post by sophacles »

reaperducer wrote: post #111
jgrahamc wrote: post #91

Earlier quoted context omitted.

I can assure you this is not an April Fools. Cloudflare does not do that. This is a real project.

I can assure you this is not an April Fools. Cloudflare does not do that. It should. I miss the days when tech was interesting and fun. Even Steve Jobs, for all his later-day revisionist hard-assed reputation, enjoyed the occasional Easter egg, inside joke, or April Fool's joke.

There were some years in the 90s and early 2ks that had good april fool's jokes, and that was what bubbled up. Not everyone did, so the novelty also made the "meh" ones seem better. By 2008ish everyone was doing one, and most of them weren't very good. By 2012ish marketing got involved and almost all of them were terrible and unfunny.

It was a nice tradition but, like many things, the scene got too big and corporate. It was a zombie tradition for a while then slowly faded away.

In fact when cloudflare started releasing serious things on 4/1, I found it to be a refreshing subversion of the trope.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#309

Post by znort_ »

0xbadcafebee wrote: post #110

Serious question: Why is everyone still using JavaScript to AI-code projects? You can vibe-code apps with real languages now. There's no reason to use an interpreted, bloated, weird language anymore. The only reason interpreted languages were a thing was so you could edit a file and re-run it immediately without a compile step. Compiling is now cheap, and you don't have to build expertise in a new language anymore. A…

> with real languages now.

how is javascript not a real language?

> There's no reason to use an interpreted

there are loads and loads of reasons to use "interpreted" languages. that you can't think of even a single one while still pretending to be knowledgeable in the field is really intriguing.

> bloated, weird language

oh, i see, this is all just a religious rant. carry on!

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#310

Post by [deleted] »

reddalo wrote: post #227
8organicbits wrote: post #27

I don't think it's the code that makes WordPress valuable. I've been learning WordPress recently and haven't been too impressed with the internals. WordPress is valuable because of the ecosystem and support. I have no doubt that WordPress will still be a thing in ten years. What's the support plan for EmDash? I see commits are mostly from a single developer. E: Oh, I think it's an April fools joke, I'm embarrassed. E…

Oh, come on. It must be a joke. They can't be serious with this sloppy thing.

[deleted]
Post reply on HN