Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

EmDash – A spiritual successor to WordPress that solves plugin security

blog.cloudflare.com

Post reply on HN
Print view View original

331–340 of 558 posts

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#331

Post by alluro2 »

amanzi wrote: post #302

So this is just a "similar" CMS to WordPress in that it has themes and plugins, and you can publish pages, posts, tags, categories, etc. But there are lots of similar CMS out there, and this one isn't "compatible" with WordPress since you obviously can't just take a WordPress theme or plugin and install it in your EmDash site. So I don't even know why the focus on WordPress here - this is just yet another CMS that of…

WordPress is the most popular CMS, and, at any moment in time, especially lately, there are a lot of people looking for a "WP alternative". I agree that it's not actually compatible, but it seems they tried to make it similar just enough to be able to use the word without 100% lying and attract people that way.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#332

Post by droptablemain »

solarkraft wrote: post #102
rgbrenner wrote: post #77

> Solving scale-to-zero for WordPress hosting platforms > WordPress is not serverless Just not accurate. WordPress doesn't prevent this.. It's up to hosting providers to work on their infra so it can run in a serverless fashion. For example: https://www.agiler.io That's serverless wordpress that scales to zero.. no changes to WordPress, plugins or anything else.. just platform infra.

Last time I checked Wordpress was completely fine living in a couple of PHP files on a webspace. That’s like the pinnacle of „serverless“, is it not?

Not even a little bit.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#333

Post by bryanhogan »

perlgeek wrote: post #251
embedding-shape wrote: post #7

> Our name for this new CMS is EmDash. We think of it as the spiritual successor to WordPress. It’s written entirely in TypeScript. It is serverless, but you can run it on your own hardware or any platform you choose. Plugins are securely sandboxed and can run in their own isolate, via Dynamic Workers, solving the fundamental security problem with the WordPress plugin architecture. And under the hood, EmDash is power…

I love building static (or statically generated) websites, but all too often, customers want dynamic content. And what's worse, they don't tell you up-front, because they don't really understand the difference. "I need a website for my bakery". "What's supposed to be on it?" "Our address, opening times, a few pictures". I build them a static website. "Now I need a contact form". Ok, that doesn't really fit into a sta…

With Astro you can build a static site and if you do want dynamic content later on you can, so you aren't really backed into a corner nowadays.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#334

Post by gman83 »

george_perez wrote: post #25
quantummagic wrote: post #16

Earlier quoted context omitted.

That makes it look more like an April fools joke. All the commits are from today.

Cloudflare specifically launches things on April 1st a lot of times. https://x.com/Cloudflare/status/1907055975057506793 They announced 1.1.1.1 on April 1st way back in 2018 too.

Gmail was also launched on April 1st. The fact that it came with 1GB of storage instead of Hotmail, which limited you to something like 20MB, made people think it was an April Fool's joke.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#335

Post by coldtea »

calvinmorrison wrote: post #57
8organicbits wrote: post #27

I don't think it's the code that makes WordPress valuable. I've been learning WordPress recently and haven't been too impressed with the internals. WordPress is valuable because of the ecosystem and support. I have no doubt that WordPress will still be a thing in ten years. What's the support plan for EmDash? I see commits are mostly from a single developer. E: Oh, I think it's an April fools joke, I'm embarrassed. E…

wordpress is valuable because it allows very bad developers / marketing people to write very bad code and get away with it, driving extremely low cost solutions for clients who are cost concious. yes you want a global db handle sure ya lets delete all tables woohoo

If it powers 30-50% of the web, including thousands of major websites, it works at some level.

Ivory tower "just don't use a low-cost solution" people aren't going to hand over money to people to use a higher-cost one, are they?

And ignoring why it's used besides the sloppiness means they have a huge blind spot to what people actually want:

"wordpress is valuable because it allows very bad developers / marketing people to write very bad code and get away with it, driving extremely low cost solutions for clients who are cost concious"

Nothing in this quote doesn't describe very real needs.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#336

Post by myhf »

danudey wrote: post #81
andy_xor_andrew wrote: post #51

> x402 is an open, neutral standard for Internet-native payments. It lets anyone on the Internet easily charge, and any client pay on-demand, on a pay-per-use basis. A client, such as an agent, sends a HTTP request and receives a HTTP 402 Payment Required status code. In response, the client pays for access on-demand, and the server can let the client through to the requested content. Fascinating. Cloudflare is envis…

If you can find a way to trick agents into always accepting your payment required then you could set up a tarpit generating trash content or an infinite string of redirects or "read this other page for more info", charging extra for each one.

> you could set up a tarpit generating trash content

and you could call it "EmDash"

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#337

Post by giancarlostoro »

embedding-shape wrote: post #7

> Our name for this new CMS is EmDash. We think of it as the spiritual successor to WordPress. It’s written entirely in TypeScript. It is serverless, but you can run it on your own hardware or any platform you choose. Plugins are securely sandboxed and can run in their own isolate, via Dynamic Workers, solving the fundamental security problem with the WordPress plugin architecture. And under the hood, EmDash is power…

Astro is a static site generator. This CMS outputs static HTML as an end result, am I missing a concern?

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#338

Post by madrox »

notahacker wrote: post #295
madrox wrote: post #183

Earlier quoted context omitted.

I'm getting so exhausted of the "slop" accusation on new project launches. There are legit criticisms of EmDash in the parent comment that are overshadowed by the implication it was AI coded and, thus, unusable quality. The problem is there's no beating the slop allegation. There's no "proof of work" that can be demonstrated in this comment section that satisfies, which you can see if you just keep following the enti…

They called the project EmDash and launched it on April 1st with a blog which brags about how little effort it took to write because of agents before even saying what it is . If the product launch involves dressing the engineering team up in duck suits and releasing to a soundtrack of quacking, it's really not surprising people are asking the guy they hid behind the Daffy mask on why he's dressed as a duck rather tha…

There's plenty of other comments saying this. It isn't that I don't understand, and need a clever metaphor.

But to run with your metaphor, can we, maybe, just ignore the quacking since we all know that's just how you get attention these days and instead focus on that other stuff? Because it seems like asking about the duck mask will never produce a satisfactory answer and instead turn into a debate on the merits of ducks.

Dare I suggest that this debate has become boring and beside the point. Unless someone on HN has been living under a rock they've already made up their mind about ducks.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#339

Post by nulltrace »

arcfour wrote: post #271
FlamingMoe wrote: post #86

A WordPress spiritual successor backed by Cloudflare sounds great in theory, but the headline feature, plugin isolation via Dynamic Workers, only works on Cloudflare's runtime. On any other host it's just a TypeScript CMS without the security model that justifies its existence. Open source but architecturally locked in.

Workerd (the platform for Workers) is open source though? You could run your own? And people do run their own, at least according to Cloudflare.

Open source runtime, not the orchestration layer on top.
Post reply on HN