Hacker News Reader

Well, back in the day this lead to thousands upon thousands of vulnerable WordPress sites

False equivalence. That the creators of various PHP blogging platforms sucked at security does not invalidate the poster's point that a self-hosted CMS with a simple comment system is indeed much simpler and easier to reason about.

I suppose it's rather the "without maintenance" part. Had everyone updated their WordPress sites the problem would've been much less.

The wordpress core can be kept up to date but the vulnerabilities from plugins, relying on fixes and updating plugins i think was more the problem than the core.

In the 2010s if you left a wordpress blog unattended even with the official default filter plugin it would fill with spam comments. I dont know if thats still a problem.

My own blog - which gets maybe a couple of posts a year these days, and almost no audience - had 59 spam comments so far today. It really is time I turned off comments.

Same here with any blog ive ever hosted

Reply on news.ycombinator.com