Hacker News Reader

Comment by Mojah | Hacker News Reader

Yet here we are; - Drupal 7: manual updates, or funky drush commands - Magento: requires running shell scripts (!!) to patch at the CLI - Joomla: no auto updates - Typo 3: no auto updates - ...

Composer helps, but it helps developers. It does not help the average user that has no clue on how to apply those patches.

People download a CMS from the internet, throw it on a cheap host and expect it to work. Updates? What are those?

View on HN

I'm with you on this. WordPress is acknowledging the actual behavior of the people who use it and aiming to be secure inside that reality instead of telling people they are doing it wrong and to learn how to internet. That is absolutely laudable and in practice prevents a lot of real problems and lifts people up instead of puts them down.

And that's the problem they shouldn't be doing that. Hosting a website is not a fun weekend project you get from Target/Walmart as a DIY kit.

People wouldn't be happy if I started building my own car to just drive around where ever I felt like, making it 'easy' and 'safe' to just throw up a website anywhere is an excellent way to get hacked.

>Hosting a website is not a fun weekend project you get from Target/Walmart as a DIY kit.

Why? It's not like most websites are mission critical.

Heck, even if a major business website went down for a couple of days, it wouldn't be that much damage anyway compared to other things that can and regularly do happen to the supply chain or market...

>making it 'easy' and 'safe' to just throw up a website anywhere is an excellent way to get hacked

Yeah, and so? Getting hacked is the end of the world?

For Mummy-blogger's site about how awesome her kid is? Probably not the end of the world, expect that now her site is sending spam and hosting malware. You'd be pissed if your neighbour left their house unlocked while they went on holiday and it turned into a crack-den.

Drupal 7 can auto-update by cron.

Reply on news.ycombinator.com