Comments on: Wordpress suitable for SEOs? http://www.timnash.co.uk/04/2008/wordpress-security/ The SEO Consultant Wed, 20 Aug 2008 11:31:32 +0000 http://wordpress.org/?v=2.6 By: Grumpy Links the next installment • Tim Nash UK SEO Blog http://www.timnash.co.uk/04/2008/wordpress-security/#comment-1645 Grumpy Links the next installment • Tim Nash UK SEO Blog Tue, 15 Jul 2008 13:15:19 +0000 http://www.timnash.co.uk/?p=130#comment-1645 [...] Wordpress 2.6 guess what your going to upgrade! [...] [...] Wordpress 2.6 guess what your going to upgrade! [...]

]]> By: Don’t Be Fooled By April’s Links - This Month In SEO 4/08 | TheVanBlog | Van SEO Design http://www.timnash.co.uk/04/2008/wordpress-security/#comment-936 Don’t Be Fooled By April’s Links - This Month In SEO 4/08 | TheVanBlog | Van SEO Design Wed, 30 Apr 2008 23:57:40 +0000 http://www.timnash.co.uk/?p=130#comment-936 [...] Wordpress suitable for SEOs? [...] [...] Wordpress suitable for SEOs? [...]

]]> By: Dave L http://www.timnash.co.uk/04/2008/wordpress-security/#comment-921 Dave L Fri, 25 Apr 2008 19:49:31 +0000 http://www.timnash.co.uk/?p=130#comment-921 My point regarding Windows "vs." Wordpress is that Windows is exploited (leaving aside the word "hacked") even when updated and protected by anti-malware solutions. And staying updated---which isn't always possible, as Tim points out---is not a 100% secure defense. My point regarding Windows “vs.” Wordpress is that Windows is exploited (leaving aside the word “hacked”) even when updated and protected by anti-malware solutions. And staying updated—which isn’t always possible, as Tim points out—is not a 100% secure defense.

]]> By: Jim Mcnelis http://www.timnash.co.uk/04/2008/wordpress-security/#comment-920 Jim Mcnelis Fri, 25 Apr 2008 14:20:27 +0000 http://www.timnash.co.uk/?p=130#comment-920 Sounds and reads like a recommendation to me. Your article suggests that there are better options out there than Wordpress. You mention Drupal. Even without explicitly saying Drupal is better than Wordpress, the article and comments suggest this fact. I doubt I am the only one to walk away form this article with this impression. It's a great article for what it's worth, I just disagree with your conclusion: <blockquote>I really like Wordpress but I do not recommend it to my commercial clients we simply do not think it is compatible with modern IT solutions and until the development team leave the Update or Die philosophy it will stay inappropriate and will lose out to mature systems such as Drupal."</blockquote> Sounds and reads like a recommendation to me.

Your article suggests that there are better options out there than Wordpress. You mention Drupal. Even without explicitly saying Drupal is better than Wordpress, the article and comments suggest this fact. I doubt I am the only one to walk away form this article with this impression.

It’s a great article for what it’s worth, I just disagree with your conclusion:

I really like Wordpress but I do not recommend it to my commercial clients we simply do not think it is compatible with modern IT solutions and until the development team leave the Update or Die philosophy it will stay inappropriate and will lose out to mature systems such as Drupal.”

]]> By: Tim Nash http://www.timnash.co.uk/04/2008/wordpress-security/#comment-919 Tim Nash Fri, 25 Apr 2008 13:52:57 +0000 http://www.timnash.co.uk/?p=130#comment-919 Jim I think you should reread the article and comments as at no point did I ever recommend Drupal over Wordpress I did say Drupal has a more mature approach which from an IT point of view probably makes it a more likely choice. What I did recommend was Wordpress developers to adopt a similar mentality to that of Drupal/Plone both of which are open source application and of which have both patches and upgrades, lifecycles and indeed some basic roadmap as to the future. Indeed to quote myself from the article... <blockquote> Drupal is not more any more secure indeed there are more security bulletins for it then Wordpress but it has a patch and upgrade path which provides support for earlier versions in the form of security patches. </blockquote> Jim I think you should reread the article and comments as at no point did I ever recommend Drupal over Wordpress I did say Drupal has a more mature approach which from an IT point of view probably makes it a more likely choice.

What I did recommend was Wordpress developers to adopt a similar mentality to that of Drupal/Plone both of which are open source application and of which have both patches and upgrades, lifecycles and indeed some basic roadmap as to the future. Indeed to quote myself from the article…

Drupal is not more any more secure indeed there are more security bulletins for it then Wordpress but it has a patch and upgrade path which provides support for earlier versions in the form of security patches.

]]> By: Jim Mcnelis http://www.timnash.co.uk/04/2008/wordpress-security/#comment-918 Jim Mcnelis Fri, 25 Apr 2008 13:17:16 +0000 http://www.timnash.co.uk/?p=130#comment-918 My point was that the most popular and most used OS, Windows, is 'hacked' (for the purposes of this article) daily. If you don't update, you are likely to be exploited, much like a older version of Wordpress. I guess the real issue I have with your argument Tim is that you are recommending another open-source solution with probably just as many vulnerabilities. It would be altogether different if you were recommending the Mac OSX equivalent of a blogging platform, but I don't think Drupal is it. http://www.google.com/search?hl=en&sa=X&oi=spell&resnum=0&ct=result&cd=1&q=drupal+vulnerabilities&spell=1 My point was that the most popular and most used OS, Windows, is ‘hacked’ (for the purposes of this article) daily.

If you don’t update, you are likely to be exploited, much like a older version of Wordpress.

I guess the real issue I have with your argument Tim is that you are recommending another open-source solution with probably just as many vulnerabilities.

It would be altogether different if you were recommending the Mac OSX equivalent of a blogging platform, but I don’t think Drupal is it.

http://www.google.com/search?hl=en&sa=X&oi=spell&resnum=0&ct=result&cd=1&q=drupal+vulnerabilities&spell=1

]]> By: Dave L http://www.timnash.co.uk/04/2008/wordpress-security/#comment-917 Dave L Fri, 25 Apr 2008 04:27:01 +0000 http://www.timnash.co.uk/?p=130#comment-917 True! While my primary business is supporting Windows, it's getting easier and easier to recommend Mac to new users who mostly seem eventually to one day screw up their malware protections one way or another. (Been recommending Firefox for some time for similar reasons, though you always have to have IE for some sites.) Many PCs and business networks are infected and don't know it. Here, there IS a lot of data. A favorite example: http://www.networkworld.com/news/2007/071707-government-contractors-hit-in-targeted.html Knowing how strongly Windows is protected by most enterprises, seeing that they are being badly hit makes me think Wordpress is worse than most realize. Pure speculation, but I think a valid concern. True! While my primary business is supporting Windows, it’s getting easier and easier to recommend Mac to new users who mostly seem eventually to one day screw up their malware protections one way or another. (Been recommending Firefox for some time for similar reasons, though you always have to have IE for some sites.)

Many PCs and business networks are infected and don’t know it. Here, there IS a lot of data. A favorite example:

http://www.networkworld.com/news/2007/071707-government-contractors-hit-in-targeted.html

Knowing how strongly Windows is protected by most enterprises, seeing that they are being badly hit makes me think Wordpress is worse than most realize. Pure speculation, but I think a valid concern.

]]> By: Jim McNelis http://www.timnash.co.uk/04/2008/wordpress-security/#comment-916 Jim McNelis Fri, 25 Apr 2008 03:53:31 +0000 http://www.timnash.co.uk/?p=130#comment-916 sounds a lot like microsoft windows to me sounds a lot like microsoft windows to me

]]> By: Dave L http://www.timnash.co.uk/04/2008/wordpress-security/#comment-915 Dave L Fri, 25 Apr 2008 03:50:40 +0000 http://www.timnash.co.uk/?p=130#comment-915 One thing not mentioned, except indirectly: It's getting worse all the time, and not all exploits are caught by those being exploited. I don't have a trendline of data to back that up with, but some there are some pretty famous Wordpress blogs that have been hacked, and more stories all the time. As Wordpress gets more popular, it's of course going to suffer from more hack attempts. It's frustrating to be in the bullseye of hackers, but that's where Wordpress is. Hackers are always going to try to find ways to exploit it without you knowing about it, besides the more direct approaches. One thing not mentioned, except indirectly: It’s getting worse all the time, and not all exploits are caught by those being exploited. I don’t have a trendline of data to back that up with, but some there are some pretty famous Wordpress blogs that have been hacked, and more stories all the time. As Wordpress gets more popular, it’s of course going to suffer from more hack attempts.

It’s frustrating to be in the bullseye of hackers, but that’s where Wordpress is. Hackers are always going to try to find ways to exploit it without you knowing about it, besides the more direct approaches.

]]> By: I am a numptie who cannot read http://www.timnash.co.uk/04/2008/wordpress-security/#comment-914 I am a numptie who cannot read Thu, 24 Apr 2008 21:26:28 +0000 http://www.timnash.co.uk/?p=130#comment-914 I'm a huge fan of Wordpress, having tried all the others and not being impressed. The caveat to that - Wordpress does need to be completely up-to-date to minimize the risks. Great for solopreneurs and online marketers, not so great for the enterprise, as you stated. This is a great post! Maria Reyes-McDavis I’m a huge fan of Wordpress, having tried all the others and not being impressed. The caveat to that - Wordpress does need to be completely up-to-date to minimize the risks. Great for solopreneurs and online marketers, not so great for the enterprise, as you stated.

This is a great post!

Maria Reyes-McDavis

]]>