New comment by paulie_a in "Japan to add millions of new nodes to federated Nextcloud network"

They are low hanging fruit to exploit. Considering drupal specifically, and the massive history of WordPress (oh I can grab root passwords because of a massively deployed image slider) An attacker is thinking it's Christmas morning. And yes it is because they are PHP. It's unsafe under any circumstances.

Php is a go-to route of getting a shell.

from Hacker News: "WordPress" comments https://ift.tt/2P79wzb
via IFTTT

New comment by gmemstr in "Japan to add millions of new nodes to federated Nextcloud network"

PHP is fine, no software is bug free, especially when it accepts external input. Drupal, WordPress etc are huge so there's definitely a lot of chances for things to sneak in, but PHP itself can't be 100% to blame.

from Hacker News: "WordPress" comments https://ift.tt/2MBKoUM
via IFTTT

New comment by cdarwin in "BlogFinder – Find People on WordPress Blogs"

BlogFinder is a tool that lets you browse easily people who commented on a WordPress blog. Support for non WordPress.com blogs has been added.

BlogFinder uses the WordPress REST API, so the version of WordPress used must be fairly recent. Suggestions are welcome.

from Hacker News: "WordPress" comments https://ift.tt/2P79s2p
via IFTTT

New comment by paulie_a in "Japan to add millions of new nodes to federated Nextcloud network"

And WordPress, drupal and honestly every other php project custom or open source.

PHP needs to go away.

from Hacker News: "WordPress" comments https://ift.tt/2wf5YEl
via IFTTT

New comment by goatherders in "Ask HN: What exciting open-source science projects can one contribute to?"

WordPress may be old news but the new Gutenberg editor has the potential to disrupt the most popular CMS on earth. Helping make this a success isnt sexy but it is meaningful.

from Hacker News: "WordPress" comments https://ift.tt/2PyYrIe
via IFTTT

New comment by Mediterraneo10 in "The four ways that ex-internet idealists explain where it all went wrong"

I think the internet has been "political" for longer than that. The development of blogging systems like Movable Type and then Wordpress in the early millennium gave rise to some extremely popular and vigorous blogs like Little Green Footballs. Some of these got so much traffic that suddenly their proprietors could live off the money earned just by casually sharing their political views (thanks to some affiliate links here and there).

The big political change of more recent years, I would say, is political discussion overflowing expressly political fora and contaminating pretty much everywhere because of how social media functions. A band or author will share some entirely innocuous, non-political post on their social media pages, but the comment threads below them can easily descend into a shitshow of partisan quarreling.

from Hacker News: "WordPress" comments https://ift.tt/2Nfqj2x
via IFTTT

New comment by w_allDueRespect in "How did you learn to code?"

No I would definitely recommend a bootcamp, if you find the right one they will provide great value as long as you immerse yourself in them. I have many complaints about the particular one that I went to, starting with the fact that they charge nearly $15,000 CAD for a 6 month "Full Stack Developer" program, 3 months of which is spent covering very little Javascript, and focusing strictly on WordPress. Basically the first 3 months is a waste of your money. Another thing that I've read about, and heard about, but I haven't experienced, is that the prevalence of all these bootcamps has lead to an over saturation of Junior level developers in the industry. That would make sense intuitively, because there's only so many Junior jobs to go around, so it might be worth looking into how the job market is wherever you are.

from Hacker News: "WordPress" comments https://ift.tt/2Pxih6K
via IFTTT

New comment by EGreg in "The Impossible Job: Inside Facebook’s Struggle to Moderate Two Billion People"

Why do social networks have to be so big and centralized?

Because we don’t have good open source software like Wordpress for blogs that people can install and manage their own networks on their own servers. And why? Because a social network is far more complex than a blog, including contacts integration, permissions, realtime notifications and so on.

https://m.youtube.com/watch?v=pZ1O_gmPneI

from Hacker News: "WordPress" comments https://ift.tt/2NhBzvB
via IFTTT

New comment by CM30 in "WordPress is at a Crossroads"

Makes you wonder what WordPress itself would look like if it went this 'freemium' route. Probably something like:

Free core $10 for comments $10 for user accounts $10 for post types $10 for the theme customiser... well maybe that's one less of an issue

Etc

Plus god knows how many banners and ads stuck all around the dashboard. Yeah, it's not a great situation, and it definitely feels like a lot of major plugin creators are either spamming the hell out of their uses or nickle and diming them for every little 'feature' they can think of.

Still, I guess it could be worse. Some open source scripts (looks at OpenCart) and many paid ones (looks at IPB and XenForo) seem to have communities where every little thing in the plugin directory has a price attached to it. Definitely feels like the community spirit has mostly died out and been replaced by a bunch of agencies pumping out plugins like they're in some of gold rush.

from Hacker News: "WordPress" comments https://ift.tt/2PAkiiD
via IFTTT

New comment by geofft in "Disable SMT/Hyperthreading in all Intel BIOSes"

If you render websites that run code in your VM (e.g., you're running a traditional shared hosting infrastructure where mutually-untrusted users can upload PHP scripts, or you're doing something serverless / FaaS / Cloudflare Workers / etc. where mutually-untrusted users can upload functions), then yes. If you're rendering websites in the sense of hosting WordPress for lots of people but not permitting custom plugins, then no.

from Hacker News: "WordPress" comments https://ift.tt/2woviXx
via IFTTT

New comment by pluto9 in "Overview of Popular Static Site Generators"

A quick search yields this [1], which claims to render static copies of your WordPress pages. Might be what you're looking for.

[1] https://wordpress.org/plugins/simply-static/

from Hacker News: "WordPress" comments https://ift.tt/2Pzzdtl
via IFTTT

New comment by jmkni in "Overview of Popular Static Site Generators"

Has anybody successfully exported a wordpress site to a static one? I'm working with a company spending too much money on hosting (a site which is painfully slow), they could host for free on Github pages with something like Jekyll, but the Jeykll exporter fell over and died when I tried it.

I'd love to set them up with Wordpress running on a machine in their office, so they can use the familiar UI etc to make pages/posts and make use of their favourite plugins, and then a button to export it to something like Jekyll and push it live.

from Hacker News: "WordPress" comments https://ift.tt/2wovfej
via IFTTT

New comment by paulwithap in "Ask HN: How do you blog in 2018?"

I use Medium sporadically, and I think it's a good platform to use if you don't already have an audience, since it's easy to repost to larger publications and gain distribution.

Once you gain an audience, or if you already have one, then using an open source platform is the way to go.

WordPress is probably the best choice, since the ecosystem is just so much larger than anything else out there. I would really suggest finding a managed service over deploying it on an ec2 instance or something. Security is a constant battle on WordPress sites, and it's just better to have someone else deal with that.

If you don't care about distribution or growing an audience and are just blogging for fun, then something like Hugo might be a good choice.

from Hacker News: "WordPress" comments https://ift.tt/2PzEK2X
via IFTTT

New comment by no1youknowz in "UK Labour Leader proposes a publicly-funded alternative to Facebook"

This is absolutely ridiculous and I must say I cannot be surprised coming from Labour.

What escapes the left completely, is that there is a free market. Which can and always does a better job than central planning.

Nothing is stopping anyone from buying a cheap laptop, an external webcam if need be and a decent microphone and then to start streaming to youTube and other decentralised platforms if they want to do vlogging. Hell, nowadays even a cheap android phone will do to stream live to YouTube to get the message out.

There are also cheaper solutions if they want to startup a blog and then syndicate via medium, wordpress, ghost, tumblr, guest blogs and rss channels.

Bottom line, there is nothing. Absolutely nothing stopping anyone from providing their voice to the internet and crafting an audience. The government doesn't need to be involved and those who value a free press should tell him to butt out in the strongest terms.

Except however and this is what we must be careful of. Is that Labour will want to impose restrictions on what is acceptable. There is a UK firewall coming and I'm sure some Labour and Conservative MPs are licking their lips for the day this comes.

I'm too busy to provide citations but links are out there, go do your own research.

Now there is a ray of hope. It's coming in the form of decentralised networks and also Elon Musk's global satellite network. In fact, I will go so far as to say. In the very near future, space-intranets will come into play. Where crowd-funded projects will elect to launch satellites that are outside of government control and mobile phones will have dual capabilities. The first to connect to the internet and the second to be on the space-internet with no government oversight.

from Hacker News: "WordPress" comments https://ift.tt/2wrsDfY
via IFTTT

New comment by Kagerjay in "WordPress is at a Crossroads"

That, and medium paywalls content as well.

I still would rather use wordpress over Jekyll (which I have used) and Hugo. Wordpress just has so many themes to pick from, there's something for everyone.

There's a learning curve over medium, but you get used to it you can customize it if you know basic HTML/CSS/JS.

Netlify may be free for personal use, but I'd still rather pay $6/month for 10 custom sites in sitegrounds. Wordpress just has way more matured tools, I'm not a big fan of change for something that's solved already

Also, I am not a fan of Jekyll's writing tools either. Wordpress out of the box, lets me just write things natively with less friction. I don't need things like cloudcannon or foresty.io.

from Hacker News: "WordPress" comments https://ift.tt/2PthROV
via IFTTT

New comment by sophistication in "Why Prosperity Has Increased but Happiness Has Not"

I think this paper is one of the most interesting results in this regard:

> Money and Happiness: Rank of Income, Not Income, Affects Life Satisfaction

> https://www.jstor.org/stable/41062232

Of course, the relation is not perfect because there are probably more than half a dozen other major things that can go wrong; most prominently disease, relationship and work situation.

I could imagine that dissatisfaction due to disease also largely comes from comparison with others. If everybody is healthier, then more minor diseases have a stronger negative effect on life satisfaction; so not much is gained.

Work satisfaction might have improved, but the hedonic treadmill probably also diminishes the returns in that case.

I could imagine that relationship satisfaction has decreased with the loss of the classical gender roles and culture regulating all of that. E.g. it is known that premarital promiscuity results in decreased marriage satisfaction:

http://nationalmarriageproject.org/wordpress/wp-content/uplo...

from Hacker News: "WordPress" comments https://ift.tt/2wovar1
via IFTTT

New comment by signal11 in "WordPress is at a Crossroads"

With tools like Github Pages, netlify, etc, and static site generators like Jekyll, Hugo and nanoc, I’d argue - yes it’s possible.

Wordpress itself attracts criticism but for a large class of users it does work.

Ironically imo Medium, with its “dickbar” and pop ups, is a fairly crappy reading experience.

from Hacker News: "WordPress" comments https://ift.tt/2Mri07w
via IFTTT

New comment by pxtail in "WordPress is at a Crossroads"

Your message is full of sentences which are contradiction to each other. You are saying that WP not changed for a long time and yet at the same time you are afraid of upcoming change, and you are power user! - this is the reason why changes are so slow.

> The reality is that WordPress theming is broken. None of those 5,000 free themes can satisfy a single need in 100% percent.

It's not broken, it's just how everything works in life - unless you are skilled or determined enough yourself you need expert for customizations, it isn't possible to make creator which will satisfy everyone (and yet there are abominations like Visual Composer which try to do it). Can you customize parts of your car engine yourself?

>TLDR: WordPress lost it’s individual user base

What is used as replacement nowadays? I hope not walled gardens or solutions like medium where your content is held in grip and they just wait to squeeze.

from Hacker News: "WordPress" comments https://ift.tt/2P2HfKn
via IFTTT

New comment by sleavey in "WordPress is at a Crossroads"

On the topic of the prevalence of freemium plugins in WordPress ecosystem: I really detest this. Given the huge effort that has gone in to WordPress itself - freely provided to the community - it's ridiculous for small plugins - that in many cases just filter some function already provided as a hook in WordPress by the core developers - would ask for money. A few years ago I set up an online labbook for my research group using a bunch of plugins to make WordPress behave the way I wanted. I had to search really hard for plugins that didn't spam end users to "upgrade" to unlock arbitrarily disallowed features, and furthermore plugins which were well written and didn't contain silly hacks or security vulnerabilities (in the process I ended up submitting patches to a few of them to fix obvious flaws). It was even difficult to find plugins that use the proper settings page infrastructure, instead of adding their own top level menu item in the admin panel and not conforming to the WordPress core look and feel. What a mess.

Somehow discouraging freemium junk from the plugin library wouldn't be a bad thing from my perspective. It would surely decrease the sheer volume of plugins available, but would undoubtedly increase the quality. Perhaps this could be achieved with some sort of rating system for the code quality, judging based on how much the code relies on WordPress APIs, properly handling unexpected input and errors, properly sanitizing user input, etc.

Incidentally, I am now developing a plugin to combine the behaviour of all the plugins I previously used for the academic labbook [1] (if anyone is interested in using it, I would like to know!). In the process I've learned a lot about the WordPress code base, and have come to appreciate that it is on the whole well written - it's mainly just plugin authors that produce junk, and hope to make a quick buck off the back of the hard work of volunteers in the process.

[1] https://github.com/SeanDS/alp

from Hacker News: "WordPress" comments https://ift.tt/2o2shbC
via IFTTT

New comment by EnderMB in "Ask HN: Favorite CMS?"

I couldn't agree more, although I'd argue that there are two things that keep people using WP.

1. The UI. Most people know it, at least a little bit, so it is sold on the fact that it is usable. I'd say this is true in the same sense that Hacker News has a great UI. It's functional, but all its warts are masked by its familiarity.

2. The plugins. I know loads of WordPress developers in 2018 that couldn't tell you what composer is. I don't want to tar everyone with the same brush, but a lot of people choose WP because they don't need to write code, and that comes with its own problems when you want something a bit different to what your favourite plugin offers.

from Hacker News: "WordPress" comments https://ift.tt/2MrhZAu
via IFTTT