349
submitted 3 weeks ago by neme@lemm.ee to c/technology@lemmy.world
you are viewing a single comment's thread
view the rest of the comments
[-] jedibob5@lemmy.world 149 points 3 weeks ago

Not as drastic as the headline makes it out to be, or at least so they claim.

“We acquired Tumblr to benefit from its differences and strengths, not to water it down. We love Tumblr’s streamlined posting experience and its current product direction,” the post explained. “We’re not changing that. We’re talking about running Tumblr’s backend on WordPress. You won’t even notice a difference from the outside,” it noted.

We'll see how that actually works out. Tumblr’s backend has always seemed rather... makeshift, so I'm curious to see how they manage to do that. Given Tumblr’s technical eccentricities, a backend migration could probably do a lot of good for the functionality of the site, if done properly. I have my doubts that WordPress' engineers will be given the time and resources to do a full overhaul/refactor though, so I'm fully expecting even more janky, barely functional code stapling the two systems together.

[-] catloaf@lemm.ee 67 points 3 weeks ago

WordPress is built on decades of hacky code, probably more so than Tumblr. I would be shocked if this is an improvement.

[-] Goodie@lemmy.world 28 points 3 weeks ago

is it decades of hacky code, or decades of battle tested code?

I haven't touched wordpress in... many years, but I've seen far too many developers look at old code and call it junk... only to break things horrifically when they attempt a rewrite.

[-] catloaf@lemm.ee 17 points 3 weeks ago

Hacky.

Wordpress has a reputation for the most moronic security issues. Especially when it's built on PHP, which has its own reputation for moronic security issues. And that's saying nothing about the quality of plugin developers or plugin code.

I've worked on Wordpress sites, plugins, and themes. That was many years ago now, but I doubt it's changed that much. If anything, it's mostly benefited from improvements to PHP.

[-] fake@sh.itjust.works 15 points 3 weeks ago

Has to rank as one of the most exploited pieces of software ever.

Definitely be not aided by the fact it's targeting an audience without the skills or knowledge to adequately configure, maintain and monitor it. And the plugin community only makes the vulnerability exposure worse.

[-] sugar_in_your_tea@sh.itjust.works 4 points 3 weeks ago

Yup. I imagine a lot of users install a lot of plugins they don't actually need, which just expands the attack surface.

[-] webhead@lemmy.world 2 points 3 weeks ago

Kind of the old Windows vs Mac problem though. It gets so many exploits because it is so ridiculously popular. No one is going to bother looking for exploits in shit that no one uses right? I'm sure they've got problems like any project but I'm not convinced they're THAT bad. Not to mention a lot of exploits you see are plugins doing dumb shit, not WP itself.

[-] chilicheeselies@lemmy.world 6 points 3 weeks ago

Both honestly. Very spaghetti, but noone can deny that it just works from a user perspective. Would I want to maintain the code? Hell no! Do use it as an end user? Hell yeah!

[-] sugar_in_your_tea@sh.itjust.works 1 points 3 weeks ago

Nah, not touching that with a 10' pole. There have been far too many exploits for me to feel comfortable putting any of my important data on it. And it's not just that it's popular, the level of sophistication for these attacks are... alarmingly low.

[-] MangoPenguin@lemmy.blahaj.zone 1 points 3 weeks ago

It's a public site that'll be backed up regularly, what kind of important data would you be putting out publicly?

[-] sugar_in_your_tea@sh.itjust.works 1 points 2 weeks ago

If it's an e-commerce site, than people's payment info, name, and address. If it has a login, then their login information (which they're most likely reusing elsewhere). Even if it's just a static site, than any data that might be hosted on the same server.

load more comments (13 replies)
load more comments (18 replies)
this post was submitted on 28 Aug 2024
349 points (98.3% liked)

Technology

58135 readers
5493 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS