Conversation

Notices

1. Embed this notice
   vga256 (vga256@dialup.cafe)'s status on Tuesday, 18-Mar-2025 00:06:47 JST vga256

   in reply to

   • Karsten Schmidt

   @toxi 🤮 the best thing i did in the past 10 years, aside from leaving twitter, was getting rid of WP on my production server.

   it literally meant writing a new CMS from scratch to replace it, and was worth every hour of my life spent doing it. 😆

   • prettygood likes this.
   • Embed this notice
     Karsten Schmidt (toxi@mastodon.thi.ng)'s status on Tuesday, 18-Mar-2025 00:06:50 JST Karsten Schmidt

     #WordPress security is such a bane & nuisance, even for people who aren't even using it. In the past 24h I've been bombarded again with dozens of WP login spam emails, and my (static) sites had >4600 requests obviously scanning for all sorts of WP-related files & vulnerabilities...

     Second to that is another group of scans (~1080) looking for mistakenly uploaded credential files in `.aws/*`, `.env.*`, `.ssh/*` etc.

     😡😤