news
Content Management Systems (CMS) / Static Site Generators (SSG): Social Engineering/Supply Chain of WordPress, Mythic Beasts, Jekyll
-
Stuart Breckenridge ☛ 'Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them'
It’s truly astonishing that WordPress, despite its scale, has such exploitable supply-chain security. I’m aware of a similar npm supply-chain risk with Gobbler, though I am using both Dependabot and Socket.dev to mitigate it.
-
Andrew Shell ☛ My Take on WordPress Social (Blurt)
The first thing I noticed is a section that supports importing your posts from existing social media sites. It supports X, Bluesky, and Mastodon. I think this is new, because on an existing WordPress site, these are not listed under the normal WordPress import, which lists things like Blogger and LiveJournal.
-
Kian Ryan ☛ Hosting on Mythic Beasts
This site is now hosted on Mythic Beasts, away from GitHub Static Page hosting. That gives us the freedom to do things that we couldn’t do previously, such as host plain text versions of our blog pages.
-
Kian Ryan ☛ Plaintext pages in Jekyll
I started looking into providing the same here and realised that I couldn’t do that while using GitHub pages, so took the opportunity to migrate the site to Mythic Beasts.
Adding plain text to jekyll needs a couple of additional files, and a change to the config file.