Open Source CMS Products

[esqbrianritchie at gmail.com (BRIAN RITCHIE)]

Depends on skill but based on some local discussions before, Plone did
emerge as one of the most security conscious CMS.

Wordpress is easy to work on but due to popularity, security holes tend to
be exploited fast, so you need to patch as soon as updates are released.
Drupal is ok too but similar situation to Wordpress.

-BRIAN RITCHIE

On Sun, Jun 13, 2010 at 2:36 AM, Grecs <grecs at novainfosecportal.com> wrote:

> There are the usual suspects (e.g., WordPress, Joomla, Drupal, ...).
> Each has their own pros/cons when it comes to security. Trying to
> figure out which one is more security is like the ongoing debate of
> Windows vs. Mac security. There is no right answer.
>
> If you want to focus just on writing and not worry if you site is
> going to get hacked, I'd recommend going with one of their hosted
> services (e.g., WordPress.com). That way you don't have to worry about
> security updates. Updates can be a huge pain ... because you are
> always thinking "is updating to the next version going to hose my
> site". With a hosted solution you don't have to worry about any of
> that. If something happens they fix it ... and you can continue on
> focusing on writing and not being a website admin. But if being a
> website admin is your thing, go for it.
>
> Have fun.
>
> Thanks,
>
> Grecs
> Follow me on Twitter (http://twitter.com/grecs)
>
> =====
> http://www.novainfosecportal.com
> News, Events, & Resources for Infosec Professionals in NoVA, DC, & MD
>
>
> Quoting Michael Allen <sector876 at gmail.com>:
>
> > Hi All,
> > Any thoughts on which CMS product has the best security record? If you
> had
> > to recommend one which would you recommend?
> > I know Joomla gets hammered a lot. Or should I forget Open Source and go
> > commercial?
> >
> > Thoughts???
> > Regards,
> > Michael
>
>
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20100613/ce4fa19b/attachment.htm