In defense of WordPress

WordPressThere’s a lot of negative talk circulating regarding the security attacks currently underway against outdated versions of WordPress. One of the most outspoken critics, not without cause, is one of my favorite bloggers: John Gruber of Daring Fireball.

That Gruber is loyal to Movable Type perhaps influences (despite his claims to the contrary) the tone of his assessment of the situation. And, I’m sure, my loyalty to WordPress influences my assessment of it as well. WordPress is not Apple, but I hold both in perhaps unduly high esteem.

That said, there are easy (or, at least, prudent) steps one can take to keep WordPress secure against this attack. Also, security is not the only (nor, dare I say, anywhere near the most important) factor in selecting a blogging platform. I’ve worked a fair bit with Movable Type, and while I can’t speak to the relative security of the two applications, I definitely can speak to their relative ease of use, and in that regard, I see no comparison: WordPress is surprisingly consistent and intuitive, given its open source nature and the large size of its developer community, whereas Movable Type seems to live in its own world where up is down, left is right, files are assets, and you need to rebuild the site every time you change anything. (Caching, if it’s even necessary, should be invisible to the user.) And then there’s the proprietary markup language.

It is unfortunate, and a weakness of the system, that WordPress has come under attack in this fashion. I’m glad that the latest version, at least, is immune to this exploit. But to dismiss WordPress because of this seems to grossly miss the point. And, debate this if you like, I do believe that if you’re not prepared to keep your installation updated, you shouldn’t be hosting the site yourself anyway. Use WordPress.com — it’s free, and it’s always up-to-date. The biggest victims here, I fear, are site owners who have relied upon an apathetic hosting provider to manage their system, and whose sites have been left vulnerable through no fault of their own.

All of the room34.com sites are running 2.8.4, and none has fallen victim to these attacks. But this incident did inspire me to take an action I had been neglecting — last night I dug into my httpd.conf file, shuffled a bunch of directories around on the server, and consolidated all five of the WordPress sites I’m running down onto a single installation of the software, so from now on I’ll only need to update once instead of five times. I probably could have migrated to WordPress MU, but it was an interesting experiment to take the approach I did, and it allowed me to avoid having to merge databases.

Network Solutions: You’ve spoken. We’ve listened. We’re just idiots.

OK OK, Network Solutions. Don’t get your nsUndies* in a bunch. (*You’ll get that joke in a minute.) I’m still a diehard Network Solutions supporter, recommending all of my clients go with you instead of the sleazy likes of GoDaddy, despite your considerably higher prices. (My argument is, if you’re willing to spend thousands of dollars on a website project, why not spend an extra $25 on a better domain registrar?)

Anyway… just because I recommend you, doesn’t mean I will refrain from criticizing this: today I logged into my Network Solutions account to make some changes to my own DNS configuration, and I was confronted with the following ghastly announcement…

Network Solutions has listened, apparently.

What? Someone actually told you “I don’t understand what ‘Web Site’ means. Can you please call it something more obvious? Like, maybe, ‘nsBusinessSpace’? Yeah, that would be great.” Well, OK, maybe someone like Bill Lumbergh would think that. But he’s not really human.

I’ve seen something like this before, though. In fact, I’ve blogged about it before. But with Microsoft, it almost, just barely, managed to seem like they were in on the joke.

The Bee Gees/Kraftwerk connection… courtesy of Mattel

This is certainly old news, but it’s still news to me.

I’ve been on a big Kraftwerk kick lately, having recently purchased all of their old albums and featured them frequently on my Hall of Prog blog.

I noticed, in the video for “Pocket Calculator” (below), that Ralf is playing a humorously tiny keyboard instrument. But what I didn’t know until I was reading about the album on Wikipedia was the exact identity of the keyboard.

The keyboard is, in fact, a “Bee Gees” branded toy made by Mattel:

Mattel Bee Gees Rhythm Machine

Sweet. You can read more about it here. And, just in case you were doubting that it’s really the instrument used by Kraftwerk, here’s a video of someone playing the melody from “Pocket Calculator” on one. Any Kraftwerk fan will instantly recognize the sound.

On IKEA’s sad validation of Verdana

IKEA 2010 catalog, set in... GAACK! VerdanaAny use of a font is a validation of its aesthetics, and since I find the aesthetics of Verdana appalling, I am sad to see it get validation from the likes of IKEA.

I feel like I got a bit of a scoop here, because I first noticed the use of Verdana at IKEA about a month ago. At the time I thought it was a fluke — I saw it on one of their vertical banners, posted near the cafe, and it appeared to be a locally-produced sign advertising some particular regional specialty they were temporarily adding to the menu. It looked like someone at the local store had tried to design a banner to match the corporate standard, but was ignorant of the nuances of fonts, and used Verdana because they either didn’t have Futura or couldn’t tell the difference (gasp!)… or both.

But then earlier this week I was leafing through the 2010 IKEA catalog that was sitting on our coffee table, when it struck me that the whole bloody thing was set in Verdana. How could this be?!

As I said, I feel like I got a bit of a scoop here, because I mentioned this observation on Twitter three days ago, and only now is it showing up on Daring Fireball via lonelysandwich via Hunk-O-Mass via jhn brssndn via hellaposer via Typophile. And apparently Typophile does not yet have the bandwidth to handle being “fireballed” and “sandwiched” (and… uh… “34ed”… yeah, that’s it), since I can’t get it to load right now.

I feel like I’m in good company though, because these guys are echoing my longstanding sentiments towards Verdana. From Gruber:

I have never seen Verdana look good in any way other than in small sizes on-screen.

And, even more on-the-money, from Lisagor:

Sure, Gruber uses it tastefully, but at anything larger than 11pt, it feels to me a bit squat and dopey. Friendly and readable, but a little bit simple, in the way you’d say a person is simple, but only behind his back.

Well played. Part of IKEA’s rationale is that “they want to be able to give the same visual impression both in print and the web.” Well, that can be done without resorting to this abominable solution. Especially with the imminent ascension of @font-face.

Here’s hoping 2011 will bring a return to sanity.