18 lines
1.6 KiB
Markdown
18 lines
1.6 KiB
Markdown
%{
|
|
title: "I reduced the attack surface of an old Wordpress blog by shutting it down",
|
|
author: "Willem van den Ende",
|
|
tags: ~w(security pi.dev),
|
|
description: "Converting an interactive site like a blog to a static site is now very easy. Static sites have a tiny attack surface. They are not great for interaction, but for blogs and marketing sites they may be enough, and let you sleep at night.",
|
|
published: true
|
|
}
|
|
---
|
|
I reduced the attack surface on an old Wordpress blog by shutting it down, and then converting it to a static site from the backup, without running wordpress at all. The data, code and images was enough. It only took a single prompt (!) to get the basics done, then a few more to fix up the layout. Most of it happened while I was free to do other things.
|
|
|
|
A static site conversion had been on my mind for years, but the devil is in the details, and eventually would take a couple of days of fiddling. Now most of it happened while I was taking a nap, thanks to Pi.dev and GLM 5.3 Flash, and a feedback loop so the model could do exploratory testing with a web browser.
|
|
|
|
Seeing [Bert Hubert](https://www.linkedin.com/in/bert-hubert-b05452/)'s call yesterday to take your PHP server offline, and reading about 'Black October' was the push I needed.
|
|
|
|
The creaking old VM my blog ran on was fine, it had trouble responding to requests - a server that does not respond can not get hacked 😄 . So maybe there is no need to panic, but to take steps regardless.
|
|
|
|
I'm happy to write out the details if you want to do the same, but I'm only going to do it if there is interest, these kind of write-ups do take time - the devil is in the details, as always.
|