Derek Ross on Nostr: 40% of the web uses WordPress. that's a massive attack vector. i've been working on ...
40% of the web uses WordPress. that's a massive attack vector. i've been working on an alternative built on nostr for several months, but haven't had time to complete it. it works in it's current form and you can technically use it, but the project roadmap isn't complete yet, so i never announced it.
https://github.com/derekross/firefly Good morning and pura vida, Nostr! 🫂🤙🏻💜
Heartbleed was bad, but the new PHP exploit (PHP2Shell) is wilder.
PHP powers ~70% of the web, and this flaw allows full server takeover + memory leaks going back to 2004.
Worse/Better: AI agents can now exploit or patch this at machine speed. It's a real time arms race. Stay safe out there.
Published at
2026-10-22 17:05:37 UTCEvent JSON
{
"id": "4ab08955f306f469e34cf877cf75cdeee651dec96a3da78732e5cbc42b0fdb6b",
"pubkey": "3f770d65d3a764a9c5cb503ae123e62ec7598ad035d836e2a810f3877a745b24",
"created_at": 1792688737,
"kind": 1,
"tags": [
[
"q",
"000002fc02344543264c12ff150479a6bdb79e87cef1aa9f72c0916abec1c1b5",
"wss://relay.ditto.pub/",
"3f770d65d3a764a9c5cb503ae123e62ec7598ad035d836e2a810f3877a745b24"
],
[
"client",
"Ditto",
"31990:781a1527055f74c1f70230f10384609b34548f8ab6a0a6caa74025827f9fdae5:ditto"
]
],
"content": "40% of the web uses WordPress. that's a massive attack vector. i've been working on an alternative built on nostr for several months, but haven't had time to complete it. it works in it's current form and you can technically use it, but the project roadmap isn't complete yet, so i never announced it. \n\nhttps://github.com/derekross/firefly\n\nnostr:nevent1qgsr7acdvhf6we9fch94qwhpy0nza36e3tgrtkpku25ppuu80f69kfqpzemhxue69uhhyetvv9ujuerfw36x7tnsw43z7qpqqqqq9lqzx3z5xfjvztl32pre567m0858emc648mjczgk40kpcx6suhwm06",
"sig": "ccfb0d9e81725bd8433a45af34ff7e14a3f84044dcdb58cc93b87be534e6155556f8f7bb3af17b097e04c0e8b940d9f94c21ae642129228ad8db1cbe404a1ac7"
}
