Do you really want to trust getting your "news" from a website that still uses PHP 5.x?
You aren't even using an intermediate CDN caching layer.
Amateur hour over at OANN.
Conversation
Replying to
The site is now throwing backend 503 errors. For the record, I did nothing illegal -- all information I provided is publicly available via their response headers and DNS information.
(Just want to make that clear)
11
This Tweet was deleted by the Tweet author. Learn more
That's not necessarily a bad thing. Configured correctly, WP is just fine.
2
2
Show replies
I'm more concerned that they haven't configured their server to hide versions than that specific version. This tells me that they are likely using 100% default installations and that means default vulnerabilities.
1
3
EOL for PHP 5.6 was 2018. And there is a list of known vulnerabilities.
1
3
Show replies
Hmm. Usually you're so positive. I didn't expect you to openly shame companies for tech choices. It's not like customers care what runs it.
Seems like they'd be pretty vulnerable if someone were to, say, DDoS them...
1
2
Show replies






