Wednesday, June 21, 2006

Why I Moved from Blogger to Wordpress

I used to use Blogger, but I recently decided to move my blog to Wordpress. The primary reason I decided to leave Blogger is Blogger's pathetic security, mostly due to the lack of SSL access. I picked Wordpress for my blog's new home because Wordpress has some of the best features and positive overall experience out of all blogging services I know. In fact, Wordpress's only minor drawback in my mind is the lack of manual control over the templates, but I'm not a customization freak, so this isn't a big concern for me.

Blogger doesn't even let you log in over SSL, not to mention keeping your session over SSL while you're editing your blog. When you change your password, Blogger doesn't even send you a validation email. What does that mean? Every 12 year old hacker armed with Ethereal or tcpdump can steal your password by eavesdropping on your connection, and can then go ahead and change your password and thereby hijack your blog.

Your blog is a large part of your your online identity. It's often the first thing that shows on search engines when people search for your name. It's valuable. I'm not comfortable with the thought that my blog could be hijacked so easily and there's nothing I can do to prevent it. (I did read that certain blogging applications let you use Blogger over SSL, but that's one more hoop than I'm willing to jump.)

I dread the day when somebody stages a large scale attack on Blogger and hijacks thousands if not millions of blogs. Maybe such an event would kick Google's butt into action, getting it to turn on the SSL switch on the Blogger servers. I suppose that if this happened, Blogger could mitigate the disaster by rolling back all changes that happened during the attack, and then resetting all passwords. The damage would be significant, but not irreversible. I'm actually more concerned about individual blogs getting hijacked without Blogger's knowing or caring.

Wordpress has SSL access, so this problem largely doesn't affect Wordpress users (I say "largely" because the Wordpress servers could always be cracked and the user data could be stolen, but the risk is very small). That's a huge advantage for Wordpress, and is the primary reason I moved here. I must say I'm happy here so far. I may decide to host my blog on my own server eventually, which would have is downsides, but it's likely that Wordpress will remain my blog's permanent home.


Matt said...

Thanks! Getting SSL support was actually a lot of work and sometimes I think no one notices, so it's nice to see someone appreciating the effort. I hope you continue to enjoy the work we put into :)

yariv said...

Matt, I'm actually very happy with Wordpress for many other reasons I should have mentioned besides SSL. I have surveyed quite a few blogging services and Wordpress is definitely my favorite. The geek in me sometimes wishes to have more manual control over the templates, but I'm happy with the template I picked, so it's a pretty minor issue for me. Besides that, I like everything about Wordpress! Oh yeah... I wish I could get back, which I foolishly deleted... :)

search said...

Hi My Friend,

This site is very nice. I am new to computers and blogs and am just
looking what is out there, to get ideas for my own site someday.

Kevin said...

Hey, I also switched over to wordpress back in the day. I just found this post so figured I'd share my two cents.

I used to use graymatter aka cgi madness haha. Anyway, glad you are happy with it and I love the theme system.