On: How to Keep WordPress Secure

[desu]

I think the single best thing you can do with wordpress is to run an SVN install. They're usually pretty good about tagging updates, so for example the update to 2.8.4 consisted of this:

  svn sw http://svn.automattic.com/wordpress/tags/2.8.4

Which is about the acceptable level of hassle IMO. Much more and I'd be outta there.

[photomatt → desu]

This is fantastic advice -- for many WP blogs I manage I just have them svn update on a cron job nightly.

[desu → photomatt]

You should publicise it more on the WP home page! I'm pretty technically able and yet it took me quite a while to even realise I could do that.