[Adminsysters] blog - questions

[contact at maadix.net]

Hi,

I think it's great that you want to avoid using wordpress, given all the 
attacks it tends to be the victim of, but starting a website from 
scratch I don't know if it's the best option. We are more likely to make 
mistakes in terms of security by programming something from scratch than 
not using already consolidated code, and also Don't Repeat Yourself (DRY).

I would recommend using a CMS, like Django for example , where you can 
implement features like authentication, 2FA, Recover password, etc, that 
have been tested and reviewed.

https://www.djangoproject.com/

There are many others,  of course.


As far as security/privacy is concerned, I would recommend you to 
implement Tor, so that people can access the blog from a .onion domain.

https://community.torproject.org/onion-services/setup/

Also, you could consider use encryption.

https://blog.gradiian.io/migrating-to-cockpit-part-i/

to encrypt all the disk on your own, you  should purchase some server 
with rescue mode available. Alternatively you could just encrypt parts 
of the server:

https://www.hln.com/encrypting-data-at-rest-on-servers-what-does-it-get-you/

What I mean is that, as security is a core thing in your project,  in 
addition to the programming itself, it is very important that you take 
into account where you store the blog.
This is more sysadmin than programming,


I hope it helped somehow .

Viszlát   :-P

Maddish



On 1/4/25 20:56, fevvers at riseup.net wrote:
> Dear Systers!
>
> I'm a queer feminist living in Hungary and I started to learn
> programming two years ago. I haven't worked as a programmer yet, but I
> have a more or less solid understanding of fullstack development. I'm in
> autonomous organisations more than a decade, but I've just started to
> explore how many anarchist / autonomous tech collectives exist - and you
> are even feminists! It feels so amazing, because I almost lost my
> passion in the whole tech thing, because of the hardcore sexism in my
> school and the whole brach here.
>
> So I have a project now that we plan with my comrades in Hungary for
> years: we want to establish a blog, where we can publish anarchist /
> antifascist articles. I don't want to use wordpress, I'd like to build
> the blog from scratch. In my project security would be a core thing, I
> really want to protect the identity of the admin, and also of the
> visitors. I also want to make sure that the data is safe. So I started
> to research, but there are so many things, like decentralised databases,
> or finding a collective that hosts the website, using javascript or
> not... It's very difficult to start this process alone, and I was
> wondering, would you maybe have a suggestion, what would be the best way
> to start this project?
>
> I'd super glad to hear from you!
> Bests,
> fevvers
> _______________________________________________
> Adminsysters mailing list
> Adminsysters at lists.genderchangers.org
> https://lists.genderchangers.org/mailman/listinfo/adminsysters

-- 
MaadiX
https://maadix.net

Aviso Legal y Protección de datos
https://maadix.net/es/aviso-legal-email/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xB48B2A9BE5BB2110.asc
Type: application/pgp-keys
Size: 5454 bytes
Desc: OpenPGP public key
URL: <http://lists.genderchangers.org/pipermail/adminsysters/attachments/20250401/1c39d740/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://lists.genderchangers.org/pipermail/adminsysters/attachments/20250401/1c39d740/attachment.sig>