New digs Mar 4, 2010
When John Gruber is right, he's right. And he's right about hosting your own WordPress.
Briefly - WordPress has a gigantic attack surface. It's far and away the most popular web application as far as installed instances, and although the developers do a fairly good job with security, the sheer popularity means that as soon as new exploits are discovered, blogs get compromised almost immediately.
It's not that WordPress isn't good software - I think it is - but that running it yourself means having to constantly stay on top of security issues. What if I go on vacation for 5 days and don't have computer access? Am I going to get hacked? More importantly, are the other applications also running on my server - including Journey, which is a commercial software offering - going to get hacked?
It's just plain not worth it. Let someone else host my blog.
So I've done something I've been thinking about for awhile: I've moved this blog off my own servers and onto Wordpress.com. For anyone currently hosting your own WordPress installation, I highly encourage you to seriously consider it too. It's easy to do, it migrates all your comments, and it's free-to-extremely-cheap.
Unfortunately, they don't let you use just any WordPress theme, so I've set up a new one from their (fairly good) library. I actually think this one is an improvement on my old theme.
Anyway, enjoy, and please do let me know if you see any issues with the new blog.