Otto42
- Karma
- 25
- Created
- September 25, 2009 (16y ago)
- Submissions
- 0
Tech Ninja
[ my public key: https://keybase.io/otto42; my proof: https://keybase.io/otto42/sigs/FnDvOBl_PWDbfOPXujlMbYCf8IdSOvaaVcNmJTOfDI8 ]
[ my public key: https://keybase.io/otto42; my proof: https://keybase.io/otto42/sigs/FnDvOBl_PWDbfOPXujlMbYCf8IdSOvaaVcNmJTOfDI8 ]
"Cache-Control: private" Google has to be respecting Cache-Control headers, right? Set your AMP pages to return that. Then they won't be allowed to cache them.
Once we were notified of the issue, I manually removed the bad code and shut down further updates. If you have this plugin, update to the latest version immediately.
Plugins do not auto update by default. You have to specifically turn those on, and not via a switch, but via code editing.
Disclaimer: I wrote those guidelines. The "Paypal" loophole is specifically because the first version of the guidelines had people constantly emailing us asking if this Paypal code snippet was okay. All the Paypal code…
> are there systems in place to blacklist a plugin and remotely remove it from an install (and possibly contact the install owners) We have automated scanning systems for suspicious code commits. If they occur, me and a…
"Without review" is not quite true. Some of us get an email for every commit. Not kidding. Helps a lot for the scanning of things.
We do monitor that sort of thing. Very closely. Oh, and I got that email too. They didn't really vet that email list very well, or they would have been smarter about it. :)
This is for backwards compatibility. If you checked it again after you login, you'd find that it is not an MD5 password anymore. WordPress uses salted and hashed passwords with the phpass library, and has since version…
@patio11: So, your attack basically amounts to "find RCE, then use RCE to gain control of whole network at once". Okay, the problem with this argument is that it is technically valid on any network of any kind. If I…
Re: media, one step at a time. :) Re: custom fields: This makes little to no sense to be in core, because custom fields are just that, "custom". There's no point in giving the end user the ability to make their own meta…
He's not muffled. He actually sounds like that. :)
Somehow I doubt that we'll decide to drop support for 65.5% of our users (roughly 26 million websites). http://wordpress.org/about/stats/
I wasn't actually responding directly to you, but I will. Doesn't matter if you offer guest commenting by default. I close the browser tab the moment I see the non-standard comment box. I don't have any idea what…
Agreed. If I see a third party commenting system, I typically just close the tab instead of leaving a comment. It's not worth the hassle to me to deal with whatever your commenting system requires. Name/email/url. These…
Wait, people actually use Yelp? Seriously? I find that to be the most shocking statement in the article.
I'm sort of shocked that you're shocked. The rigid and inflexible architecture of systems like Rails and Django are the primary reasons for WP's success. There's a reason WP has more themes and plugins than these other…
So, when you have a problem with the system, then to find the bug you have to look in three or four places instead of one.
Gotta say that I don't get it either. They've basically just added yet-another-HTML-templating system into the mix. Question not answered: "For the love of all that is holy, why?" PHP is an HTML templating system.…
The "serious performance issues" you speak of were fixed in core, about 11 days before your post. See http://core.trac.wordpress.org/changeset/18541
I've gone by the name "Otto" for about half my life. It's a nickname I got in college. Many of my best friends didn't know my real name for years. It just never came up. My mom is the only person who uses my real name,…
At the same time, virtually everybody I know who has tried Places has said the exact opposite. To be fair, I have many friends who use Foursquare for its most obvious and intended purpose, which is to arrange…
Yeah, writing that importer was certainly annoying. Tumblr's formats are nutty and weird. http://wordpress.org/extend/plugins/tumblr-importer/
I installed the Firefox 4 beta. It's crap. I've now removed it and will no longer be using Firefox. Seriously, it is that bad, and will probably never get any better. RIP Firefox. We hardly knew ye.
In the specific context of a GPL program, no, but there is case law backing up my argument. Micro Star v. Formgen for example, held that a Duke Nukem 3D map file (which contained no code or anything else from the game…
In the case of Excel macros, Microsoft have provided a public API within which to create those programs. This is not the case for WordPress themes. Themes use the internal structures of WordPress to do their work, not…